Privacy-compliant Disclosure of Personal Data to Third Parties

Abstract

Abstract Privacy in cloud computing is at the moment simply a promise to be kept by the software service providers. Users are neither able to control the disclosure of personal data to third parties nor to check if the software service providers have followed the agreed-upon privacy policy. Therefore, disclosure of the users´ data to the software service providers of the cloud raises privacy risks. This project focuses on enhancing the trust model of the practice so that users and auditors, e. g., data protection officers, can check whether software service providers have followed the agreed-upon privacy policy for a disclosure of personal data to third parties. As a countermeasure by an ex post enforcement of privacy policies, we propose to observe disclosures of personal data to third parties by using data provenance history and digital watermarking.