Disclosure Of Personal Data Research Articles

Decoding privacy concerns: the role of perceived risk and benefits in personal health data disclosure

BackgroundPersonal health data is crucial for effective medical care, personalized treatment, and health monitoring. It enables accurate diagnosis, efficient treatment plans, and informed healthcare decisions. Personal health data should be protected to ensure patient privacy, prevent misuse or unauthorized access, and maintain trust in healthcare systems, thereby safeguarding individuals’ sensitive information from potential harm or exploitation. Therefore, this study aimed to investigate whether perceived risk and perceived benefits have mediating roles in the relationships among individuals’ personal health information disclosure behaviour, perceived control, and privacy concerns.MethodThe population of the study consisted of individuals living in the provinces of Izmir, Konya and Adana. The sample of the study consisted of individuals who were reached through a convenience sampling method. The scales for privacy concerns, perceived control, perceived risk, perceived benefits and information disclosure behaviour were used in the study. Cronbach’s alpha and the AVE were calculated, and a confirmatory factor analysis was performed. A path analysis was performed using the structural equation model to test the hypotheses.ResultsThe analysis revealed a significant negative relationship between individuals’ personal health data disclosure behaviour and their privacy concerns. However, perceived risk and perceived benefit did not mediate this relationship. Additionally, a significant positive relationship was found between individuals’ behaviour of disclosing their perceived control and personal health data, with perceived risk and benefits playing a mediating role in this relationship.ConclusionThe study concluded that as individuals’ concerns about sharing personal health data increase, they are less likely to share these data. It was also found that perceived risk and perceived benefit mediate this relationship. Additionally, higher perceived risk intensifies privacy concerns, further discouraging data sharing, while perceived benefits can mitigate these concerns, promoting greater willingness to disclose health information.

Impact, Compliance, and Countermeasures in Relation to Data Breaches in Publicly Traded U.S. Companies

A data breach is the unauthorized disclosure of sensitive personal data, and it impacts millions of individuals annually in the United States, as reported by Privacy Rights Clearinghouse. These breaches jeopardize the physical safety of the individuals whose data are exposed and result in substantial economic losses for the affected companies. To diminish the frequency and severity of data breaches in the future, it is imperative to research their causes and explore preventive measures. In pursuit of this goal, this study considers a dataset of data breach incidents affecting companies listed on the New York Stock Exchange and NASDAQ. This dataset has been augmented with additional information regarding the targeted company. This paper employs statistical visualizations of the data to clarify these incidents and assess their consequences on the affected companies and individuals whose data were compromised. We then propose mitigation controls based on established frameworks such as the NIST Cybersecurity Framework. Additionally, this paper reviews the compliance scenario by examining the relevant laws and regulations applicable to each case, including SOX, HIPAA, GLBA, and PCI-DSS, and evaluates the impacts of data breaches on stock market prices. We also review guidelines for appropriately responding to data leaks in the U.S., for compliance achievement and cost reduction. By conducting this analysis, this work aims to contribute to a comprehensive understanding of data breaches and empower organizations to safeguard against them proactively, improving the technical quality of their basic services. To our knowledge, this is the first paper to address compliance with data protection regulations, security controls as countermeasures, financial impacts on stock prices, and incident response strategies. Although the discussion is focused on publicly traded companies in the United States, it may also apply to public and private companies worldwide.

Digital firm regulation strategy with privacy data protection costs

AbstractAlthough the significant effects of protecting users' private data in the era of the digital economy have been recognized, digital firm regulation strategies based on privacy data protection costs remain unclear. We propose a theoretical model in which users have different perceived risks related to their personal data disclosure. We characterize how the revenue model of a digital firm shapes its optimal data regulation strategies. We show that the optimal digital service and profit have a positive correlation with the marginal value of two types of user privacy data and a negative correlation with regulatory costs. In addition, the digital firm's optimal digital services and profits are lowest under data privacy regulation at a cost for all users. More important, through the regulation of the social planner, digital firms both improve their digital services and enhance user welfare, which truly achieves the purpose of a “win‐win” outcome.

Confidentiality of Personal Data in Case of Cyberthreats

Despite the presence of the current legal regulation of personal data and their circulation on the Internet, Russia has recently become one of the leaders in personal data leaks. It turns out that the right to confidentiality and the right to protection of personal data are not implemented in the digital environment due to the susceptibility to cyberattacks and the lack of appropriate measures and guarantees in this field. The Russian legislator establishes the obligations of the operator of personal data, including the obligation of the operator to notify the authorized body of the leakage of personal data, as well as administrative, criminal and civil liability for their disclosure. However, there are no effective mechanisms that would prevent leaks and other disclosure of personal data in a preventive manner and would allow full compensation for the damage caused to individuals. The legal doctrine proposes to strengthen the penalties for violations in the field of personal data and specify the possibility of compensation for moral damage to a person who has suffered from a leak. The author’s approach is to provide for the need to check the operator’s activities for violations that led to the leakage of personal data (post-control), as well as to introduce a compliance system that allows preventive prevention of leakages and other violations in the field of personal data (a priori control), and train employees to minimize the risks of disclosure and other illegal use of personal data.

Personal Data in the Mechanism of Criminal Law Protection

Relevance. Ensuring the effective protection of an individual's personal data is of high and enduring importance. Despite the efforts made, in Russia the situation in this regard is deteriorating every year more and more incidents with the leakage of personal data of millions of citizens occur. All this not only generates distrust in the efforts of the state to build a digital economy and e-government, but also acts as a powerful determinant of a number of other crimes (primarily against property).The purpose is to obtain new scientific knowledge about the features, problems and prospects of the criminal law protection of personal data of an individual.The objectives of the study is to identify the problems of implementing the mechanism of criminal law protection of personal data of citizens.Methodology. The methodological base of the research is made up of general scientific and particular scientific methods of cognition of reality, such as analysis, synthesis, induction, formal-legal, abstract-logical and others.Results. In the course of the study, statistical data on the dynamics of infringement on personal data in Russia, law enforcement practice available in the public domain, doctrinal sources and analytical materials were analyzed, interviews were conducted with specialists. Taken together, this made it possible to formulate original provisions that develop the domestic theory of criminal law, to develop recommendations aimed at overcoming the problems of law enforcement in cases of infringement of personal data.Conclusions. Digitalization has led to an increase in social tolerance for violations in the field of inviolability of personal data and privacy. It seems promising to implement a model of differentiation of criminal liability depending on the number of victims of the disclosure of personal data. The mechanism of criminal law protection requires improvement in terms of the development of biometric data technologies. The significance of such personal information requires a differentiated approach to establishing responsibility for illegal actions in relation to biometrics.

Duginast Krimmini. Vene intelligentsi reageeringud sotsiaalmeedias sündmustele septembrist 2022 märtsini 2023

The study that was conducted from September 2022 to April 2023 demonstrates how perceptions of seemingly stable times change in times of crisis (war in Ukraine, repressions, dictatorship, political censorship, etc.). The methodology used in the study allows us to record the reinterpretation of memorable dates and the emergence of new events significant for social media users. The data analysis allows us to form a post facto order of significant events of the end of August 2022 – April 2023. I have conditionally called this order of events a “mental calendar”. The research was aimed at a certain social group of Russian society – intellectuals, who play an important role in the public and media space. The ability to generate narratives, descriptive strategies and interpretive frameworks suggests that the research will allow for a cross-sectional analysis of the perceptions of the entire Russian society. It was fundamental to observe the Russian segment of social networks, those who did not leave and remained in Russia, because this reaction from within demonstrates the plurality of opinions, different survival strategies, etc. This approach yielded important results for understanding what was happening inside the aggressor country, but at the same time had a number of limitations, primarily in the disclosure of the respondents' personal data.

Individual Privacy and Data Protection Rights. The Legal and Economic Consequences of the Violation During the Covid-19 Pandemic

The basic constitutional freedoms and rights of a person and citizen are in principle unlimited: the full scope of their exercise is the rule, and the restriction determined by law can only be an exception based on explicit constitutional authority and the legitimate aim of the restriction determined by the Constitution. That being so, the restrictions - in addition to being based on constitutional authority and pursuing constitutional objectives - should be commensurate with the needs to achieve these objectives. This means that restrictive legal rules must be suitable for achieving the legitimate aim pursued, must not be stricter than necessary and must be balanced between the constitutionally guaranteed subjective right of the individual and the interests of society.In this paper, the authors point out the economic and legal consequences of the violation of individual privacy and data protection rights caused by the public disclosure of personal data of people who, at a certain time, were obliged to self-isolate due to suspicion of Covid-19 virus infection. 

Interes prawny w procesie o stwierdzenie nieważności małżeństwa przed sądem kościelnym

The judgment of the Supreme Administrative Court of 8 May 2015 confirmed the existence of a legal interest already at the stage of “legal possibility” to initiate proceedings for declaring the nullity of marriage. This interest determines the trouble-free – in contrast to the actual interest – disclosure of personal data of the opposing party. In addition, implementing the provisions of the Concordat, the fact was emphasized that a legal interest can be had not only in a trial before a secular court, but also in proceedings before an ecclesiastical court. What is more, the judgment of the Supreme Administrative Court draws attention to the importance of the fundamental procedural principle audiatur et altera pars. It enables the respondent to defend itself by presenting its position, which in the process of declaring the nullity of marriage takes a special form, because the overriding value is the objective truth about the existence or non-existence of a given marriage.

Personal data protection on the internet under martial law: The case of Ukraine

The objective of this study is to determine the threats to the security of personal data on the Internet as a component of the right to privacy in the conditions of martial law, characteristics and prospects of such legal data protection in the context of Ukraine. Methodology: The study used a set of practical methods, namely: formal and legal, comparative forecasting. These methods were used to examine and classify threats to the security of personal data on the Internet under martial law conditions. Results: The study identified a number of threats to the security of personal data on the Internet under martial law conditions, including: unauthorized access to personal data, alteration or destruction of personal data, disclosure of personal data to third parties without the consent of the data owner, use of personal data for unlawful purposes. The study also examined factors that complicate data protection during cross-border sharing, including: differences in data protection laws and regulations between countries, lack of cooperation between governments on data protection, the complexity of cross-border data exchange processes. Conclusions: The findings of the study suggest that increasing the protection of personal data under martial law conditions requires a comprehensive approach that includes regulatory, organizational and communication measures. In particular, it is necessary to: strengthen data protection legislation under martial law conditions, develop cooperation mechanisms between governments on data protection, promote data protection education and awareness among citizens and organizations.

INFORMATION CENTER ON COVID-19 VIA WHATSAPP®: an experience report

Objectives: To report the experience of participating as a volunteer in the extension project “Information Center on COVID-19 via WhatsApp®”, created with the aim of meeting the information demands of the population (health professionals and the community in general). Using the most popular social network among individuals of all ages as a tool to combat misinformation, due to the social network's wide reach, without carrying out any type of disclosure of personal data or the content of the participants' conversations. Experience Report: The project had a great social role by disseminating scientifically based information in an accessible way to residents of several municipalities in the state of Sergipe and other states and regions, providing guidance, clarifying doubts about how to deal with the health situation, inform about the epidemiological data of the pandemic (numbers of deaths and infected). Conclusion: Participating as a volunteer in the information center contributed to the development of leadership skills, interaction with the public, skills in using google drive and scientific research, in addition to adding knowledge about SARS-CoV-2 and the epidemiology of COVID -19. In addition, it was possible to help the community, contributing to the best popular information and combating the pandemic.

Discrimination on the Basis of Personal Data in Employment: The Case Study of Lithuania

Abstract This article examines what kind of personal data disclosure may make it difficult to get employed and what kind of excessive (unlawful) data is collected when selecting candidates in Lithuania. The analysis reveals that there have been a number of justified complaints regarding the selection of employees via recruitment platforms and the provided application forms that specifically requested an excessive amount of information, or situations in which the conditions indicated in job listings were adapted to a specific circle of people, thus eliminating other potential candidates, such as persons of pre-retirement age, young families, persons with children, persons of a particular gender and similar groups of people. The purpose of this article is to identify methods of unlawful collection of personal data, as well as the types of requested personal data, the origin of which may lead to discrimination during the recruitment process in Lithuania. The article analyses the legality of documents requested from candidates, data collected from them by filling out application forms and providing preliminary or additional information during job interviews, or information gathered from former employers or social networks.

Impacts of Store Trust Antecedents on Willingness to Disclose Personal Data in Online Shopping

Personal data disclosure is crucially important to modern business, and specifically – to online stores. It is largely predicted by the willingness to disclose personal data that significantly varies among emerging economies due to impacts of numerous factors. One of the important factors that impacts willingness to disclose personal data in online shopping is trust in an online store. However, the importance of trust in a store partly occurs because it mediates effects of other antecedents. This study conceptualizes three groups of important antecedents: personal, infrastructural and store-related factors. The study tests indirect effects of the most typical factors from each group: general trust (personal factor), legal regulations (infrastructural factor) and presence of an off-line selling channel in addition to the online channel offered by a store (e-store factor) on willingness to disclose personal data online. The findings show that all these factors, mediated by store trust, have significant positive effects on willingness to disclose personal data. The findings contribute to the knowledge of the groups of factors that impact willingness to disclose personal data online and help to set directions for future research.

Public disclosure of personal data before the European Court of Human Rights and the General Court of the European Union

Public disclosure of personal data before the European Court of Human Rights and the General Court of the European Union

Don't Peek at My Chart: Privacy‐preserving Visualization for Mobile Devices

AbstractData visualizations have been widely used on mobile devices like smartphones for various tasks (e.g., visualizing personal health and financial data), making it convenient for people to view such data anytime and anywhere. However, others nearby can also easily peek at the visualizations, resulting in personal data disclosure. In this paper, we propose a perception‐driven approach to transform mobile data visualizations into privacy‐preserving ones. Specifically, based on human visual perception, we develop a masking scheme to adjust the spatial frequency and luminance contrast of colored visualizations. The resulting visualization retains its original information in close proximity but reduces visibility when viewed from a certain distance or farther away. We conducted two user studies to inform the design of our approach (N=16) and systematically evaluate its performance (N=18), respectively. The results demonstrate the effectiveness of our approach in terms of privacy preservation for mobile data visualizations.

Cannabis Consumers’ View of Regulated Access to Recreational Cannabis: A Multisite Survey in Switzerland

Introduction: There is considerable effort in legalizing recreational use of cannabis globally. The successful implementation of a program of regulated access to recreational cannabis (PRAC) depends on the consumers’ engagement. The aim of this study was to examine the acceptability of twelve different regulatory aspects by cannabis users including those obtaining cannabis from the illicit market and vulnerable populations such as young adults and problematic users. Methods: The current study is a multisite online survey conducted in Switzerland. A total of 3,132 adult Swiss residents who consumed cannabis within the previous 30 days represented the studied population. Mean age was 30.5 years, 80.5% were men, and 64.2% of the participants stated that they always or often obtain cannabis from the illicit market. We described consumers’ acceptability of twelve regulatory aspects concerning THC content control, disclosure of sensitive personal data, security aspects, and follow-up procedures by applying descriptive statistics and multiple regression models. Results: THC content regulation showed most discrepancy with 89.4% of the participants stating to engage in a PRAC if five different THC contents were available as compared to 54% if only 12% THC was available. The least accepted regulatory aspect was disposal of contact details with an acceptability rate of 18.1%. Consumers mainly obtaining cannabis from the illicit market, young adults, and problematic users showed similar acceptability patterns. Participants obtaining cannabis from the illicit market were more likely to engage in a PRAC if five different THC contents were available as compared to participants obtaining cannabis from other sources (OR 1.94, 95% CI: 1.53–2.46). Conclusion: A carefully designed PRAC that takes into account the consumers’ perspective is likely to transfer them to the regulated market and to engage vulnerable populations. We cannot recommend the distribution of cannabis with only 12% THC content as this is unlikely to engage the target population.

Protection of Personal Data in Business: An Overview of the Perspective of Business Ethics and Its Implications for Regulatory Compliance

This paper aims to provide a comprehensive analysis of the protection of personal data in the business sector from the perspective of business ethics. With the increasing use of technology and the internet, the use of personal data have become prevalent in the business world. However, the misuse of personal data has also become a significant concern for individuals and regulators alike. In this study the ethical considerations surrounding the use and disclosure of personal data by businesses. Businesses have a moral obligation to protect the personal data of their customers and stakeholders and that adherence to ethical principles is essential for long-term sustainability. This paper highlights the importance of ethical standards in the use of personal data in business

Addressing the Challenges of Data Privacy Protection Law in Vietnam

The Internet has substantially changed human behaviors in the way of accessing and exchanging information – including personal data – easier and faster than ever. Frontier-less nature of the Internet not only enables the free flow of data across countries, but also brings new challenges including risks to privacy.
 Under the state surveillance, Vietnam has regulated differently privacy from the state and privacy from private actors. The utmost priority focused on regulating cyber activities that impact national security and social order and safety, which is reflected in Law on Cybersecurity No. 24/2018/QH14 on June 12, 2018.
 For personal data protection, the rules for the collection, storage, processing, use, disclosure, and publication of personal data are set out in Vietnam’s Civil Code 2015 and in multiple sectorial laws besides a general framework for data protection promulgated in Law on Network Information Security No. 86/2015/QH13 (Nov 19, 2015). However, these rules are drafted in broad language and are open to interpretation; however, there has been no repository for precedent till now.
 Recently, in order to enhance the best effort in protecting personal data, Vietnam updated its legislative agenda and planned to enact an initial decree on Personal Data Protection drafted by Vietnamese Ministry of Public Security after its first issuance in 2019. This updated draft has a more robust set of rules regulating specific rights of data subjects, cross-border transfer of data, and processing of sensitive personal data, which clarified mostly the longstanding speculation about the direction of Vietnam’s data protection regime beyond state surveillance.
 The objective of the present article is to point out the current status of the legal system in protecting personal data, its potential obstacles to effective protection of the right to data protection, and to put forward solutions for removing those obstacles with regard to data protection in Vietnam.

Cybersecurity of the municipal infrastructure

A modern city is a complex system that requires a unified systematic approach to ensuring public safety, law and order and environmental safety in the face of high levels of both man-made and natural risks. Due to the growing role of information technology in the functioning of a modern city, the threat of cyberattacks on critical municipal infrastructure has increased. The cost of such cyber-attacks can be very high, both for individual victims and for society as a whole. Cyberattacks can lead to the theft of sensitive information, data destruction or the disclosure of personal data. In addition, such attacks can lead to loss of working time and suspension of systems, which can have serious consequences for the city’s viability.
 The experience of other countries in protecting critical municipal infrastructure from cyber threats has been studied, analysed and summarised. The impact of the latest information technologies (such as the Internet of Things, artificial intelligence, blockchain) on the development of municipal infrastructure, the use of these technologies to protect critical infrastructure from cyberattacks, their advantages and disadvantages compared to classical security technologies have been considered. Particular attention has been paid to the problems of safe automation of modern city management processes such as automation of traffic control systems, environmental monitoring systems, financial systems, power grids, water and gas supply systems, communication systems, and control systems for wastewater treatment plants. The features of cyber attacks and the use of methods for protecting critical infrastructure in the context of hybrid warfare have been examined. Recommendations for a comprehensive increase in the level of protection of municipal critical infrastructure from cyber threats have been provided, taking into account the latest global trends in cybersecurity.

Tackling Data Disclosure Comparatively – Conference ‘Vectors of Data Disclosure’ in Munich, 27 and 28 June 2022

Abstract The disclosure of personal data and the decision by individuals to do so is ubiquitous. Which aspects influence this decision? How is disclosure regulated in different jurisdictions and how far do protective mechanisms go in favor of the ‘data subject’? These questions only scratch the surface of topics which the University of Passau research project ‘Vectors of Data Disclosure’ is addressing comparatively and with regard to Brazil, China, the European Union, Ghana, Japan, Russia, Switzerland, and the United States since January 2021. The project takes an interdisciplinary approach and aims to tackle these questions by combining cultural, legal, and business information systems perspectives. The project is led by Moritz Hennemann, Daniela Wawra, Kai von Lewinski and Thomas Widjaja. Concluding the first 18 months of the project, the project team invited international experts from different disciplines to Munich, offering a platform to discuss new insights and receive feedback on the project’s preliminary research results so far.

Differentially private distributed logistic regression with the objective function perturbation

Distributed learning is a very effective divide-and-conquer strategy for dealing with big data. As distributed learning algorithms become more and more mature, network security issues including the risk of privacy disclosure of personal sensitive data, have attracted high attention and vigilance. Differentially private is an important method that maximizes the accuracy of a data query while minimizing the chance of identifying its records when querying from the given data. The known differentially private distributed learning algorithms are based on variable perturbation, but the variable perturbation method may be non-convergence and the experimental results usually have large deviations. Therefore, in this paper, we consider differentially private distributed learning algorithm based on objective function perturbation. We first propose a new distributed logistic regression algorithm based on objective function perturbation (DLR-OFP). We prove that the proposed DLR-OFP satisfies differentially private, and obtain its fast convergence rate by introducing a new acceleration factor for the gradient descent method. The numerical experiments based on benchmark data show that the proposed DLR-OFP algorithm has fast convergence rate and better privacy protection ability.