Personal Information Protection Research Articles

Concerns regarding the accessibility of self-service interactive devices for people with disabilities.

Self-service interactive devices allow users to access information or services without directly interacting with service personnel. As the prevalence of disability increases, it is important to consider the barriers individuals face in using these devices and explore opportunities to increase accessibility through assistive and adaptive technologies. This study aimed to establish recommendations to enhance the accessibility of self-service interactive devices, with the objective of understanding users' experiences with these devices. Nineteen semi-structured interviews were held with stakeholders focusing on accessible design for people with disabilities, categorized as (a) persons with lived experiences with disability, (b) disability advocates, or (c) assistive technology industry experts. The study used content analysis to identify recurring concepts and opportunities to improve accessibility. Participants discussed the potential benefits of updating or incorporating additional accessibility technologies into self-service devices and proposed solutions to existing deficiencies. Common concerns expressed among participants included the privacy and security of self-service devices, protection of personal information, and the consistency and usability of devices. Participants also suggested how this inconsistency could be mitigated and how to improve existing accessibility functionalities. Accessible functionalities in self-service devices have the potential to help address the unmet needs of Canadians with disabilities. With the breadth of available accessible and adaptive technologies, the study concludes that it is imperative to understand (1) what technologies are useful to people with disabilities, (2) whether the inclusion of these technologies is feasible in self-service devices, and (3) how user experience can be improved.

Promotion and Advancement of Data Security Governance in China

In this age of digital economy, issues relating to the data security and personal privacy of multimedia systems are increasingly manifesting in the form of unprotected data. The level of governance capability for data protection determines whether the data security and personal privacy of multimedia systems can be protected and developed in the future. In recent years, China has introduced laws and regulations on the protection of personal information, personal privacy, data security, and cybersecurity. Although data protection still needs to be improved, China has been refining the framework and provisions on data security governance through certain practices and the adoption of supporting regulations. The country aims to rapidly promote the current governance capability of data security and gradually form a good institutional environment to support international collaboration in the realm of global data security.

Analysis of the Criminalization of the Production and Sale of Online Game Plug-ins and the Regulation of Users

With the advent of the Internet information age, the game industry is booming, and online game plug-ins have come into being as cheats. From the definition and classification of online game cheats, it is found that the crimes involved mainly include the crimes of destroying computer information systems, copyright infringement, illegal business operations, and illegal computer intrusion under the Criminal Code of China, as well as the Personal Information Protection Law and the Unfair Prevention Law touched by the Japanese Criminal Law. This paper analyzes the possibility of criminalization and punishment of online game plug-in producers and sellers from three aspects: the main body of the online game market, policy orientation, and legal improvement. Comparing the criminalization and punishment of Chinese and Korean network plug-in users, it is possible to refer to the legal measures in South Korea.

DATA SECURITY IN COMMUNICATION USING BLOCKCHAIN AND KEY BASED PROTOCOL

Satellite communications play an important role in the development of global communications networks. Recently, satellite networking has been receiving a lot of attention as a solution to alleviate the limitations of terrestrial networks due to low stability and coverage. It has many disadvantages, including low processing power, storage space, and limited data security. Illegal access has become a problem. Data processing power is minimal, storage space and data security are limited due to regional power availability and physical satellite limitations, and data can be modified or accessed by malicious users. As the importance of satellite communication increases in the development of global communication networks, concerns about the security of satellite communication are also growing. This project proposes a satellite communication network using blockchain technology and QKD protocol based on authentication and personal information protection. To achieve this goal, an architecture was built consisting of traditional and constrained devices connected to the blockchain over a wireless heterogeneous network. Communication uses registration, authentication, and cancellation. The satellite transmits the received data to a base station on the ground, which stores all key parameters in the decentralized blockchain and removes all invalid node certificates from the blockchain. The proposed blockchain and QKD satellite system provides a high level of security for future 6Gandbeyond networks, Internet of Things, autonomous vehicles and other rapidly developing applications.

Criminal Protection of Public Personal Information in the Digital Era

The digital era has accelerated the speed and breadth of information dissemination. While enjoying the information dividend, the security of personal information has hidden dangers of leakage. For public personal information, this concern is even worse. On the theoretical level, the secondary authorization theory, the purposiveness theory, and the objective openness standard theory cannot fully respond to the reality and urgency of repeated violations of public personal information. On the level of judicial practices, the guiding cases of personal information protection issued by the Supreme People’s Court enlighten us that we should give classified protection to public personal information. Typed protection mode classifies the public personal information from the perspectives of voluntary disclosure, compulsory disclosure, and illegal disclosure, and considers whether it is convicted or not from three aspects: the subjective illegality of the doer, the scope of information control of the information subject and the measurement of public and private interests, which strengthens the protection of the public personal information.

In the name of protection—A critical analysis of China's legal framework of children's personal information protection in the digital era

This article provides a critical analysis of the China's legal framework of children's personal information protection in the digital era. It demonstrates that Chinese lawmakers adopt a dual-protection paradigm consisting of data privacy law and family law to protect children's personal information. In the field of data privacy law, China's Personal Information Protection Law regards children's personal information as sensitive information, and provides all contexts-based protection through the parental consent system, resulting in severe restrictions on children's freedom of access to information and their evolving capacities. In the field of family law, the Minors Protection Law fragments the right to informational self-determination of children while applying hard legal paternalism with respect to the online live-broadcast for children, limiting children's fundamental right to freedom of expression and depriving parents of the right to the custody of their children. Based on research in developmental psychology, this article argues that different legal frameworks should be adopted according to different age groups of children to protect the best interest of the child. In this way, the balance between the protection and informational self-determination of children in the digital era can be achieved.

Clarifying the legal requirement for cross-border sharing of health data in POPIA: Recommendations on the draft Code of Conduct for Research

The draft Code of Conduct for Research is an important initiative towards assisting the scientific community in complying with the provisions of the Protection of Personal Information Act 4 of 2013 (POPIA). However, its approach towards cross-border data sharing should be reconsidered to clarify the ambiguities inherent in the legal requirements for the cross-border sharing of health data in the POPIA. These ambiguities include the concept of ‘transfer of information’, the application of adequacy as a legal mechanism for transfer, the nature of consent for cross-border sharing and the scope of the recipient third party. We suggest that the draft Code of Conduct for Research can be improved by: Explaining or defining the concept of ‘transfer of information’ and when it applies to cross-border sharing in research Clarifying the application of adequacy as a legal mechanism for transfer vis-à-vis the other alternatives Expanding on the interpretation and application of consent as a legal mechanism for cross-border transfers Expanding the category of persons who may be recipients of personal information in a third country

Understanding Chinese Internet Users' Perceptions of, and Online Platforms' Compliance with, the Personal Information Protection Law (PIPL)

The Personal Information Protection Law (PIPL) was implemented in November 2021 to safeguard the personal information rights and interests of Internet users in China. However, the impact and existing shortcomings of the PIPL remain unclear, carrying significant implications for policymakers. This study examined privacy policies on 13 online platforms before and after the PIPL. Concurrently, it conducted semi-structured interviews with 30 Chinese Internet users to assess their perceptions of the PIPL. Users were also given tasks to identify non-compliance within the platforms, assessing their ability to address related privacy concerns effectively. The research revealed various instances of non-compliance in post-PIPL privacy policies, especially concerning inadequate risk assessments for sensitive data. Although users identified some non-compliant activities like app eavesdropping, issues related to individual consent proved challenging. Surprisingly, over half of the interviewees believed that the government could access their personal data without explicit consent. Our findings and implications can be valuable for lawmakers, online platforms, users, and future researchers seeking to enhance personal privacy practices both in China and globally.

Dilemma and Solution: On the Prosecution Subject of Civil Public Interest Litigation for Personal Information Protection

Combined with the judicial practice of personal information protection civil public interest litigation and the provisions of Article 70 of the Personal Information Protection Law, there is a great controversy between the theoretical and practical circles on the subject of such litigation. Although the existing provisions define the subject of prosecution as three categories: the people’s procuratorate, the consumer organization stipulated by law and the organization determined by the national network and information department, the problems of unclear scope of the subject, unclear scope of functions and unclear order of prosecution have not been solved. In order to improve the effectiveness of the protection of personal information rights and interests, we should clarify the scope of the functions of each prosecution subject, straighten out the order of prosecution, confirm the status of the procuratorial organ as a supplementary prosecution subject, expand the scope of “consumer organizations stipulated by law,” and clarify the conditions of “organizations determined by the national network information department.”

The prevalence of cybercrimes and hacking incidents and their impact on the confidentiality of documents in civil proceedings

Confidentiality is important in legal practice as it obligates legal practitioners to protect clients' information. It is often linked to the right to privacy entrenched in section 14 of the Constitution of the Republic of South Africa, 1996. The link is made on the basis of clients' entitlement to attorney-client confidentiality. Furthermore, the rules of courts in civil proceedings require legal practitioners to include clients' personal or confidential information in court documents, including their identity numbers. The requirement of clients' personal information in court documents is found in particular in Rule 3(A)(1)(b)(i) of the Uniform Rules of Court, 2009 as amended. This personal information is uploaded online in the CaseLines system, as required by Practice Direction 1 of 2023, a situation which poses a significant risk because such information may be hacked and used to commit cybercrimes. Current legislation, such as the Protection of Personal Information Act 4 of 2013, seeks to provide guidelines on how courts should protect confidential information which is included in the pleadings or affidavits. The Practice Directives, however, are silent on measures that should be taken to protect confidential information. Item 18 of the E-Rules and the Draft Amended Magistrates' Courts Rules seek to protect confidential information to a certain extent, but these have not yet been implemented. The article examines current legislation, the respective rules of court, and the approach followed by the courts, in order to determine whether confidentiality does indeed exist in civil proceedings. In addition, it briefly compares the online civil proceedings of South Africa and the United Kingdom to ascertain their differences and similarities.

DATA BREACHES EXIT STRATEGY: A COMPARATIVE ANALYSIS OF DATA PRIVACY LAWS

Data has become highly valuable in the era of digitalisation and is the main target of cybercriminals. Cybercriminals steal data by exploiting system vulnerabilities. The rise of catastrophic data breach incidents affects business operations, reputation and legal standing, leading to business disruptions, financial loss and reputation damage. These incidents have raised data security concerns. The frequent incident is partly due to insufficient security measures in place. This article employs doctrinal research focusing on legal principles based on legislation to analyse Malaysia’s legal framework for protecting personal data in Malaysia and a comparison with other jurisdictions, i.e. the European Union General Data Protection Regulation (GDPR), the Singapore Personal Data Protection Act 2012 and the China Personal Information Protection Law (PIPL). The findings show that Malaysia’s data protection laws fall short of the international norm in some areas. This article suggests that Malaysian policymakers may amend the Personal Data Protection Act 2010 to align with international data protection standards to strengthen data security measures in preventive, detective and responsive data breaches. Consequently, this article provides an analysis of data protection laws in Malaysia and compares them with other advanced jurisdictions. It offers valuable insights into the challenges and opportunities involved in safeguarding personal data, the legal framework, and organisational strategies related to data privacy and security.

PROTECTION OF INFORMATIONAL PRIVACY IN THE WORKPLACE GIVEN THE ADVANCEMENT IN TECHNOLOGY

The introduction of electronic communication in the workplace has changed how employers conduct their business and, in turn, the way that employees are expected to perform their duties. Increased electronic communication services in the workplace have infused the physical employment environment with electronic communication technology. The increase in this form of communication threatens the employee’s right to privacy in today’s workplace, which is characterised by reliance on information communication technology (ICT), and in particular, the use of emails and the Internet to conduct business. The purpose of this article is to suggest a frame of reference that could assist with the implementation of the Protection of Personal Information Act (4 of 2013) (POPIA) by organisations that process personal information in South Africa based on the conditions provided in POPIA.

Introducing dynamic consent for improved trust and privacy in research involving human biological material and associated data in South Africa.

Biomedical research using human biological material and data is essential for improving human health, but it requires the active participation of many human volunteers in addition to the distribution of data. As a result, it has raised numerous vexing questions related to trust, privacy and consent. Trust is essential in biomedical research as it relates directly to the willingness of participants to continue participating in research. Privacy and the protection of personal information also influence trust. Informed consent has proven to be insufficient as it cannot overcome the informational deficit between primary and unknown future uses of material and data and is therefore not fully informed and invalid. Broad consent is also problematic as it takes full control of samples and data flow from the research participant and inherently requires that a participant must trust that the researcher will use their material or data in a manner that they would find acceptable. This paper attempts to offer some insight into how these related issues can be overcome. It introduces dynamic consent as a consent model in research involving human biological material and its associated data. Dynamic consent is explained, as well as its claims of superiority in instances where future research is possible. It is also shown how dynamic consent contributes to better control of the samples and data by the research participant, and how trust may be improved by using this consent model. Dynamic consent's co-existence with and support of the South African Protection of Personal Information Act of 2013 is also assessed. The limitations of dynamic consent are also discussed.

노인맞춤돌봄서비스 현장에서 ICT 활용과 사회복지 종사자의 전문가 윤리 기반 실천경험 연구

The use of science and technology and ethical considerations have recently been applied to the field of social welfare, and professional ethics for social welfare workers is emerging as a major task. In order to actively reflect these changes of the times, the ‘Korean Code of Ethics for Social Workers’ was revised in 2023 to strengthen the scientific and technological ethical standards of social workers. This study explored the meaning and limitations of social worker professional ethics for dedicated social workers who provide ICT services, focusing on customized care services for the elderly. In addition, directions for the use of science and technology and the professional development of social workers were proposed. To conduct this research In-depth interviews were conducted with five social workers working in customized care services for the elderly and analyzed using a qualitative case study method. As a result of the study, it was analyzed that 1) “Recognition of the need for training related to the use of ICT care devices and insufficient ethics education system”, 2) “Ethical issues that prevent workers from developing expertise and expanding services related to the use of ICT”, 3) “Ethical issues due to the structure of ICT safety support services that require sacrifices of workers”, 4) “Ethical issues due to personal information protection infringement and absence of alternative services that occur when responding to safety support”, 5) “Providing ICT devices with low technological acceptability to clients It was analyzed as an “ethical problem that arises from its use.”Based on the results of this study, policy and practical approaches and alternatives were presented to improve social welfare expertise related to the use of science and technology.

Research on the legal framework of personal information privacy protection in automated administrative environment: centered on data security and rights balance

In the digital age, with the increasing importance of personal information, especially in the field of automated administration, the protection of personal information is particularly urgent. Ensuring the security of personal information in automated administration not only helps to safeguard the realization of individual dignity rights and meet the inherent requirements of the principle of proportionality, but also regulates the use of algorithms to avoid discrimination. However, although the legislation on the protection of personal information in automated administration has made some progress, there are still some shortcomings: the legislation is not directly specified, the law is not operable, the supervision and management mechanism is not perfect; There are also problems at the law enforcement level: improper use of immunity in administrative procedures, excessive expansion of the scope of personal information processing; In the relief aspect, there are also challenges: the provisions of administrative public interest litigation are vague, and there are loopholes in the way of liability. In order to improve the protection mechanism of personal information in automated administration, it is necessary to expand the direct regulation of automated administration in legislation, enhance the operability of laws, and improve the supervision and management mechanism of personal information. At the same time, it is also necessary to amend the administrative due process and strictly implement the principle of least necessity at the level of law enforcement. In terms of relief, the applicable rules of administrative public interest litigation should be clarified, and more targeted ways of assigning blame should be established.

Research on the Status Quo and Dilemma of Minors' Personal Information Protection

With the rapid development of mobile Internet, minors' personal information is inevitably collected and processed by various information processors. Due to the characteristics of immature mental development and weak risk prediction ability of minors, it is difficult to effectively protect their personal information security. Although China's "Personal Information Protection Law" makes provisions on the protection of minors' personal information, there are still some problems such as "one-size-fits-all" age limit and imperfect guardian consent system. This paper will test the current hundreds of various types of apps, conduct a questionnaire survey on the protection of personal information of minors and their guardians, analyze the current dilemma of the protection of personal information of minors at the social level, propose countermeasures according to the symptoms, and explore more targeted ways to protect the rights and interests of minors' personal information. Escort the physical and mental healthy development of minors under the background of the information age.

Factors influencing interprofessional collaboration in long-term care from a multidisciplinary perspective: a case study approach

ABSTRACT Systematic assessments of interprofessional collaboration barriers and enablers in long-term care settings are critical for delivering person-centered healthcare. However, research on factors influencing interprofessional collaboration in long-term care settings is limited. For this study, 65 healthcare professionals across multiple facilities experienced in long-term care in Japan participated in online focus group discussions and individual interviews to discuss cases. The qualitative data were analyzed using qualitative content analysis. Seven themes emerged: coordination, the need for care manager training, hierarchy among healthcare professionals, specialization but not the mind-set of overspecialization, casual conversations, electronic group communication tools, and excessive fear of personal information protection. These findings highlight the need to develop coordinator roles and for interprofessional education on the proper approach to personal information protection laws. Furthermore, daily casual conversations, the use of online platforms, and the prevention of patients being left behind due to overspecialization are required.

Exploring South Africa’s Cybersecurity Legal Framework regulating Information Confidentiality, Integrity, and Availability

The discussion critically evaluates the effectiveness of laws dealing with cyber threats within the context of the South African cybersecurity landscape. It deals with the legal response to non-state cyber operations to national security and law enforcement by means of the domestic law and not with state or state-sponsored cyber operations which falls within the remit of the international law. Globally the digital ecosystems of all countries face a common denominator, namely the threat of cyber operations and how to deal with it effectively. There are various cyber operations, but the discussion mainly deals with cyber operations that target the confidentiality, availability and integrity of information and the effectiveness of the South African cybersecurity legislation in protecting information. The effectiveness of the following legislation will be deliberated: • The Protection of Personal Information Act (POPIA) 4 of 2013. POPIA does not define a data breach, nor does it indicate the time in which the breach must be reported to the Information Regulator (IR). In 2021 the Department of Justice and Constitutional Development (Department) suffered a ransomware attack. The breach was reported to the IR. In July 2023 the Department became the first institution to be fined for failure to comply with an enforcement notice. • The Cybercrimes Act 119 of 2021. The ransomware attack suffered by the Department in 2021 constitutes a cybercrime, but how effective is the Cybercrimes Act to facilitate the investigation and prosecution of the threat actor(s) who orchestrated the attack? Should there not be guidelines in respect of a ransomware attack prescribing a compulsory reporting obligation or discouraging payment of ransom. The first line of defense to offensive non-state cyber operations is a robust and resilient cybersecurity legal framework. Although a government cannot eliminate all possible threats, it can mitigate the risks, and this can be achieved by means of a comprehensive cybersecurity strategy. A country should have a cybersecurity strategy and it will be determined if for example the 2023 United States of America cybersecurity strategy could serve as guidance to South Africa. Why is your paper of interest to the conference participants? Use this space to persuade the reviewers why they should select this abstract for the conference : In today’s digital world, one cannot ignore the importance of cybersecurity. One single security breach may result in the exposure of the personal information of millions of people. Cybersecurity legislation is therefore essential to ensure the protection of government departments, institutions, businesses and individuals against malicious cyber operations.

Forcing a square into a circle: why South Africa's draft revised material transfer agreement is not fit for purpose.

The South African National Health Research Ethics Council (NHREC) recently released a final draft revision of the standard material transfer agreement (MTA) that was promulgated into law in 2018. This new draft MTA raises pertinent questions about the NHREC's mandate, the way in which the draft MTA deals with data and with human biological material, and its avoidance of the concept of ownership. After South Africa's data protection legislation, the Protection of Personal Information Act (POPIA), became operational in mid 2021, the legal landscape changed and it is doubtful that the NHREC has a residual mandate to govern personal information in health research. Furthermore, data is dealt with in a superficial, throw-away fashion in the draft MTA. The position with human biological material is not substantially better, as the draft MTA fails to recognise that human biological material can contain pathogens, which has important legal and ethical ramifications that are not sufficiently addressed. A central problem with the draft MTA is its use of the term 'steward', and avoidance of the legal concept of 'ownership'. This is not only misaligned with the South African legal framework, but also fails to consider the ethical case for recognising ownership. Finally, a call to embrace decolonial thinking in health research underscores the importance of recognising ownership in order to foster the growth of the local bio-economy. Key recommendations to reshape the draft MTA include: Making use of the eventual revised MTA optional, and allowing it to evolve with input from scientific and legal communities; regulating the transfer of associated data in a separate data transfer agreement that can be incorporated by reference in the MTA; enhancing guidance on liability and risk management in respect of human biological material that contains pathogens; and, finally, adopting a decolonial approach in health research governance, which requires recognising the ownership rights of South African research institutions.

VLSI Implementation of Speech Steganography with Advanced Wavelet Transform

In the realm of secure communication systems, the integration of advanced wavelet transforms into speech steganography systems has emerged as a promising path. Secure transmission of sensitive information in military communications, confidential exchange of data in corporate environments, and protection of personal information in telecommunication networks. However, the current system employs conventional methods of speech steganography, relying on basic encryption techniques and simplistic embedding algorithms. While functional, these approaches lack robustness and fail to adequately conceal secret data within speech signals, leaving them vulnerable to detection and interception. So, the proposed system leverages advanced wavelet transforms to enhance the security and efficiency of speech steganography. By exploiting the multi-resolution analysis capabilities of wavelets, the system achieves improved embedding capacity while maintaining perceptual transparency. Additionally, the use of dynamic embedding algorithms based on wavelet coefficients ensures adaptability to varying signal characteristics, enhancing robustness against attacks and noise interference. The VLSI implementation of this system optimizes resource utilization and computational efficiency, making it suitable for real-time applications in communication systems.