Privacy Of Personal Data Research Articles

Transparencia y protección de datos personales en la cadena de bloques (blockchain)

Cada día son más las amenazas en torno al tema de la violación de datos personales, donde la privacidad y seguridad de la información son el principal reto en esta era de la información y comunicación. La tecnología Blockchain llega como una revolución por sus características de inmutabilidad, confianza, transparencia, descentralización y distribución en los registros, convirtiéndola en una tecnología disruptiva que llega a romper los paradigmas tradicionales respecto a cómo percibimos el mundo. En su desarrollo y aplicación, nos plantea muchas interrogantes, principalmente con la compatibilidad, privacidad y protección de datos personales, razón por la cual se examinará de manera general cómo funciona esta tecnología disruptiva, la intersección que tiene con las normas legales, y las posibles encrucijadas en que deberán dialogar y resolverse, para que las personas sean verdaderos dueños de su identidad y de sus datos personales.

The Effects of Applying Privacy by Design to Preserve Privacy and Personal Data Protection in Mobile Cloud Computing: An Exploratory Study

Mobile cloud computing (MCC) is a domain that stemmed from advances in mobile technology and cloud computing. Although debate continues about the best strategies to preserve privacy and personal data protection in MCC, it is essential to explore the effects of applying privacy by design (PbD) to preserve privacy and personal data protection in MCC. PbD is a general philosophy that demonstrates privacy should not be overviewed as an afterthought, but rather as a first-class requirement in the design of IT systems. This study explores the effects of applying PbD to preserve privacy and personal data protection in MCC, and is focused on the privacy of personal data. In this exploration, a framework using PbD has been demonstrated, and seven hypotheses were formulated. Moreover, a survey was implemented where 386 responses were used to test the formulated hypotheses. The results of this study supported the perceived benefits, cues to action of PbD, and perceived threat are positively and directly related to privacy and personal data protection behavior in MCC. Moreover, the results supported that the perceived barriers are negatively and directly related to privacy and personal data protection behavior in MCC. Overall, the results support the utilization of PbD to preserve privacy and personal data protection in MCC and encourage the practitioners to utilize PbD to preserve privacy and personal data protection in MCC.

Home Ice Advantage: Securing Data Sovereignty for Canadians on Social Media

More than three in four Canadians use social media platforms to connect with others here at and around the world, often sharing life’s most intimate moments through public posts and private messages. In doing so, Canadians entrust these companies to secure and protect their personal data, which can include a wide range of sensitive information, such as their political opinions, or details on their sex life, personal finances and health. These companies are also entrusted to secure the sensitive data that they track and store, such as users’ location, search histories and biometric information such as facial features. But that trust is waning. Our surveys of Canadians indicate that social media platforms are the least trusted organizations in Canada to keep personal data secure and to act in the best interests of the public. As legal battles swirl between Europe, the U.S. and China over how to protect Facebook and TikTok data travelling across borders, there remain inadequate protections over how Canadians’ personal data are transferred and stored. This threatens Canadian sovereignty, and the digital security and privacy of millions of Canadians. Personal data can be accessed by national security and law enforcement agencies without sufficient legal protection under Canadian law in countries around the world. Technology companies can experience buy-outs, mergers and bankruptcy that can change where personal data are stored and the privacy protection they receive. Malicious hackers can also take advantage of data stored in locations where the data are subject to weak data protection safeguards. Social media platforms store the personal data of their Canadian users around the world, and provide little to no transparency as to where their data are stored or transferred to third parties. Canadian privacy law does not require users to consent to personal data transfer outside of Canada. Our research shows that many popular platforms transfer data to a variety of jurisdictions, and none specifically cite Canada as a country of storage. Nor are there meaningfully enforced limits on the transfer of personal data to jurisdictions with insufficient protection against surveillance or unauthorized access. In the two decades since the enactment of Canada’s current privacy law, there has not been a single fine or enforced remedy against companies transferring personal data outside of Canada with insufficient protection. Jurisdictions around the world are introducing a range of new approaches to address these challenges and ensure data protection laws extend to data moved outside its borders, including outright bans on cross-border transfer, new requirements for informed consent, and rigorous evaluations of other jurisdictions’ data protection regimes. While these notions can challenge the idea of a free and open Internet, Canadians are looking for answers — our recent survey finds that 86% of Canadians support requirements to keep Canadians’ data within Canada. This discussion paper lays out public policy options for how Canadian privacy law should protect the security and privacy of personal data stored outside of Canada. Advancing these protections for Canadians should complement ongoing efforts to advance international cooperation and governance of digital privacy and security, for example through bi- and multilateral agreements. The global fight over data is likely only to intensify in the coming years, and a key test for Canada’s sovereignty will be how it is positioned among its international peers. Canada must define its position internationally, with the U.S., China, and the European Union all showing very different models of governance. This paper is meant to advance public engagement and policy development in Canada going forward to maintain our home ice advantage.

IoT Security: Penetration Testing of White-label Cloud-based IoT Camera Compromising Personal Data Privacy

The Internet is driving force on how we communicate with one another, from posting messages and images to Facebook or “tweeting” your activities from your vacation. Today it is being used everywhere, now imagine a device that connects to the internet sends out data based on its sensors, this is the Internet-ofThings, a connection of objects with a plethora of sensors. Smart devices as they are commonly called, are invading our homes. With the proliferation of cheap Cloud-based IoT Camera use as a surveillance system to monitor our homes and loved ones right from the palm of our hand using our smartphones. These cameras are mostly white-label product, a process in which the product comes from a single manufacturer and bought by a different company where they are re-branded and sold with their own product name, a method commonly practice in the retail and manufacturing industry. Each Cloud-based IoT cameras sold are not properly tested for security. The problem arises when a hacker, hacks into the Cloud-based IoT Camera sees everything we do, without us knowing about it. Invading our personal digital privacy. This study focuses on the vulnerabilities found on White-label Cloud-based IoT Camera on the market specifically on a Chinese brand sold by Shenzhen Gwelltimes Technology. How this IoT device can be compromised and how to protect our selves from such cyber-attacks.

Investments in the Sharing Economy and their Impact on the Employment Structural Changes

The article examines topical issues related to structural changes in employment in the Russian economy, due to the intensive development of the sharing economy. Theaimof the study is to systematize disparate knowledge in assessing the impact of investments in the sharing economy on the employment structure, providing an understanding of the labor market, which is influenced by transformation processes in consumption patterns and factors of digitalization of the economy, as well as to develop recommendations for improving state policy in the field of employment. Based on themethodsof theoretical research (analysis and synthesis, generalization), the authors reviewed scientific literature and information from various sources, identified the main elements characterizing the model of collaborative consumption, considered by various researchers and online platforms. The study highlights the scientific concepts and approaches to the definition of the sharing economy, including the concept of a shared economy; collaborative economy as well as access-based consumption (to resources); network interaction; commercial exchange systems. Thenoveltyof the study lies in the fact that the authors show how investments in the further development of the infrastructure of the sharing economy, including the development of digital online platforms, lead to an increase in the number of employers and workers by removing barriers and reducing transaction costs. The authors proposerecommendationsfor solving employment issues: to form a system for measuring the sharing economy and accounting for it in official statistics; provide a regulatory framework for the functioning of digital platforms; ensure the privacy of personal data and the safety of citizens participating in the sharing economy. It wasconcludedthat the implementation of the proposed measures will have a positive impact on the Russian labor market and increase the investment attractiveness of the most important sectors of the sharing economy

Innovative Development of a Human-Centered Economy in the Context of Overcoming the Pandemic

The article examines the theoretical and practical aspects of the innovative development of the human-centered economy in the context of overcoming the pandemic. The relevance of the study is confirmed by the fact that the world of high technologies, accelerated development and violent digitalization creates new rules of life. To the traditional risks that influenced humanity and caused crises in the past, the study adds new ones related to privacy of personal data and cybersecurity, artificial intelligence and new jobs, instant information dissemination and manipulation of public opinion, inequality of opportunities and environmental threats. It is concluded that the pandemic has become a powerful trigger for innovation. Social distancing technologies, which were especially popular during the coronavirus outbreak, are at the peak of demand. The pandemic has also adjusted the logic of providing government support to technology entrepreneurs. Among the priorities is support for domestic digital services that improve the quality of life online and provide social distancing. In conclusion, it was concluded that each crisis is unique, just as unique are the recipes for overcoming it, and each new wave brings new recipes to the entrepreneur and investor's piggy bank of how to build a sustainable business that is not afraid of threats of any type - from financial to biological. To protect oneself technologically from the shocks associated with the crisis, maximum digitalization of business processes and the use of modern business models, industrial automation using industrial Internet technologies, predictive analytics, the use of the most modern digital sales channels, and investments in personnel development are required. These and many other factors make up a modern sustainable business model.

The Effect of Bad Password Habits on Personal Data Breach

Users tend to utilize bad or weak passwords with memorable characteristics such as simple words from the dictionary and easy to remember sequence of numbers from birthdays. Poor or bad password habits lead to compromise of personal data privacy and allow hackers to gain unauthorized access to these passwords and use them for criminal and fraudulent cyber activities. The purpose of this research is to examine the impact of password habits among Malaysians on their personal data breaches. This study provides insights into the behavior of users concerning their passwords use. This study used a positivism paradigm and applied a quantitative approach and used a convenience sampling technique to collect data from 297 respondents from Malaysian nationals. IBM SPSS AMOS 24 is used to conduct the analysis. The result from the study shows that “lacking the use of second-factor authentication’ have a significant and a positive impact on the personal data breaches. Based on this finding, it can be concluded that the lack of second-factor authentication is an essential factor that significantly impacts personal data breach. This finding provides a different perspective from the usual connection of bad password habits of weak password length and combination, easy to guess the password and common password reuse to be the main contributing factor of the personal data breaches by the previous literature. The contribution of this research is the provision of empirical evidence that emphasize the need to continually beef up own security by correctly using second-factor authentication across individual accounts. Doing so is crucial to curb personal data breaches.

Personal data perceptions and privacy in Turkish academic libraries: An evaluation for administrations

The recent increases in data sharing possibilities through technology have given way to a rise in concerns about the privacy of personal data. There has also been an increase in the number of studies approaching the subject from different perspectives (legal, technical, and political). It is important for libraries, as organizations employing personal data in their service delivery, to conduct relevant activities and raise awareness on this subject. Accordingly, the present study, patterned as a situation research study, aimed to evaluate the approaches of the administrators of academic libraries towards the privacy and protection of personal data. The study collected data from the administrators of 16 academic libraries consisting of different scales in Turkey, transformed the same into qualitative data by their content and presented the same on frequency tables. The results pointed out certain shortcomings in awareness and perception among the administrations of academic libraries with respect to the privacy of personal data. The study finally features potential recommendations for improvement in this area.

Digital4development? European data protection in the Global South

While the European Union has recently become a champion of privacy rights and data protection, by enacting its General Data Protection Regulation (GDPR) in 2018, there is a growing body of research on the costs and benefits of digitalisation in the aid industry. On the ‘cost’ side, risks associated with privacy and protection of personal data are clear. The purpose of this paper is to explore how the EU and European aid organisations can protect the privacy rights of individuals residing outside the EU’s borders, by scrutinising those GDPR articles that may be relevant from the perspectives of aid-implementing actors working outside the EU and the European Economic Area (EEA). This analysis of the important EU documents describing its foreign and development policies shows that promoting digitalisation outside of the EU seems to be more important to the EU than data protection. Furthermore, while aid organisations registered in the EU/EEA are supposed to comply with GDPR, the regulation’s territorial scope is not clear enough and the EU is not able to protect the privacy rights of individuals residing in the Global South, nor is it necessarily interested in doing so.

Examining artifacts generated by setting Facebook Messenger as a default SMS application on Android: Implication for personal data privacy

AbstractThe use of mobile devices and social media applications in organized crime is increasingly increasing. Facebook Messenger is the most popular social media applications used globally. Unprecedented time is spent by many interacting globally with known and unknown individuals using Facebook. During their interaction, personal information is uploaded. Thus, crafting a myriad of privacy trepidation to users. While there are researches performed on the forensic artifacts' extraction from Facebook, no research is conducted on setting Facebook Messenger applications as a default messaging application on Android. Two Android mobile devices were used for data generation and Facebook Messenger account was created. Disc imaging and data partition were examined and accessed to identify changes in the orca database of the application package using DB browser. The data were then generated using unique words which were used for conducting key searches. The research discovered that mqtt_log_event0.txt of the Com.Facebook.orca/Cache directory stores chat when messenger is set as a default messaging app. The research finding shows that chats are recorded under messages tab together with SMS of data/data/com.facebook.orca/databases/smstakeover_db and data/data/com.facebook.orca/databases/threads_db. This indicates that only smstakeover_db stores SMS messaging information when using messenger application. It is observed that once the user deletes a sent SMS message, the phone number and the deleted time stamp remained in the data/data/com.facebook.orca/databases/smstakeover_db database in the address_table are recoverable. The results suggest that anonymization of data is essential if Facebook chats are to be shared for further research into social media content.

Developments in Privacy and Data Ownership in Mobile Health Technologies, 2016-2019.

Summary Objectives : To survey international regulatory frameworks that serve to protect privacy of personal data as a human right as well as to review the literature regarding privacy protections and data ownership in mobile health (mHealth) technologies between January 1, 2016 and June 1, 2019 in order to identify common themes. Methods : We performed a review of relevant literature available in English published between January 1, 2016 and June 1, 2019 from databases including PubMed, Google Scholar, and Web of Science, as well as relevant legislative background material. Articles out of scope (as detailed below) were eliminated. We categorized the remaining pool of articles and discrete themes were identified, specifically: concerns around data transmission and storage, including data ownership and the ability to re-identify previously de-identified data; issues with user consent (including the availability of appropriate privacy policies) and access control; and the changing culture and variable global attitudes toward privacy of health data. Results : Recent literature demonstrates that the security of mHealth data storage and transmission remains of wide concern, and aggregated data that were previously considered “de-identified” have now been demonstrated to be re-identifiable. Consumer-informed consent may be lacking with regard to mHealth applications due to the absence of a privacy policy and/or to text that is too complex and lengthy for most users to comprehend. The literature surveyed emphasizes improved access control strategies. This survey also illustrates a wide variety of global user perceptions regarding health data privacy. Conclusion : The international regulatory framework that serves to protect privacy of personal data as a human right is diverse. Given the challenges legislators face to keep up with rapidly advancing technology, we introduce the concept of a “healthcare fiduciary” to serve the best interest of data subjects in the current environment.

No business as usual: a case for data ethics and data governance in the age of coronavirus

PurposeThe purpose of this commentary is to reflect on the transformative changes organisations experience, in the form of increased use of emergent information and communication technologies (ICTs), as a significant factor in enabling the continuation of normal business practices during the COVID-19 pandemic, and subsequent key ethical considerations in the use of new technology by organisations.Design/methodology/approachThis commentary adopts a reflective approach and is based on a review of theories on diffusion of innovation, dynamic capabilities and data ethics and governance, as well as up-to-date business reports to reflect on the ethical implications of new technologies for organisations.FindingsOrganisations from different industries and sectors around the world have experienced major disruptive changes because of the COVID-19 pandemic. Adoption and integration of new ICTs occurred at an accelerated pace in a collective effort to maintain “business as usual”. The use of emergent technologies is not without risks. The commentary argues that, in times of crisis, it is vital that organisations address the growing concerns around privacy and security of personal data by designing effective data governance frameworks that go beyond a mere compliance with existing policies and prevailing data privacy and protection laws to ensure data security and protection for all stakeholders.Originality/valueThis commentary is making the case for more considered approaches to data governance and data ethics in business following the unprecedented challenges posed by the recent COVID-19 pandemic and suggests possible ways of moving forward from an ethical perspective.

Lightweight and privacy‐preserving authentication scheme with the resilience of desynchronisation attacks for WBANs

With the advances in wireless communication and Internet of things, wireless body area networks (WBANs) have attracted more and more attention because of the potential in improving the quality of health care services. With the help of WBANs, the user can access the patient's life-critical data generated by miniaturised medical sensors, and remote health care monitoring services are provided. Since the open nature of wireless channel and sensitivity of transmitted information, the security and privacy of such personal data are becoming important issues that must be dealt with. In the past few years, a large number of authentication schemes had been proposed to solve these issues. However, most of the existing schemes are not secure enough. As a step toward this direction, in this study, the authors present a privacy-preserving authentication scheme with adaptive resilience of desynchronisation attacks for WBANs, in which lightweight crypto-modules are adopted to pursue the best efficiency. The proposed scheme adopts the pseudonym identity technique to provide user anonymity, and one-way hash chain technique and serial number method are employed to ensure forward secrecy and resist desynchronisation attack, respectively. Analysis and comparison results demonstrate that the proposed scheme achieves a delicate balance between security and efficiency.

Privacy of Personal Data

The Protection of Personal Data has its beginnings in the year 1980, through the Organization for Economic Cooperation and Development in the search to guarantee the fundamental human right of privacy. The standards have been set to establish a balance between the level of protection of the privacy of individuals and the free transmission of personal data in systems and applications of services, several studies of the limits have been created in which there is a personal data It must be stored and treated by a third party. Financial institutions, governments and services that require a high level of protection in their transactions, handling of confidential information, credit card data, customer information, among other things. The use of information technologies in general our environment requires that you deposit large amounts of information and personal data, that can store or transmit in an inappropriate manner, expose the privacy of a person, as well as compromise their integrity and financial reputation and even physics. The consent on the part of the people, for the treatment of their data, is the fundamental principle that leads the norms, directives and values that have been developed at a global level.The boundaries and borders of nations also have an impact on the extent to which personal data, a clear example in the European Union, where companies that use data from citizens of this community, but deliver their services outside of this, they are bound to these personal data in the same guidelines that define the European Union and its territory. Similarly, in Mexico there is a Federal Law on Data Protection in the Position of Individuals, regulating legitimate, controlled and informed treatment, guaranteeing privacy and the right to information self-determination of people.

A Hybrid Method for Secure Communication and Performance Analysis in VANET.

Vehicular Ad-hoc network a subclass of Mobile Ad-hoc network with various features providing Vehicle-to-Vehicle communication, Vehicle-to-RSU communication, Vehicle-to-Trusted Authority Communication. VANET is gaining higher attention now days both in industry and academic area and has become a trending research topic for research but still a lot of improvements is required in this area. Security of data is one of the major challenge in VANET. Encryption of data with the help of various encryption algorithms came up as solution for securing communication in VANET. But existing encryption algorithms used to secure VANET’s are complex due to which data are not delivered on time and face a lot of problems like privacy of data ,non-repudiation and cost (i.e. communication cost, computational cost).In our proposed scheme we use a hybrid approach, which contain ECC algorithm( asymmetric algorithm).ECC algorithm is used for encryption of personal details (i.e. Speed, location, device address) and AES algorithm (symmetric algorithm ) is used for encryption for safety messages along with output of ECC algorithm. The objective of this hybrid approach is to perform double encryption on personal details for more privacy of personal data (using ECC and AES algorithm) and single encryption on safety messages (using AES algorithm) so safety messages are delivered on time and without any delay.

A Study of Deep Learning-Based Approaches for Session-Based Recommendation Systems

Recommending relevant items of interest for a user is the main purpose of the recommendation system. In the past, those systems achieve the recommended list based on long-term user profiles. However, personal data privacy is becoming a big challenge recently. Thus, the recommendation system needs to reduce the dependence on user profiles while preserving high accuracy on the recommendation. Session-based recommendation is a recently proposed approach for the recommendation system to overcome the issue of user profiles dependency. The relevance of the problem is quite high and has triggered interest among researchers in observing the activities of users. It increased several proposals for session-based recommendation algorithms that aim to predict the next actions. In this paper, we would like to compare the performance of such algorithms by using various datasets and evaluation metrics. A deep learning approach named GRU4REC (Hidasi et al. in Session-based recommendations with recurrent neural networks, 2015) and simpler methods are included in our comparison. Real-world datasets from three different domains are included in our experiment. Our experiments reveal that in some cases of numerous unpopular items dataset, GRU4REC’s performance is lower than expected. However, its performance is significantly increased after applying our proposed sampling method. Therefore, our obtained results suggested that there is still room for improving deep learning session-based recommendation algorithms.

Aarogya Setu- Carrying Your Privacy in Your Hands?

There are numerous benefits of having a data protection legislation in place to guide a nation in how to protect the personal data of individuals. These guiding factors maybe transparency, accountability, ensuring rights of the individuals, listing out organizational measures and the compliance to be undertaken, to name a few. In the current context of having contact tracing apps, it becomes all the more important to have a data protection legal framework. The article seeks to understand the privacy concerns spelled out by the Aarogya Setu App, briefly compare the same with practices across different countries and understanding the need for legislative action concerning the privacy issues. In absence of a legislation, compliance with the privacy principles is not enough. The absence of a national or applicable law that posits data protection principles, provisions and organizational measures, should not permit denial of the basic tenets and continued provision of basic minimum rights of personal data protection and privacy, which must be ensured to all individuals at all times. Finally, it must be borne in mind that the adoption of contact tracing apps will put to test the balance between state surveillance and user privacy. The need of a data protection legislation is very telling in the current times and speaks for itself.

Ethics in Artificial Intelligence: A disjoint between knowing and acting

While artificial intelligence (AI) is changing our daily lives, its impacts and risks to privacy remain one of the top agendas in its developments. As AI frequently relies on massive and seemingly irrelevant data to discover insights that are sometimes unexpected, the technology is at odds with the traditional data protection principles of data minimisation and transparency. Aware of the challenge, data protection authorities (DPAs) are looking for a paradigm shift in how personal data privacy may be respected in the AI era. Now many of them have started to advocate the idea of the ethical use of AI. There is evidence, however, to suggest that there is a disjoint between knowing the importance of ethics and acting ethically. This paper describes the current efforts by DPAs in promoting ethics in AI, discusses the flux concept of ethics, suggests the reasons behind the disjoint between the ethical ‘knowing’ and ‘acting’, and proposes how education, promotion of desired behaviours and a cross-functional approach may help bridge the gap.

THE RISE OF A TRANSNATIONAL MOVEMENT TO PROTECT PRIVACY*

Scholars have long found profound normative and structural differences between the privacy movements of Europe and the United States, alongside incompatible regimes of regulation. After 9/11, both Europe and the U.S. adopted increasingly intrusive digital security measures, which impinged on the privacy of commercial and personal data. Both the overlap in privacy regimes and the securitization of the two regimes were uncovered by Edward Snowden’s revelations in 2013. The eventual result was the passage of a European privacy protection regulation, the General Data Protection Regulation, in 2016 and greater transnational diffusion and transnational cooperation among European and American privacy activists. But has this convergence produced a transnational movement for privacy? Studying three mechanisms of transnational mobilization—externalization, diffusion, and collective transnationalism—this article employs a political opportunity framework to understand how international events have increased the inclination and the capacity of nationally and regionally based privacy groups to come together in contentious collective action.

GOOD CORPORATE GOVERNANCE PRINCIPLES ON INTERNET INTERMEDIARY COMPANIES IN PROTECTING THE PRIVACY OF PERSONAL DATA IN INDONESIA

<em>The implementation of good corporate governance (GCG) is the main foundation of companies that needs to run their business activities for a long period. Along with the development of technology and information, the implementation of GCG is increasingly needed for internet intermediary platform providers in carrying out their business activities. The implementation of GCG principles can also reduce the risk of failure in protecting privacy of personal data on the platform. The related principles are transparency, accountability, and responsibility principle by taking into account a number of laws and regulations such as Law No. 11 of 2008 as amended by Law No. of 2016 concerning Amendments to Law No. 11 of 2008 concerning Information and Electronic Transactions (ITE Law), Government Regulation No. 71 of 2019 (GR 71/2019), and Ministry of Communication and Information Regulation No. 20 of 2016. This research will use a normative juridical research method that takes into account the provisions of the legislation and other relevant documents. As a result, the implementation of GCG is not fully implemented in the case of failure in protecting privacy of personal data in internet intermediary company (PT Bukalapak), thus the legal attempt that can be applied to manifest the company’s liability refers back to ITE Law, GR 71/2019, and Ministry of Communication and Information Regulation 20/2016 which are compensation and administrative sanctions. </em>