Information Privacy Policies and Enhancing Technologies

The concept of privacy, forms and types of privacy. Conceptual framework of information privacy. The properties of anonymity, unlinkability, undetectability and unobservability. Information privacy threats. The General Data Protection Regulation. Privacy policies, Structure, content, presentation and analysis of case policies. Information privacy risk analysis. Privacy enhancing technologies. Anonymizers, Certification frameworks (TRUSTe), user preference analysis (P3P), software tools for generation of pseudo-identities (LPWA), onion routing. Integration of privacy requirements by system design. Privacy by design and modeling of privacy requirements. Information security concepts. Distinguishing information security properties from the information privacy attributes and identifying common aspects. Information security risk analysis and management. Privacy impact assessment for data protection. Methods and software tools for implementing privacy impact analysis.

1. Andreas Pfitzmann, Marit Hansen (2010) A Terminology for talking about Privacy by data minimization: Anonymity, Unlinkability, Undetectability, Unobservability, Pseudonymity, and Identity Management, v0.34 (http://dud.inf.tu-dresden.de/Anon_Terminology.shtml)