The Effects of Applying Privacy by Design to Preserve Privacy and Personal Data Protection in Mobile Cloud Computing: An Exploratory Study

Mobile cloud computing (MCC) is a domain that stemmed from advances in mobile technology and cloud computing. Although debate continues about the best strategies to preserve privacy and personal data protection in MCC, it is essential to explore the effects of applying privacy by design (PbD) to preserve privacy and personal data protection in MCC. PbD is a general philosophy that demonstrates privacy should not be overviewed as an afterthought, but rather as a first-class requirement in the design of IT systems. This study explores the effects of applying PbD to preserve privacy and personal data protection in MCC, and is focused on the privacy of personal data. In this exploration, a framework using PbD has been demonstrated, and seven hypotheses were formulated. Moreover, a survey was implemented where 386 responses were used to test the formulated hypotheses. The results of this study supported the perceived benefits, cues to action of PbD, and perceived threat are positively and directly related to privacy and personal data protection behavior in MCC. Moreover, the results supported that the perceived barriers are negatively and directly related to privacy and personal data protection behavior in MCC. Overall, the results support the utilization of PbD to preserve privacy and personal data protection in MCC and encourage the practitioners to utilize PbD to preserve privacy and personal data protection in MCC.

Download Full-text

Importance of Personal Data Protection Law for Commercial Air Transport

Transactions on Aerospace Research ◽

10.2478/tar-2017-0004 ◽

2017 ◽

Vol 2017 (1) ◽

pp. 35-44

Author(s):

Dawid Zadura

Keyword(s):

Data Protection ◽

Public Information ◽

Personal Data ◽

Air Transport ◽

Civil Aviation ◽

Aviation Industry ◽

Personal Data Protection ◽

It Systems ◽

Data Protection Law ◽

The Law

Abstract In the review below the author presents a general overview of the selected contemporary legal issues related to the present growth of the aviation industry and the development of aviation technologies. The review is focused on the questions at the intersection of aviation law and personal data protection law. Massive processing of passenger data (Passenger Name Record, PNR) in IT systems is a daily activity for the contemporary aviation industry. Simultaneously, since the mid- 1990s we can observe the rapid growth of personal data protection law as a very new branch of the law. The importance of this new branch of the law for the aviation industry is however still questionable and unclear. This article includes the summary of the author’s own research conducted between 2011 and 2017, in particular his audits in LOT Polish Airlines (June 2011-April 2013) and Lublin Airport (July - September 2013) and the author’s analyses of public information shared by International Civil Aviation Organization (ICAO), International Air Transport Association (IATA), Association of European Airlines (AEA), Civil Aviation Authority (ULC) and (GIODO). The purpose of the author’s research was to determine the applicability of the implementation of technical and organizational measures established by personal data protection law in aviation industry entities.

Download Full-text

Key security measures for personal data protection in IT systems

2012 20th Telecommunications Forum (TELFOR) ◽

10.1109/telfor.2012.6419152 ◽

2012 ◽

Author(s):

Dejan Z. Jankovic

Keyword(s):

Data Protection ◽

Personal Data ◽

Security Measures ◽

Personal Data Protection ◽

It Systems

Download Full-text

A Legal Study on Personal Data Protection Issues Caused by Cloud Computing Environment

Dankook Law Riview ◽

10.17252/dlr.2016.40.1.001 ◽

2016 ◽

Vol 40 (1) ◽

pp. 3-28

Author(s):

Jeong Won-Joon

Keyword(s):

Cloud Computing ◽

Data Protection ◽

Personal Data ◽

Computing Environment ◽

Cloud Computing Environment ◽

Legal Study ◽

Personal Data Protection

Download Full-text

Secure Mobile Multi Cloud Architecture for Authentication and Data Storage

Cloud Security ◽

10.4018/978-1-5225-8176-5.ch057 ◽

2019 ◽

pp. 1108-1123

Author(s):

Karim Zkik ◽

Ghizlane Orhanou ◽

Said El Hajji

Keyword(s):

Cloud Computing ◽

Data Storage ◽

Mobile Networks ◽

Mobile Cloud Computing ◽

Homomorphic Encryption ◽

Personal Data ◽

Mobile Technologies ◽

Mobile Users ◽

Mobile Cloud ◽

Multi Cloud

The use of Cloud Computing in the mobile networks offer more advantages and possibilities to the mobile users such as storing, downloading and making calculation on data on demand and its offer more resources to these users such as the storage resources and calculation power. So, Mobile Cloud Computing allows users to fully utilize mobile technologies to store, to download, share and retrieve their personal data anywhere and anytime. As many recent researches show, the main problem of fully expansion and use of mobile cloud computing is security, and it's because the increasing flows and data circulation through internet that many security problems emerged and sparked the interest of the attackers. To face all this security problems, we propose in this paper an authentication and confidentiality scheme based on homomorphic encryption, and also a recovery mechanism to secure access for mobile users to the remote multi cloud servers. We also provide an implementation of our framework to demonstrate its robustness and efficiently, and a security analysis.

Download Full-text

Personal Data Protection Problems Associated with Cloud Computing

Cybernetics and Systems Analysis ◽

10.1007/s10559-014-9667-8 ◽

2014 ◽

Vol 50 (5) ◽

pp. 768-773

Author(s):

O. M. Fal’ ◽

V. F. Kozak

Keyword(s):

Cloud Computing ◽

Data Protection ◽

Personal Data ◽

Personal Data Protection

Download Full-text

Personal data protection and liability of internet service provider: a comparative approach

International Journal of Electrical and Computer Engineering (IJECE) ◽

10.11591/ijece.v9i4.pp3175-3184 ◽

2019 ◽

Vol 9 (4) ◽

pp. 3175

Author(s):

Ni Ketut Supasti Dharmawan ◽

Desak Putu Dewi Kasih ◽

Deris Stiawan

Keyword(s):

Cloud Computing ◽

Data Protection ◽

Service Provider ◽

Personal Data ◽

Comparative Approach ◽

Internet Services ◽

The European Union ◽

Security Attacks ◽

Personal Data Protection ◽

Electronic Service

The users of electronic service provider often suffered losses caused by internet services did not work properly including losses due to leakage of personal data protection stored in cloud computing. The study aims to examine electronic service provider liability upon their failure performing internet services properly and security attacks on cloud computing. This study was normative legal research by examining national and international legal materials. The finding shows that the electronic provider shall be responsible based on right and obligation agreed under the agreement. Related to cloud computing, providing adequate security to avoid security attacks and misuse of private data that caused losses to the users becoming the liability of service provider. Based on the Federal Trade Commission Act, the liability arises on the grounds of deceptive and unfair trade practices. Under the General Data Protection Regulation of the European Union, the liability arises on the basis as the controller then provider liable for compensation for user’s suffered damage. In Indonesia, based on the Electronic Information and Transaction Law Amendment, the liability to the owner of personal data whose rights are violated and suffered losses arises due to a failure of ISP protect the data security. For better protection in Indonesia, the protection of big data and clear territorial scope of protection become necessary to consider.

Download Full-text

Secure Mobile Multi Cloud Architecture for Authentication and Data Storage

International Journal of Cloud Applications and Computing ◽

10.4018/ijcac.2017040105 ◽

2017 ◽

Vol 7 (2) ◽

pp. 62-76 ◽

Cited By ~ 15

Author(s):

Karim Zkik ◽

Ghizlane Orhanou ◽

Said El Hajji

Keyword(s):

Cloud Computing ◽

Data Storage ◽

Mobile Networks ◽

Mobile Cloud Computing ◽

Homomorphic Encryption ◽

Personal Data ◽

Mobile Technologies ◽

Mobile Users ◽

Mobile Cloud ◽

Multi Cloud

Download Full-text

Enabling trustworthy personal data protection in eHealth and well-being services through privacy-by-design

International Journal of Distributed Sensor Networks ◽

10.1177/1550147720912110 ◽

2020 ◽

Vol 16 (5) ◽

pp. 155014772091211 ◽

Cited By ~ 2

Author(s):

Tomás Robles ◽

Borja Bordel ◽

Ramón Alcarria ◽

Diego Sánchez-de-Rivera

Keyword(s):

Data Protection ◽

User Satisfaction ◽

Personal Information ◽

Personal Data ◽

Well Being ◽

Smart Contracts ◽

Privacy By Design ◽

Digital Service ◽

Personal Data Protection

Users are each day more aware of their privacy and data protection. Although this problem is transversal to every digital service, it is especially relevant when critical and personal information is managed, as in eHealth and well-being services. During the last years, many different innovative services in this area have been proposed. However, data management challenges are still in need of a solution. In general, data are directly sent to services but no trustworthy instruments to recover these data or remove them from services are available. In this scheme, services become the users’ data owners although users keep the rights to access, modify, and be forgotten. Nevertheless, the adequate implementation of these rights is not guaranteed, as services use the received data with commercial purposes. In order to address and solve this situation, we propose a new trustworthy personal data protection mechanism for well-being services, based on privacy-by-design technologies. This new mechanism is based on Blockchain networks and indirection functions and tokens. Blockchain networks execute transparent smart contracts, where users’ rights are codified, and store the users’ personal data which are never sent or given to external services. Besides, permissions and privacy restrictions designed by users to be applied to their data and services consuming them are also implemented in these smart contracts. Finally, an experimental validation is also described to evaluate the Quality of Experience (in terms of user satisfaction) and Quality of Service (in terms of processing delay) compared to traditional service provision solutions.

Download Full-text