A citizen privacy protection model for e-government mashup services

  • Authors:
  • Janice Warner;Soon Ae Chun

  • Affiliations:
  • Georgian Court University, Lakewood, NJ;City University of New York, Staten Island, NY

  • Venue:
  • dg.o '08 Proceedings of the 2008 international conference on Digital government research
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

The Web 2.0 technologies allow dynamic content creation using syndications or mashups, extracted from diverse data sources, including government enterprise data. As a primary source of citizen data, the government has the obligation not only to make public data available for citizen access as stated in the Freedom of Information Act, but also to protect the privacy of individual citizen's records as stated in the Privacy Act. Unlike in the electronic commercial environment where the user can view the company privacy policy and indicate transaction data to be protected through opt-out mechanisms, opt-out in the mashup environment with government data is not so easy. In a mashup, a third party mashup Web application provider requests the individual's data from the government agencies through Web services. Since the data is public data not necessarily provided through an electronic interaction, individual citizens are not necessarily able to express fine-grained privacy policies on how data may be used. In addition, the government agency's privacy policy is very coarse grained, and the relative sensitivity of individual citizens is not considered. In this paper, we provide a Privacy Protection Model for Mashup Applications, using a mashup related multi-dimensional privacy protection space which includes parameters to specify mashup providers, mashup-specific operators, and mashup purposes. A personal privacy policy network is a distributed architecture where citizens can publish their individual privacy policies that can be applied to the use of their data and consulted by data providers including government agencies.