Language-Based Enforcement of Privacy Policies

Abstract. We develop a language-based approach for modeling and verifying aspects of privacy policies. Our approach relies on information-flow control. Concretely, we use the programming language Jif, an extension of Java with information-flow types. We address basic leaks of private information and also consider other aspects of privacy policies supported by the Platform for Privacy Preferences (P3P) and related systems, namely the notion of purpose and the retention of data.

• Type: Conference
• Year: 2004
• Where: PET
• Authors: Katia Hayati, Martín Abadi
• Keywords: Language-based Approach, PET 2004, Privacy Policies, Privacy Preferences, Security Privacy