Data Secrecy: Why Does It Matter in the Cloud Computing Paradigm?

Public trust is paramount for the well functioning of data driven healthcare activities such as digital health interventions, contact tracing or the build-up of electronic health records. As the use of personal data is the common denominator for these healthcare activities, healthcare actors have an interest to ensure privacy and anonymity of the personal data they depend on. Maintaining privacy and anonymity of personal data contribute to the trustworthiness of these healthcare activities and are associated with the public willingness to trust these activities with their personal data. An analysis of online news readership comments about the failed care.data programme in England revealed that parts of the public have a false understanding of anonymity in the context of privacy protection of personal data as used for healthcare management and medical research. Some of those commenting demanded complete anonymity of their data to be willing to trust the process of data collection and analysis. As this demand is impossible to fulfil and trust is built on a false understanding of anonymity, the inability to meet this demand risks undermining public trust. Since public concerns about anonymity and privacy of personal data appear to be increasing, a large-scale information campaign about the limits and possibilities of anonymity with respect to the various uses of personal health data is urgently needed to help the public to make better informed choices about providing personal data.

In the current framework of human rights, data privacy is finding its home as an independent human right, separate from its historical home under the umbrella of general privacy. However, there is no consistent system or standard for defining this right, and different regions require substantially different levels of protection. This inconsistency has allowed for corporations, by way of their executive officers, to avoid or completely ignore the requirements imposed by many countries. Moreover, the penalties in many regions are not severe enough to incentivize corporations to change their behavior. The lack of a truly global system and standard for enforcing this right, and the specific lack of pressure on the officers that direct corporate policy, has allowed data privacy violations to go severely under-checked. This Note seeks to provide a novel solution for tackling corporate holdup in complying with data privacy laws. This Note examines the historical roots of data privacy as a human right, discusses its similarity to resources that have been considered public utilities, and provides examples of instances where the right to data privacy has been ignored by corporate officers. By modifying the United Nations’ existing sanction procedure and jurisdiction, this Note proposes that the United Nations would be able to target corporate officers individually for their roles in data privacy violations. By leveraging personal liability for noncompliance, the United Nations could generate a global sense of accountability to the modern, human right to privacy in one’s personal data.

Personal information and other types of private data are valuable for both data owners and institutions interested in providing targeted and customized services that require analyzing such data. In this context, privacy is sometimes seen as a commodity: institutions (data buyers) pay individuals (or data sellers) in exchange for private data. In this study, we examine the problem of designing such data contracts, through which a buyer aims to minimize his payment to the sellers for a desired level of data quality, while the latter aim to obtain adequate compensation for giving up a certain amount of privacy. Specifically, we use the concept of differential privacy and examine a model of linear and nonlinear queries on private data. We show that conventional algorithms that introduce differential privacy via zero-mean noise fall short for the purpose of such transactions as they do not provide a sufficient degree of freedom for the contract designer to negotiate between the competing interests of the buyer and the sellers. Instead, we propose a biased randomized algorithm to generate differentially private output and show that this algorithm allows us to customize the privacy-accuracy tradeoff for each individual. We use a contract design approach to find the optimal contracts when using this biased algorithm to provide privacy and show that under this combination the buyer can achieve the same level of accuracy with a lower payment as compared to using the conventional, unbiased algorithms, while at the same time incurring lower privacy loss for the sellers.

<span lang="EN-US">Cloud Computing is the ability to improve the utility or train new human resources without investing in new infrastructure, or add capabilities to existence without the latest software licensing. It expanded the capabilities of Information Technology (IT). From the past few years, cloud computing has developed from a good business concept in the best rising sectors of the IT industry. But more information on individuals and companies was put in the cloud, and concerns began to think about how secure the cloud environment was. Despite cloud surrounding structures, enterprise users still do not want to expand their business in the cloud. Security reduces the growth of cloud computing and continues to spread the market with complexity with data privacy and data protection. The security of cloud computing has constantly been an significant aspect of improved quality of service from cloud service providers. Data storage in the cloud has a problem related to data security. However, cloud computing construct many new security challenges which have not been well examine. In order to ensure that the user's data in the cloud is secure, we have proposed an effective mechanism with a distinctive feature of data integrity and privacy. This paper focusing on problems relating to the cloud data storage techniques and security in virtual environment. We recommend a method for providing data storage and security in cloud using public key Cryptosystem, which uses the concept of the modified RSA algorithm to provide better security for the data stored in the cloud. </span>

Private higher education institutions as data users are subjected to the requirements of the Personal Data Protection Act 2010 (PDPA). These institutions process employee data as well as data of potential students, active students and alumni. They also deal with data of third parties such as vendors, visitors and contractors. Ten years after the coming into effect of the PDPA in 2013, the education sector has yet to develop their personal data protection code of practice as required by the Act. The General Code of Practice (CoP) of Personal Data Protection was introduced in December 2022 with the objective to provide guidelines to the Class of Data Users who have not prepared a Code of Practice and there is no data user forum to develop the relevant Code of Practice for the Class of Data Users. As the General CoP is legally binding, it is an offence punishable under the Act for any data user for failure to comply with any provision of this General CoP. As data users, private higher education institutions need to introduce certain mechanisms to adhere to the requirements such as privacy policy and procedure. This paper aims to compare the data privacy practices of private higher education institutions in Malaysia in order to determine to what extent the law has been complied with. Being a qualitative study, this paper applies content analysis technique. Data privacy policies of four private higher education institutions in Malaysia were examined to attain the objective. The four private higher education institutions are Universiti Tenaga Nasional (UNITEN), Universiti Teknologi PETRONAS (UTP), Taylor’s University and University of Nottingham Malaysia. The data privacy policies of the four institutions are accessible on the official website of the institutions. The study indicates that in the absence of a personal data protection code of practice for the education sector as a guideline, the data privacy practices of the institutions vary from one to another. While some of the privacy policies contain provisions which are general in nature which may lead to confusion to the data subjects, the data privacy policies show that the four institutions have, to a certain extent, complied with the requirements of the PDPA in general.

The Quest for Information Privacy in Africa: A Review Essay

Modern marketing tactics and corporate operations have been impacted by the development of data privacy laws, which have altered how businesses gather, store, and use customer data. Concerns regarding data security and privacy have been highlighted by businesses' growing dependence on customer data for strategic decision-making and targeted advertising. To ensure accountability, transparency, and the preservation of consumer rights, governments throughout the world have responded with strict laws like the California Consumer Privacy Act (CCPA) and the General Data Preservation Regulation (GDPR) of the European Union. These policies radically change data management techniques by imposing stringent compliance criteria including user permission, data minimization, and access rights. Although compliance gives companies the chance to build their brand and draw in new customers, it also comes with drawbacks including high operating expenses, intricate data processing, and certain legal risks. This study looks at how data privacy laws affect marketing tactics, highlighting the move towards privacy-first initiatives, anonymised data usage, and safe online interactions. To identify new trends, obstacles, and best practices in privacy-compliant marketing, the study qualitatively analyses secondary sources, such as scholarly publications, official documents, and case studies. The results show how crucial it is for companies to include data privacy into their strategic planning to balance competitive advantage with regulatory compliance. Organizations must proactively adjust as global privacy standards continue to change in order to stay in compliance and cultivate client relationships in a market where privacy concerns are on the rise.

Reeta Sony A.L - National Law University, New Delhi, India. E-mail:reeta.sony@nludelhi.ac.in.Sri Krishna Deva Rao - Professor, National Law University, New Delhi, India. E-mail: psrikrishnadevarao@gmail.com.Bhukya Devi Prasad - Council of Scientific and Industrial Research, New Delhi, India. E-mail: bdeviprasad@csir.res.in. Cloud computing refers to anything that involves delivering hosted services over the Internet. It is fast, cheap, flexible and elastic in nature. In spite of its benefits, cloud computing raises risks for data protection and privacy. One key issue presented by cloud computing is the fact that it changes our thinking of what we consider to be "our data" Data is no longer physically stored on a specific set of computers or servers, but is rather geographically distributed. The globalised nature of cloud computing poses a challenge for personal data protection, which requires a clear location for personal data, an identification of the processor and a responsible individual for data processing. Cloud data can be misused and/or shared with third parties without prior knowledge or consent of the data owner. The direct participation of an individual in transborder data transfer, third party participation in data storage, the processing and transmission of dataand, finally, negligence of data protection due diligence from cloud service providers, makes data protection and privacy laws more relevant. The recent PRISM surveillance programme scandal at the US National Security Agency (NSA) demonstrated the privacy risks that citizens around the world take on when their personal informa­tion is stored and processed in the cloud. This situation requires awell-established techno-legal solution along international standards. India, unlike the European Union, has no dedicated regulatory framework to deal with privacy and personal data protection. Although cloud computing is still in its initial stages in India, existing laws for people who are currently using facilities offeredby cloud service providers are extremely inadequate. However, cloud computing requires legal protection in India under the country's data protection laws, privacy laws and data breach laws, which must meet "international standards'! It is the right time for the Indian government to enact appropriate regulatory frameworks to protect personal data and privacy in the cloud era. The overall objective of this paper is to understand the impact of cloud computing on privacy and personal data protection and to analyse present legal frameworks governing privacy and personal data protection in India and Europe.

Data Privacy in the Time of Plague

Apple claims that iPhone 6, which is equipped with iOS 8.0 and later version, is secure enough to prevent a user's private data from law enforcement or malicious intruders. In pre-iOS 8.0 operating systems, a user's data were only encrypted by hardware-based keys, which can be obtained by Apple. But in iOS 8.0 and later version, the private data on the iPhone are protected by a secret key that is protected by the user's passcode, which the Apple does not hold. In this paper, supported by real-life experiments, we demonstrate that several vulnerabilities of iPhone 6 with iOS 8, which are brought by ordinary user operations, can lead to the leakage of the private data. Then we conduct vulnerability analysis and give the reasons that cause these vulnerabilities from a technical perspective. Meanwhile, experiments of forging attack aiming at iPhone 6 Touch ID are conducted.

In the era of big data, international trade has gone through a digital transformation and developed into a new stage of digital trade. The gradual prosperity of digital trade and the increasing contribution of digital elements to the economy of countries and the international community also bring about problems such as data abuse, surveillance, privacy infringement, and regulatory difficulties. In order to adapt to the development trend of digital trade, countries are paying more attention to cross-border data flow and data privacy protection, in order to maintain national security and the data security of various entities. Therefore, this article analyzes the current situation and trends of digital trade, considers the security issues of data privacy from the perspective of different entities, links key issues such as cross-border data flow, data rights, and privacy rights, explores the current status of relevant domestic and foreign legal and regulatory systems, and conducts comparative analysis. The analysis results show that due to different values, there are significant differences in policies regarding digital trade and privacy protection among countries. The commonality is that none of them have established appropriate legal protection systems for data elements and privacy rights to promote the development of digital trade. Under the trend of technological development, data privacy will also be impacted by new technologies through digital trade. Therefore, in response to the expanding demand for data regulation, all entities should improve their privacy protection and cross-border data flow policies and standards from both internal and international perspectives.

JCDC: A blockchain-based framework for secure data storage and circulation in JointCloud

Personal big data pricing method based on differential privacy

Social media users cannot protect privacy or control the use of internet activity and other personal data collected by social media enterprises. Numerous studies and surveys confirm that social media users and the public at large are increasingly concerned about privacy and activities of social media companies. This author examined what are the societal and user concerns about privacy self-management (PSM), data security, and social media company actions and asks if this suggests that there might be potential market interest in a social media platform to ensure user PSM, control, and monetization their data. The author then reviewed what market-driven applications using existing technology could be used to develop a social media platform to allow the user to ensure privacy and control of PSM and Personal Data, and to monetize activity and static user data. It then developed a conceptual functional model of the platform using existing technology.Social media enterprise business models and technologies drive the revenue strategies of the enterprise. Those models benefit the enterprise’s customers, such as advertisers and merchants, and drive technology design and development to more effectively user data to evaluate, track, and influence those individuals. The users, and their personal data, are the products, not the customers; they have little control or even knowledge about the collection and use of their personal data; and do not realize direct value from its use. These business models create profit for social media enterprises, and increasing concern is being expressed by individuals and governments that commercial excesses do not benefit individuals, create risk, and, through behavior modification, cause actual harm. Yet, the very business models that use free or cheaply acquired personal data to influence individuals make it impossible, or highly difficult, for the industry to become more sensitive to the users’ (in particular, non-paying users) needs, rights, desires, and wellbeing.The author provided a background on the current state of the social media market space. The researcher reviewed published statistics on social media use and privacy, government and legislative actions to regulate social media enterprise activities, and business and technology models that social media enterprises employ to collect and exploit social media user data. The author also provided a background on user preferences and societal concerns about privacy and control of personal data. The researcher conducted a survey of late Millennial and Generation Z (18-39) social media users to gauge market interest in social media services that would safeguard their personal data and enable these users to monetize their data. The author investigated whether there is sufficient interest in an alternative business model supported by existing and new technology that could disrupt the existing social media industry by enabling individuals to gain control, secure, establish ownership of their own user data and create value for themselves by monetizing their own data.The author illustrated a conceptual systems engineering model that integrates existing technology (e.g., open source and licensed software, and commercial services). The researcher examined the feasibility of the model using four methods: conducting a literature search on relevant, existing technologies to protect privacy, control, and monetize social media user data; building a high-level systems model; validating technology choices by review of an expert panel; and validating model functionality by simulating several use cases. The author established that there is almost universal concern about privacy and increasing concern about behavioral manipulation and actual harm caused by social media as well as a desire by users to be able to control their private data. The author concluded that there is a market opportunity for a platform that would enable social media users to control and monetize personal data.The author also determined that there are numerous off-the-shelf open source and commercial technologies available to integrate into a privacy-forward social media platform with a minimum of capital, appropriate for a start-up enterprise. The author concluded by developing a systems model using available technology that a platform that could be built that would enable social media users to control and monetize personal data. <br>

Data is a resource that contains facts or evidence such as disaster events. This information can be used to support the disaster management phase. However, privacy and security issues become a concern when personal data information spread arbitrarily which could be easily abused by irresponsible people and produce inaccurate information (hoax) for other people. The urgency of data privacy in disaster situations is a thing that must consider for security, convenience, and common interest. In this study, a brief review was conducted to find gaps in the previous literature and then provided recommendations for handling data privacy in the disaster management process.