Accountability and Enforceability of Enterprise Privacy Policies

This paper describes our approach to the evolution of enterprise privacy policies and related privacy management ecosystems. We argue that it is important to be able to express enforceable privacy policies, to explicitly manage accountability and to develop the whole privacy infrastructure, rather than just one part of this. In this paper we briefly illustrate our philosophy and vision, present a list of key requirements and describe our ongoing research. In our approach we emphasise three key aspects: extension of policy languages to allow specification of the use of trust and security techniques, enforceability of such privacy languages and management of accountability across enterprises in respect of privacy policy enforcement.