Privacy contracts incorporated in a privacy protection framework

Privacy policies do not really seem to guarantee the protection of personal information. As individuals are getting more and more concerned about the protection of their personal data, the authors propose privacy contracts as a solution. A privacy contract constitutes a set of legal agreements between an individual and an organisation and as such should be enforceable by law. This paper extends the notion of privacy contracts. The paper discusses privacy contracts in the context of a privacy protection framework that also includes the management of privacy policies and the enforcement of policies and contracts. The authors conclude with a comprehensive privacy protection framework built on the fundamental tenets of privacy contracts. Privacy contracts enable the individual to customise his/her personal information on a fine-grained level of detail. Subsequently the individual has more control over his/her personal information.