Privacy risk assessment and privacy-preserving data monitoring. (15th August 2022)

• Record Type: Journal Article
• Authors: Silva, Paulo; Gonçalves, Carolina; Antunes, Nuno; Curado, Marilia; Walek, Bogdan
• Is Part Of: Expert systems with applications. Volume 200(2022)
• Publication Date: 2022-08-15
• Subjects: Privacy preservation -- Machine learning -- Natural language processing -- Personally identifiable information; Expert systems (Computer science) -- Periodicals; Systèmes experts (Informatique) -- Périodiques; Electronic journals; 006.33
• DOI: 10.1016/j.eswa.2022.116867
• Languages: English
• ISSNs: 0957-4174

Abstract

Abstract: Privacy regulations press organisations to handle personal data with reinforced caution. Moreover, organisations are dealing with increasing amounts of Personally Identifiable Information in their systems. Thus, there is a high demand not only for privacy-preserving data processing mechanisms but also privacy-enhancing services. As such, we propose the Personal Data Analyser, a tool that increases privacy assurances and minimises privacy risks through automated privacy-preserving data monitoring and privacy risk assessment mechanisms. Automated data monitoring is achieved with a hybrid mechanism that employs Regular Expressions, Natural Language Processing tools, and machine learning models such as Multilayer Perceptron and Random Forests. Our privacy risk assessment mechanism is based on custom-built crisp and fuzzy models, that consider information such as data processor reputation, data sensitiveness and other inputs in order to assess privacy risk associated with data transactions. Our work is integrated and validated under real use cases of the PoSeID-on platform and warns users whenever potential privacy risks are detected. Validation under PoSeID-on's pilots and its users proved beneficial not only to assess our solution but also to raise users' awareness of their data. The results of this work show that our solution is an effective Privacy Enhancing Technology that increases privacy assurances between organisations and their users. Highlights: We propose a Personal Data Analyser (PDA): a user-driven privacy-preserving solution. We introduce an AI-based privacy-preserving PII analysis and classification mechanism. A privacy risk assessment mechanism based on crisp and fuzzy models is presented. The tool is validated in the PoSeID-on H2020 Project using data from real users.