Privacy-aware policy establishment and enforcement for information center repository: A case study of Government Meteorological Information Center Repository

摘要

A central information repository is a place for collecting data from various sources to satisfy the various data needs of users with various roles. Therefore, the usage policy for the central information repository is an important matter that organizations have to consider, in order to ensure that each user role uses data according to the specified policy. This research presents an approach to privacy-aware policy creation and enforcement, giving importance to both the privacy of data and privacy of repository users, based on guidelines under the PbD-PIA framework. Supporting tools have been developed through the extraction of policy entities, in order to enable the organization to effectively establish and enforce privacy policies for the central information repository. Government Meteorological Information Center Repository was presented as a case study for the proposed approach.