Privacy Risk Assessment in Context: A Meta-Model based on Contextual Integrity.

Abstract

Publishing data in open format is a growing trend, particularly for public bodies who have a legal obligation to make data available as open data. We look at the privacy implications of publishing open data and, in particular, how organisations can make informed decisions around privacy risks in relation to open data publishing before publication occurs. Using a well established theoretical privacy assessment framework, Contextual Integrity, we illustrate how this can be translated into a practical metamodel that can assist public bodies in assessing what privacy implications or risks might be associated with making a particular dataset available as open data. We validate the metamodel by providing a worked example and illustrate the effectiveness of this by reference to a case study application where the metamodel was successfully applied in practice.