Feature Interactions in Policy-Driven Privacy Management
George YEE and Larry KORBA
Institute for Information Technology
National Research Council Canada
Montreal Road, Building M-50
Ottawa, Ontario, Canada K1A 0R6
Email: {George.Yee, Larry.Korba}@nrc-cnrc.gc.ca
Abstract. The growth of the Internet is increasing the deployment of
e-services in such areas as e-business, e-learning, and e-health. In parallel,
the providers and consumers of such services are realizing the need for privacy.
The widespread use of P3P privacy policies for web sites is an example of
this growing concern for privacy. However, while the privacy policy approach
may seem to be a reasonable solution to privacy management, we show in this
paper that it can lead to unexpected feature interaction outcomes such as
unexpected costs, the lost of privacy, and even cause serious injury. We propose
a negotiations approach for eliminating or mitigating the unexpected bad
outcomes.