Feature Interactions in Policy-Driven Privacy Management

George YEE and Larry KORBA

Institute for Information Technology
National Research Council Canada
Montreal Road, Building M-50
Ottawa, Ontario, Canada K1A 0R6
Email: {George.Yee, Larry.Korba}@nrc-cnrc.gc.ca

Abstract. The growth of the Internet is increasing the deployment of e-services in such areas as e-business, e-learning, and e-health. In parallel, the providers and consumers of such services are realizing the need for privacy. The widespread use of P3P privacy policies for web sites is an example of this growing concern for privacy. However, while the privacy policy approach may seem to be a reasonable solution to privacy management, we show in this paper that it can lead to unexpected feature interaction outcomes such as unexpected costs, the lost of privacy, and even cause serious injury. We propose a negotiations approach for eliminating or mitigating the unexpected bad outcomes.