View article

The growth of the Internet has been accompanied by the growth of Internet e-business services (eg, electronic bookseller services, electronic stock-transaction services). This proliferation of e-business services has in turn fueled the need to protect the personal privacy of e-business users or consumers. We advocate a privacy policy approach to protecting personal privacy. However, it is evident that the specification of a personal privacy policy must be as easy as possible for the consumer. In this paper, we define the content of personal privacy policies using privacy principles that have been enacted into legislation. We then present two semiautomated approaches for the derivation of personal privacy policies. The first approach makes use of common privacy rules obtained through community consensus. This consensus can be obtained from research and/or surveys. The second approach makes use of existing …