Operando Consortium Horizon 2020 Exposanità 2016 Bologna

1. An H2020 project for online privacy enforcement
Luigi Clivati, Progetti di Impresa S.r.l.
EXPOSANITÀ, Bologna, 20/05/2016

2. Key Info
[Web]: www.operando.eu
[Twitter/Facebook]: @OperandoH2020
[Start – End dates]: 1 May 2015 – 30 April 2017
[Budget]: 4,455,811.25 €
[Partners]

3. What is the focus of OPERANDO?
Specify, Implement, field test, validate and exploit an
innovative privacy enforcement framework
that will enable the Privacy as a Service (PaS) business paradigm
and create a broad market for online privacy services online.

4. Solution proposed
Online Service Providers (OSP)
* Including PPAA
User
Privacy
Regulator
Privacy Authority (PA)(*)
(*) operated by a
Privacy Service
Provider
User Privacy Policy (UPP) =
User sensitivity profile +
Explicit user input + Privacy
laws + Best practices

5. Challenges addressed
• Escalating loss of online privacy
• Consumer services: Facebook, Google, LinkedIn…
• Consumers are targeted and stripped of their privacy
• In most cases, consumers are defenseless
• Reality outpaces regulations and privacy laws
• Government/public services struggle with privacy protection
• Citizens’ mistrust/public outcry
• Inadvertent disclosures to other agencies
• Hacking attacks
• Stringent privacy laws compliance requirements

6. Impact April 2017
New business concept that
provides privacy enforcement
Privacy Enforcement Platform
Privacy Service Providers
Privacy as a Service
Open Source www.operando.eu

7. Who benefits from OPERANDO ?
Online Service
Providers (OSP)
Privacy Authority &
Privacy Service Providers
• Gain the ability to cost-effectively comply with privacy
regulations
• Profit legimately, based on the user’s consent, from the
monetization of data
• Increase trust of users in PPAA online services
• Enforcement of privacy in users’ devices
(stored data and sensor outputs of mobile devices)

8. Who benefits from OPERANDO ?
Users
Privacy Regulators
• Manage their online privacy issues with an intuitive Web GUI
• The UPP will be enforced by the PA in all user’s devices
• Partake in the monetization of their data
• Automated audit of OSP’s policies for compliance with
regulations

9. Success stories
Testing & Validation OSP site Type Country
ASL Bergamo National Healthcare OSP Italy
West London Alliance Public Administration OSP UK
Barnsley Borough Council Public Administration OSP UK
Istituto Pediatrico Gaslini Genova Public Hospital OSP Italy
Ospedale San Raffaele Milano National Healthcare OSP Italy

10. Contact details
Via C. Zucchi, 21 – 41123 Modena
luigi.clivati@progettidiimpresa.it
www.progettidiimpresa.it
www.operando.eu
@OperandoH2020