Presentation by Tecnalia during NetFutures 2016

1. Reynold Greenlaw / Oxford
Computer Consultants
Leire Orue-Echevarria / TECNALIA
OPERANDO participates in:

2. OPERANDO
Online Privacy Enforcement, Rights
Assurance and Optimization
[web]: www.operando.eu
[Start – End dates]: 1 May 2015 – 30 Abril 2017
[Budget]: 4,455,811.25 €
[Partners]

3. What is the focus of
OPERANDO?
• Specify, Implement, field test, validate and
exploit an innovative privacy enforcement
framework that will enable the Privacy as a
Service (PaS) business paradigm and create a
broad market for online privacy services
online.

4. Solution proposed
Online Service Providers (OSP)
* IncludingPPAA
User Privacy
Regulator
Privacy Authority (PA)(*)
(*) operated by a
Privacy Service
Provider
User Privacy Policy (UPP) =
User sensitivity profile +
Explicit user input + Privacy
laws + Best practices

5. Challenges addressed (1/2)
• Escalating loss of online privacy
– Consumer services: Facebook, Google, LinkedIn…
– Consumers are targeted and stripped of their privacy
– In most cases, consumers are defenseless
– Reality outpaces regulations and privacy laws
• Government/public services struggle with privacy
protection
– Citizens’ mistrust/public outcry
– Inadvertent disclosures to other agencies
– Hacking attacks
– Stringent privacy laws compliance requirements

6. Challenges addressed (2/2)
Europe’s citizen privacy laws are world-leading
The evolving data protection and privacy frameworks
are yet to be implemented in a transparent and
friendly way
Users should be able to take part of the monetization
of the economic value of their data
Users need to understand and control how their
personal data are used
However, …

7. Impact
New business
concept that
provides privacy
enforcement
Privacy Enforcement
Platform
Privacy Service
Providers
April 2017
Privacy as a
Service
April 2017
Open Source www.operando.eu

8. Who benefits from
OPERANDO? (1/2)
Online Service
Providers (OSP)
* Including PPAA
Privacy Authority
and Privacy Service
Providers
• Gain the ability to cost-effectively comply
with privacy regulations
• Profit legimately, based on the user’s
consent, from the monetization of data
• Increase trust of users in PPAA online
services
• Enforcement of privacy in users’ devices
(stored data and sensor outputs of
mobile devices)

9. Who benefits from
OPERANDO? (2/2)
Users
Privacy
Regulators
• Manage their online privacy issues with an
intuitive Web GUI
• The UPP will be enforced by the PA in all
user’s devices
• Partake in the monetizationof their data
• Automated audit of OSP’s policies for
compliance with regulations

10. Success stories
• OPERANDO Focuses on
– Business to Consumer (B2C)
– Government to Consumer (G2C):
Healthcare and Public Administration

11. Success stories: Business to
Consumer (B2C) (1/4)
Challenge: Obfuscation of privacy settings
• SIX pages of privacy options to set
on Facebook
• The default settings are not privacy-
friendly
• Same problem on Google and other
major social networks

12. OPERANDO solution: Unified privacy dashboard
• Web-based unified privacy
settings dashboard
• Handles your accounts at
all the major services
• Single-click “best practices”
privacy lockdown
• Automated policy
watchdog
Privacy Dashboard
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Opt iion1 Opt iion1
Success stories: B2C (2/4)

13. OPERANDO solution: Privacy-for-benefit deals
Success stories:B2C (3/4)
The user can choose
to:
• Log in with SN
account and get and
economic benefit
or
• Log in with
email/password
Log in with
username &
password
and get a 5 € coupon for
your first purchase
or
Privacy-for-benefit deal
If no deal is offered,
OPERANDO will display a
privacy warning

14. Challenge: Access to social network data - users do not benefit
Success stories: B2C (4/4)

15. Identified Future challenges
• Real-time computation of privacy policies
changes
• AdBlockers
• Anonymization
• Privacy for benefit
• Sustainability of the Privacy Authorities
Business model
• Influence privacy regulations

16. Contact details
Leire Orue-Echevarria
Leire.Orue-Echevarria@tecnalia.com
Reynold Greenlaw
reynold@oxfordcc.co.uk