Beyond Just Data Privacy

Abstract

We argue that designing a system that "guarantees" the privacy of its information may not be enough. One must also consider the price for providing that protection: For example, is the information preserved adequately? Does the system perform well? We illustrate this point by presenting the concept of a "configuration" that can capture both security and longevity aspects of information. Configurations can be useful for describing the policies used to safeguard information, as well as in selecting the right mix of security and privacy that is desired.