Formalizing Data Deletion in the Context of the Right to Be Forgotten
The right of an individual to request the deletion of their personal data by an entity that might be storing it – referred to as the right to be forgotten – has been explicitly recognized, legislated, and exercised in several jurisdictions across the world, including the European Union, Argentina, a...
| Main Authors: | , |
|---|---|
| 其他作者: | |
| 格式: | 文件 |
| 语言: | English |
| 出版: |
Springer International Publishing
2021
|
| 在线阅读: | https://hdl.handle.net/1721.1/129575 |
| _version_ | 1826204479397036032 |
|---|---|
| author | Goldwasser, Shafrira Vasudevan, Prashant |
| author2 | Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science |
| author_facet | Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science Goldwasser, Shafrira Vasudevan, Prashant |
| author_sort | Goldwasser, Shafrira |
| collection | MIT |
| description | The right of an individual to request the deletion of their personal data by an entity that might be storing it – referred to as the right to be forgotten – has been explicitly recognized, legislated, and exercised in several jurisdictions across the world, including the European Union, Argentina, and California. However, much of the discussion surrounding this right offers only an intuitive notion of what it means for it to be fulfilled – of what it means for such personal data to be deleted. In this work, we provide a formal definitional framework for the right to be forgotten using tools and paradigms from cryptography. In particular, we provide a precise definition of what could be (or should be) expected from an entity that collects individuals’ data when a request is made of it to delete some of this data. Our framework captures most, though not all, relevant aspects of typical systems involved in data processing. While it cannot be viewed as expressing the statements of current laws (especially since these are rather vague in this respect), our work offers technically precise definitions that represent possibilities for what the law could reasonably expect, and alternatives for what future versions of the law could explicitly require. Finally, with the goal of demonstrating the applicability of our framework and definitions, we consider various natural and simple scenarios where the right to be forgotten comes up. For each of these scenarios, we highlight the pitfalls that arise even in genuine attempts at implementing systems offering deletion guarantees, and also describe technological solutions that provably satisfy our definitions. These solutions bring together techniques built by various communities. |
| first_indexed | 2024-09-23T12:56:15Z |
| format | Article |
| id | mit-1721.1/129575 |
| institution | Massachusetts Institute of Technology |
| language | English |
| last_indexed | 2024-09-23T12:56:15Z |
| publishDate | 2021 |
| publisher | Springer International Publishing |
| record_format | dspace |
| spelling | mit-1721.1/1295752022-09-28T10:58:57Z Formalizing Data Deletion in the Context of the Right to Be Forgotten Goldwasser, Shafrira Vasudevan, Prashant Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science The right of an individual to request the deletion of their personal data by an entity that might be storing it – referred to as the right to be forgotten – has been explicitly recognized, legislated, and exercised in several jurisdictions across the world, including the European Union, Argentina, and California. However, much of the discussion surrounding this right offers only an intuitive notion of what it means for it to be fulfilled – of what it means for such personal data to be deleted. In this work, we provide a formal definitional framework for the right to be forgotten using tools and paradigms from cryptography. In particular, we provide a precise definition of what could be (or should be) expected from an entity that collects individuals’ data when a request is made of it to delete some of this data. Our framework captures most, though not all, relevant aspects of typical systems involved in data processing. While it cannot be viewed as expressing the statements of current laws (especially since these are rather vague in this respect), our work offers technically precise definitions that represent possibilities for what the law could reasonably expect, and alternatives for what future versions of the law could explicitly require. Finally, with the goal of demonstrating the applicability of our framework and definitions, we consider various natural and simple scenarios where the right to be forgotten comes up. For each of these scenarios, we highlight the pitfalls that arise even in genuine attempts at implementing systems offering deletion guarantees, and also describe technological solutions that provably satisfy our definitions. These solutions bring together techniques built by various communities. 2021-01-26T18:16:09Z 2021-01-26T18:16:09Z 2020-05 2020-12-15T17:59:43Z Article http://purl.org/eprint/type/ConferencePaper 9783030457242 9783030457235 https://hdl.handle.net/1721.1/129575 Garg, Sanjam et al. "Formalizing Data Deletion in the Context of the Right to Be Forgotten." Advances in cryptology -- EUROCRYPT 2020, 39th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Lecture notes in computer science, 12106, Springer, 2020, 373-402 © 2020 The Author(s) en 10.1007/978-3-030-45724-2_13 Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) Creative Commons Attribution-Noncommercial-Share Alike http://creativecommons.org/licenses/by-nc-sa/4.0/ application/pdf Springer International Publishing arXiv |
| spellingShingle | Goldwasser, Shafrira Vasudevan, Prashant Formalizing Data Deletion in the Context of the Right to Be Forgotten |
| title | Formalizing Data Deletion in the Context of the Right to Be Forgotten |
| title_full | Formalizing Data Deletion in the Context of the Right to Be Forgotten |
| title_fullStr | Formalizing Data Deletion in the Context of the Right to Be Forgotten |
| title_full_unstemmed | Formalizing Data Deletion in the Context of the Right to Be Forgotten |
| title_short | Formalizing Data Deletion in the Context of the Right to Be Forgotten |
| title_sort | formalizing data deletion in the context of the right to be forgotten |
| url | https://hdl.handle.net/1721.1/129575 |
| work_keys_str_mv | AT goldwassershafrira formalizingdatadeletioninthecontextoftherighttobeforgotten AT vasudevanprashant formalizingdatadeletioninthecontextoftherighttobeforgotten |