Privacy & Cloud Services: Are We There Yet?

Marikyan, Davit; Llanos, Jose; Barati, Masoud; Aujla, Gagangeet Singh; Li, Yinhao; Adu-Duodu, Kwabena; Tahir, Sabeen; Rana, Omer; Papagiannidis, Savvas; Ranjan, Rajiv; Carr, Madeline

Abstract

The General Data Protection Regulation (GDPR) remains an important requirement for many electronic services which utilise user data. GDPR compliance verification for a cloud provider is aimed to confirm that personal data provided by a user is shared in-line with the requirements of this legislation, so that any subsequent audit carried out on the provider does not lead to a financial penalty. This verification involves two aspects: (i) ensuring that user consent has been obtained; (ii) sharing of data with external cloud providers is undertaken in a transparent way, so that the user is aware of which providers the information was shared with and for what purpose. Using a survey we describe why users are still ambivalent about the use of GDPR - and how its adoption can be improved using a Blockchain-based architecture that can provide greater transparency on how GDPR compliance is supported by cloud providers.

Citation

Marikyan, D., Llanos, J., Barati, M., Aujla, G. S., Li, Y., Adu-Duodu, K., Tahir, S., Rana, O., Papagiannidis, S., Ranjan, R., & Carr, M. (2021, August). Privacy & Cloud Services: Are We There Yet?. Presented at 2021 IEEE International Conference on Service-Oriented System Engineering (SOSE), Oxford, United Kingdom

• Presentation Conference Type: Conference Paper (published)
• Conference Name: 2021 IEEE International Conference on Service-Oriented System Engineering (SOSE)
• Start Date: Aug 23, 2021
• End Date: Aug 26, 2021
• Acceptance Date: Aug 26, 2021
• Online Publication Date: Oct 15, 2021
• Publication Date: 2021
• Deposit Date: Nov 7, 2021
• Publicly Available Date: Nov 8, 2021
• DOI: https://doi.org/10.1109/sose52839.2021.00006
• Public URL: https://durham-repository.worktribe.com/output/1137512