Private Data Access Mechanism based on P3P
P3P provides a standard means for Web sites to disclose their privacy policies when they need users' personal data for processing. A user can then decide whether or not to provide personal data to the sites based on the disclosed policies. However, this mechanism cannot guarantee that Web sites do act according to their policies once they have obtained user's personal data. In light of this, we proposed a new technical and legal approach, called Online Personal Data Licensing(OPDL). The idea is that the person has the right to access and modify those data provided to sites, and the use of a person's data must be authorized by the person through the issue of data licenses. Licenses can then be checked to prevent personal data from being misused.