15
WHITEPAPERONAALSYSTEMSAND ASSOCIATEDPRIVACYISSUES Authors (alphabetical order) %S 'SBODJTDP 'MØSF[3FWVFMUB ,6 %S 'FOH (V ,6 1SPG #BSCBSB 1JFSTDJPOFL ,6 1SPG 1BPMP 3FNBHOJOP ,6 Internal reviewers (alphabetical order) 1SPG .BSZ $IBNCFST ,6 .T ,BSFO (BMMJHBO 5$% .S %BOJFM )FFSZ $ZCFSNPPS .S «OHFM .BSUÓOF[$BWFSP 54# Graphic design &SSFNNF "TTPDJBUJ Published on January 2015

White Paper on AAL systems and associated privacy issues

Embed Size (px)

Citation preview

WHITE!PAPER!ON!AAL!SYSTEMS!AND ASSOCIATED!PRIVACY!ISSUES

Authors (alphabetical order)

%S��'SBODJTDP�'MØSF[�3FWVFMUB�,6%S��'FOH�(V�,61SPG��#BSCBSB�1JFSTDJPOFL�,61SPG��1BPMP�3FNBHOJOP�,6

Internal reviewers (alphabetical order)

1SPG��.BSZ�$IBNCFST�,6.T��,BSFO�(BMMJHBO�5$%.S��%BOJFM�)FFSZ�$ZCFSNPPS.S��«OHFM�.BSUÓOF[�$BWFSP�54#

Graphic design

&SSFNNF�"TTPDJBUJ

Published on January 2015

TABLE!OF!CONTENTS

Table of contents................................................................................................................................................................................................02Executive summary...........................................................................................................................................................................................03

1 Introduction..............................................................................................................................................................................04 2 Privacy, ethical and legal issues...........................................................................................................................................05 3 Privacy by Design...................................................................................................................................................................07 4 Privacy-enhancing technologies (PETs)...........................................................................................................................08 5 Privacy by context..................................................................................................................................................................09 6 Privacy in AAL system..........................................................................................................................................................10 7 Visual privacy.............................................................................................................................................................................11 8 Privacy preservation in the BREATHE project.............................................................................................................13

Disclaimer.............................................................................................................................................................................................................14

PAGE

02

PAGE

03

%VF�UP�UIF�BHJOH�QPQVMBUJPO�BOE�BO�JOTVGmDJFOU�BNPVOU�PG�QSPGFTTJPOBMMZ�USBJOFE� DBSFST � J�F�� JOGPSNBM� DBSFST�XPSMEXJEF �"NCJFOU� BTTJTUFE� MJWJOH�""-� UFDIOPMPHJFT� IBWF� HBJOFE� BO� JODSFBTJOH� QPQVMBSJUZ� JO� UFSNT� PG�BTTJTUJOH�CPUI�UIF�BTTJTUFE�QFSTPO�BOE�UIFJS�DBSFST�WJB�UIF�JOGPSNBUJPO�BOE�DPNNVOJDBUJPOT�UFDIOPMPHZ�*$5��.BKPSJUZ�PG�UIF�""-�BQQMJDBUJPOT�VUJMJTF�EJGGFSFOU� UZQFT�PG�TFOTPST� UP�HBUIFS�EBUB�BOE� JOGPSNBUJPO�PG� UIF�BTTJTUFE�QFSTPO �JO�PSEFS�UP�FWBMVBUF�UIFJS�XFMMCFJOH�BOE�TVCTFRVFOUMZ�UP�QSPWJEF�BQQSPQSJBUF�TVQQPSU�JG�OFFEFE��)PXFWFS �IBOEMJOH�UIF�EBUB�BOE�JOGPSNBUJPO�PG�UIF�BTTJTUFE�QFSTPO�BOE�UIFJS�DBSFST�SBJTFT�FUIJDBM �MFHBM�BOE�SFHVMBUPSZ�JTTVFT��5P�SFTPMWF�UIJT �NFBOT�PG�QSPUFDUJOH�UIF�SFMFWBOU�EBUB�BOE�JOGPSNBUJPO�NVTU�CF�JODPSQPSBUFE�JOUP�UIF�TZTUFN�UP�FOTVSF�UIF�QSJWBDZ�PG�UIF�BTTJTUFE�QFSTPO�BOE�UIFJS�DBSFST �UISPVHIPVU�UIF�EFTJHO�BOE�EFWFMPQNFOU�PG�""-�TZTUFNT�BOE�VMUJNBUFMZ�UIFJS�VTF�

5IF� NBJO� FUIJDBM� QSJODJQMFT� UIBU� BQQMZ� UP� ""-� BSF� CFOFmDFODF �OPO�NBMFmDFODF �DPOmEFOUJBMJUZ�BOE�SFTQFDU�GPS�BVUPOPNZ��4VCKFDUT�JO�""-� BQQMJDBUJPOT� TIPVME� CF� USFBUFE� BT� BVUPOPNPVT� BEVMUT� XIP� DBO�NFOUBMMZ�NBLF�EFDJTJPOT�BCPVU� UIFJS�XFMGBSF��5IJT�DBO�CF�QSPCMFNBUJD�XIFO� TFOTJOH� UFDIOPMPHJFT� BSF� JOWPMWFE � JO� QBSUJDVMBS � DBNFSBT�� "�UZQJDBM�WJTPO�TZTUFN�FNQMPZT�B�TFU�PG�DBNFSBT�UP�HBJO�DPNQMFNFOUBSZ�mFMET� PG� WJFXT� PG� UIF� NPOJUPSFE� TDFOF � UP� DPOUJOVPVTMZ� JEFOUJGZ� UIF�TVCKFDU�T� MPDBUJPOT� BOE� EFUFDU� UIFJS� BDUJWJUJFT�� *O� PSEFS� UP� QSFWFOU� UIF�TVCKFDU� GSPN�CFJOH� WJTVBMMZ� JEFOUJmFE�CZ�BOZ� JNBHFT�PS� WJEFPT�PG� UIF�TDFOF �UIF�WJTJPO�TZTUFN�NVTU�CF�NPEJmFE�XJUI�SFTQFDU�UP�QSJWBDZ��'PS�JOTUBODF �JG�TVDI�B�TZTUFN�PQFSBUFT�JO�SFBM�UJNF �XIFSF�BMM�WJEFP�TUSFBNT�BSF�QSPDFTTFE�UP�HFOFSBUF�MPDBUJPOT�BOE�BDUJWJUJFT�PG�UIF�TVCKFDU�XJUIPVU�TUPSJOH�BOZ�JNBHFT�PS�WJEFPT�PG�UIF�TDFOF �UIFO�UIF�TVCKFDU�DBOOPU�CF�WJTVBMMZ�JEFOUJmFE��5IF�QSPDFTTFE�JOGPSNBUJPO �F�H��MPHT�PG�UIF�MPDBUJPOT�BOE�BDUJWJUJFT �DBO�POMZ�CF�BDDFTTFE�CZ�BVUIPSJTFE�QFSTPOOFM �F�H��UIF�TVCKFDU�T�DBSFST��8IFOFWFS�B�EBOHFSPVT�TJUVBUJPO�JT�EFUFDUFE �F�H��B�GBMM �

JG� UIF�TVCKFDU�T�DBSFST�SFRVJSF� MJWF�TUSFBNJOH�PG� UIF�TDFOF � UIFO�DPNQVUFS�TFDVSJUZ�NFUIPET�DBO�CF�VTFE�UP�BVUIFOUJDBUF�UIF�BDDFTT�BOE�FTUBCMJTI�B�TFDVSFE�TUSFBNJOH�DIBOOFM��*O�BEEJUJPO �WJTJPO�CBTFE�QSJWBDZ�mMUFST�DBO�CF�BQQMJFE�UP�FOTVSF�UIF�TVCKFDU�JT�WJTVBMMZ�VOJEFOUJmBCMF�XIJMF�NBJOUBJOJOH�BO�JOGPSNBUJWF� SFQSFTFOUBUJPO� PG� UIF� TJUVBUJPO�� 'PS� FYBNQMF � UIF� BSFB� PG� UIF�TVCKFDU�DBO�CF�QJYFMBUFE�PS�SFQMBDFE�CZ�BO�BWBUBS�XJUI�UIF�TBNF�QPTF��"T�B�SFTVMU �NBOZ�QSJWBDZ�SFMBUFE�UFDIOPMPHJFT�DBO�CF�JOUSPEVDFE�UP�""-�BQQMJ-DBUJPOT�UP�SFTPMWF�UIF�DPSSFTQPOEJOH�FUIJDBM�JTTVFT �JU�JT�B�NBUUFS�PG�XIFUIFS�UIF�EFWFMPQFST�BSF�BCMF�UP�JODPSQPSBUF�BOE�FOGPSDF�TVDI�B�EFTJHO�QIJMPTP-QIZ�

#3&"5)&�BJNT�UP�EFTJHO�BOE�EFWFMPQ�BO�JOUFMMJHFOU�NPOJUPSJOH�TZTUFN�GPS�""-� FOWJSPONFOUT � CZ� FNQMPZJOH� DBNFSBT� BOE� PUIFS� UZQFT� PG� CJOBSZ�TFOTPST�� *O� PSEFS� UP� FOTVSF� UIF� QSJWBDZ� PG� VTFS� EBUB� BOE� JOGPSNBUJPO �#3&"5)&� GPMMPXT� B� QSJWBDZ�CZ�EFTJHO� BQQSPBDI�� 1BSUJDVMBSMZ � #3&"5)&�DPOTJEFST� QSJWBDZ� CZ� DPOUFYU� XIFSF� EBUB� JT� BDRVJSFE� BOE� USBOTNJUUFE�EFQFOEJOH�PO�B�OVNCFS�PG�QBSBNFUFST�FTUBCMJTIFE�CZ�UIF�JEFOUJUZ�BOE�TUBUF�PG�UIF�BTTJTUFE�QFSTPO �UIF�DBSFS �BOE�UIF�FOWJSPONFOU��.PSFPWFS �BO�JOUFMMJ-HFOU�BDDFTT�DPOUSPM�TDIFNF�XPVME�CF�JNQMFNFOUFE �XIFSF�UIF�BDDFTT�UP�VTFS� EBUB� BOE� JOGPSNBUJPO� JT� BVUIFOUJDBUFE� CBTFE� PO� UIF� QSF�BTTJHOFE�TFDVSJUZ� QSJWJMFHFT� PG� PUIFS� QBSUJFT�� 'PS� JOTUBODF � UIF� TDIFNF� TIPVME�BVUPNBUJDBMMZ�SFDPHOJTF�BOE�mMUFS�EBUB�BOE�JOGPSNBUJPO�UIBU�JT�OPU�QFSUJOFOU�UP� UIF� DBSFST� PCTFSWJOH�� 5IF�NBJO� EFTJHO� QIJMPTPQIZ� PG� #3&"5)& is to SFEVDF�OPU�POMZ�UIF�QPUFOUJBM�GPS�GBJMVSF�CZ�B�QFSTPO�PSHBOJTBUJPO�DPMMFDUJOH�EBUB�UP�BEIFSF�UP�CFTU�QSBDUJDF�JO�TBGFHVBSEJOH�VTFS�EBUB�BOE�JOGPSNBUJPO �CVU�BMTP�UIF�QPUFOUJBM�GPS�TFDVSJUZ�CSFBDIFT�PG�EBUB�TUPSBHFT�

EXEC

UTI

VE!

SUM

MA

RY

PAGE

04

"NCJFOU�"TTJTUFE�-JWJOH �DPNNPOMZ�BCCSFWJBUFE�BT�""- �QMBZT�B�NBKPS�SPMF�JO�IFMQJOH�GPSNBM�BOE�JOGPSNBM�DBSFST�UP�QSPWJEF�TVQQPSU�JO�BTTJTU-JOH� UIF�QFSTPO�DBSFE� GPS�BOE�B�IJHIFS�EFHSFF�PG� JOEFQFOEFOU� MJWJOH��""-�TZTUFNT�VTVBMMZ�NBLF�VTF�PG�BO�JOUFMMJHFOU�TZTUFN�UIBU�QSPWJEFT�B�NFBOT�UP�JOUFSBDU�CFUXFFO�B�VTFS�DBSFS�BOE�DBSFE�GPS�QFSTPO�BOE�UIF�TZTUFN� JUTFMG� UIBU�DBO�FMBCPSBUF�TFOTPSZ� JOGPSNBUJPO� UP�EFUFDU�FWFOUT�BOE�JODJEFOUT�JO�B�DPOUSPMMFE�QSJWBUF�FOWJSPONFOU��5FDIOPMPHZ�JT�HSBEV-BMMZ� HBJOJOH� BDDFQUBODF� BT� B� NFBOT� UP� DPNQMFNFOU� UIF� XPSL� PG�DBSFHJWFST�CZ�NPOJUPSJOH�BOE�BTTJTUJOH�QFSTPOT�XJUI�SFEVDFE�QIZTJDBM�PS� DPHOJUJWF� DBQBDJUZ� JO� UIFJS� EBZ�UP�EBZ� MJWJOH�� "NCJFOU� BTTJTUFE�TQBDFT�NBLF�VTF�PG�B�DPMMFDUJPO�PG�TFOTPST�UIBU�DPMMFDU�JOGPSNBUJPO�GSPN�UIF�FOWJSPONFOU�PS�JUT�EXFMMFST��#JOBSZ�TFOTPST�BSF�FNQMPZFE�UP�EFUFDU�PS�SFDPSE�PO�PGG�TUBUVT �UFNQFSBUVSF �NPUJPO �QSFTTVSF�PS�MJHIUJOH�MFWFM1��5IFTF� FNCFEEFE� TFOTPST� NBLF� JU� QPTTJCMF� UP� PCUBJO� UIF� TUBUF� PS�DPOUFYU�PG� UIF�FOWJSPONFOU��%FUFDUJPO�BOE�USBDLJOH�PG�QFPQMF�DBO�CF�JNQMFNFOUFE�VTJOH�JOGSBSFE�DFJMJOH�TFOTPST �TFOTPST�FNCFEEFE�JO�UIF�DBSQFU �BOE�SBEJP�GSFRVFODZ�JEFOUJmDBUJPO�3'*%�UBHT�PS�PUIFS�TFOTPST�XPSO�CZ�UIF�VTFST2��0UIFS�NPSF�DPNQMFY�TZTUFNT�FNQMPZJOH�BVEJP�BOE�WJEFP�DBO�BMTP�CF�VTFE��5IFTF�TFOTPST�NPOJUPS�UIF�QFSTPOT�BOE�UIFJS�JOUFSBDUJPOT�XJUI�PUIFS�QFPQMF�PS�PCKFDUT�BOE�BMMPX�UIF�SFDPHOJUJPO�PG�BDUJWJUJFT�PG�EBJMZ�MJWJOH�PS�VOUPXBSE�FWFOUT �F�H��GBMMT3��"EWBODFT� JO� TFOTPS� UFDIOPMPHZ� UPHFUIFS� XJUI� EFDSFBTJOH� DPTUT � JO�QBSUJDVMBS�PG�DBNFSBT �IBWF�MFE�UP�UIFJS�FYUFOTJWF�VTF�BT�B�UPPM�GPS�NPOJ-UPSJOH�QVCMJD�BOE�QSJWBUF�TQBDFT��$BNFSBT�BSF�OPX�DPNNPOMZ�VTFE�UP�NPOJUPS�FOWJSPONFOUT�TVDI�BT�TUSFFUT �USBJO�TUBUJPOT �BJSQPSUT�BOE�IPTQJ-UBM�CVJMEJOHT�BOE�BSF�JO�XJEFTQSFBE�VTF�JO�NBKPS�DJUJFT��8IJMF�NPOJUPSJOH�UFDIOPMPHZ� GPS� QVCMJD� TFDVSJUZ� BOE� BTTPDJBUFE� SFTFBSDI� JT� SFMBUJWFMZ�NBUVSF �BUUFOUJPO� JT�OPX� GPDVTTFE�PO� UIF�VTF�PG� TFOTJOH� UFDIOPMPHZ�FNCFEEFE� JO� FRVJQNFOU� BOE� EFWJDFT� VTFE� UP� QSPNPUF� IFBMUI� BOE�FOIBODF� XFMMCFJOH� BOE� TBGFUZ � PS� JO� TZTUFNT� UP� IFMQ� NBJOUBJO� BO�

JOEFQFOEFOU�MJGF�BU�IPNF��.POJUPSJOH�JT�PGUFO�TFFO�BT�JOUSVTJWF�BOE�BT�WJPMBUJOH�SJHIUT�UP�QSJWBDZ��5IJT�QPUFOUJBM�MPTT�PG�QSJWBDZ�JT�FYBDFSCBUFE�CZ�UIF�VTF�PG�DBNFSBT�CFDBVTF�WJEFP�EBUB�JT�FBTJMZ�VOEFSTUBOEBCMF�CZ�VOBVUIPSJTFE�WJFXFST��5IFSF�BSF�B�OVNCFS�PG�FUIJDBM�BOE� MFHBM� SFRVJSFNFOUT� UIBU�NVTU�CF�BEIFSFE� UP� JO�PSEFS� UP�QSFTFSWF�QSJWBDZ�� 5IVT�NFUIPET� UP�FOIBODF�QSJWBDZ�NVTU�CF�DPOTJEFSFE�XIFO�EFTJHOJOH�BTTJTUJWF�UFDIOPMPHJFT�JO�PSEFS�UP�BWPJE�TFFJOH�UIFN�BT�JOUSVTJWF�BOE�UP�JODSFBTF�BDDFQUBODF��5IFSFGPSF �#3&"5)&�GPMMPXT�B�QSJWBDZ�CZ�EFTJHO�BQQSPBDI��1BSUJDV-MBSMZ �#3&"5)&�DPOTJEFST�QSJWBDZ�CZ�DPOUFYU�XIFSF�EBUB�JT�BDRVJSFE�BOE�USBOTNJUUFE�EFQFOEJOH�PO�B�OVNCFS�PG�QBSBNFUFST�FTUBCMJTIFE�CZ�UIF� JEFOUJUZ� BOE� TUBUF� PG� UIF� BTTJTUFE� QFSTPO � UIF� DBSFS � BOE� UIF�FOWJSPONFOU��

INTR

OD

UC

TIO

N

1�%�+��$PPL �8�;��4POH��"NCJFOU�*OUFMMJHFODF�BOE�8FBSBCMF�$PNQVUJOH��4FOTPST�PO�UIF�#PEZ �JO�UIF�)PNF �BOE�#FZPOE �+PVSOBM�PG�"NCJFOU�*OUFMMJHFODF�BOE�4NBSU�&OWJSPONFOUT �������� ������

2 4��1BUFM �)��1BSL �1��#POBUP �-��$IBO �.��3PEHFST��"�SFWJFX�PG�XFBSBCMF�TFOTPST�BOE�TZTUFNT�XJUI�BQQMJDBUJPO�JO�SFIBCJMJUBUJPO �+PVSOBM�PG�/FVSP&OHJOFFSJOH�BOE�3FIBCJMJUBUJPO ��������

3 1�3BTIJEJ �"��.JIBJMJEJT��"�TVSWFZ�PO�BNCJFOU�BTTJTUFE�MJWJOH�UPPMT�GPS�PMEFS�BEVMUT �*&&&�KPVSOBM�PG�CJPNFEJDBM�BOE�IFBMUI�JOGPSNBUJDT ����������� ������

PAGE

05

5IF� NBJO� FUIJDBM� QSJODJQMFT� UIBU� BQQMZ� UP� ""-� BSF� CFOFmDFODF �OPO�NBMFmDFODF �DPOmEFOUJBMJUZ�BOE�SFTQFDU�GPS�BVUPOPNZ��6OEFSMZJOH�UIF�BQQMJDBUJPO�PG�UIFTF�QSJODJQMFT�JT�UIF�QSFTVNQUJPO�UIBU�UIJT�BQQMJFT�UP�TVCKFDUT�XIP�DBO�CF� USFBUFE�BT�BVUPOPNPVT�BEVMUT�BOE� UIFSFGPSF�BEVMUT�EFFNFE�UP�CF�NFOUBMMZ�VOmU�UP�NBLF�EFDJTJPOT�BCPVU�UIFJS�PXO�XFMGBSF �XJMM�OPU�CF�JODMVEFE��

Beneficence�SFMBUFT�UP�UIF�EPJOH�PG�HPPE�BOE�UIF�FYQFDUBUJPO�UIBU�UIF�QSPQPTFE� SFTFBSDI� XJMM� CSJOH� CFOFmUT� UP� UIF� SFTFBSDIFST � TVCKFDUT�BOE�PS� UP�TPDJFUZ�BU� MBSHF�� *U� UBLFT� JOUP�BDDPVOU� UIBU� UIF�PVUDPNFT�PG�TBGFS�BOE�NPSF�TFDVSF�IPNF�FOWJSPONFOUT�XJMM�B�BMMPX�QFPQMF�UP�NBJO-UBJO� UIFJS� JOEFQFOEFODF� GPS� MPOHFS� JO�IPNF�TFUUJOHT�BOE�C�QSPEVDF�TBGFS� DPNNVOJUJFT� BOE� TPDJFUJFT� CZ� JNQSPWFE� NJOJNBMMZ� JOUSVTJWF�TVSWFJMMBODF�NFBTVSFT�

Non-maleficence BEESFTTFT�UIF�JTTVF�PG�NJOJNJTJOH�PS�JEFBMMZ�BWPJEJOH�BOZ�IBSN�BOE�SFRVJSFT�UIBU�UIF�CFOFmUT�PG�UIF�SFTFBSDI�PVUXFJHI�BOZ�VOBWPJEBCMF� SJTLT�� � 5IJT� JOWPMWFT� B� SJTL�CFOFmU� BOBMZTJT� UP� JEFOUJGZ�QPUFOUJBM�SJTLT �FMJNJOBUF�BT�NBOZ�BT�QPTTJCMF�BOE�CBMBODF�SFNBJOJOH�VOBWPJEBCMF� SJTLT�BHBJOTU�CFOFmUT� GSPN� UIF� SFTFBSDI�PVUDPNFT�� 5IF�SJTLT�JO�UIF�EBUB�IBOEMJOH�BTQFDUT�DBO�CF�BWPJEFE�CZ�FOTVSJOH�UIBU�EBUB�JT�QSPQFSMZ�BOPOZNJTFE�BOE�UIBU�DPOmEFOUJBMJUZ�JTTVFT�BSF�GVMMZ�JEFOUJ-mFE�BOE�BEESFTTFE���

Confidentiality�SFRVJSFT�QFSTPOBM�EBUB�UIBU�CZ�XIJDI�BO�JOEJWJEVBM�DBO�CF�JEFOUJmFE�UP�CF�QSPUFDUFE��5IF�BNPVOU�PG�QFSTPOBM�EBUB�TIPVME�CF�NJOJNJTFE�BOE�POMZ�BDRVJSFE�XIFSF�OFDFTTBSZ� GPS� UIF�QSPKFDU��4VDI�EBUB�TIPVME�POMZ�CF�BWBJMBCMF�UP�SFTFBSDIFST�JO�UIF�DBTF�PG�B�SFTFBSDI�QSPKFDU�BOE�JO�BMM�DBTFT�UP�UIF�DBSFS�XIP�OFFET�UP�BDDFTT�JU��*U�TIPVME�CF�LFQU�TFDVSF�GPS�B�QFSJPE�UIBU�BEIFSFT�UP�UIF�EBUB�QSPUFDUJPO�SFHVMBUJPOT�JO�UIF�NFNCFS�TUBUF�XIFSF�JU�JT�CFJOH�DPMMFDUFE�BOE�NBJOUBJOFE�BT�XFMM�BT�UP�&6�SFHVMBUJPOT��

Respect for autonomy SFDPHOJTFT�UIF�SJHIU�GPS�BTTJTUFE�QFSTPOT�"1�

UP�CF�GVMMZ�JOGPSNFE�UIBU�UIFZ�BSF�CFJOH�XBUDIFE�BOE�IPX�BOE�GPS�XIBU�UIFJS�EBUB�XJMM�CF�VTFE��5IFZ�TIPVME�IBWF�DPOUSPM�PWFS�UIF�UJNFT�BOE�EVSBUJPOT�UIBU�UIFZ�BSF�CFJOH�XBUDIFE� Privacy and dignity of the individual

5IF�VOEFSMZJOH�IVNBO�GBDUPS�UIBU�OFFET�UP�CF�DBSFGVMMZ�NPOJUPSFE�BU�FWFSZ�TUBHF� JT� NBJOUBJOJOH� UIF� EJHOJUZ� PG� UIF� JOEJWJEVBM�� 5IJT� TIPVME� UBLF� JOUP�BDDPVOU�UIF�GBDU�UIBU�UIPTF�XIP�SFRVJSF�DBSF �UIF�"1T�BSF�QBSUJDVMBSMZ�WVMOFS-BCMF���5IF�QPJOUT�UIBU�XJMM�CF�DPOTJEFSFE�BSF�t��'VMM�VOEFSTUBOEJOH�PG�XIBU�UIF�UFDIOPMPHZ�PGGFST�BOE�XIBU�EBUB�XJMM�CF����VTFE �WJFXFE �USBOTGFSSFE�BOE�TUPSFE�t��8IP�XJMM�CF�WJFXJOH �XIBU�BDUJWJUJFT�BOE�XIFO��BOEt��5IF�QPUFOUJBM�PG�UIJSE�QBSUJFT�JOBEWFSUFOUMZ�TFFJOH�UIF�"1�BOE�IPX�UIJT�����DBO�CF�BWFSUFE�BOE�NBOBHFE3FHVMBS� VQEBUFT� UP� UIF�"1�PG�XIBU�IBT�CFFO� USBOTNJUUFE�BOE�WJFXFE�XJMM�BEESFTT�UIFTF�JTTVFT��5IF�JOQVU�PG�UIF�"1�BOE�UIFJS�WJFXT �XIJDI�NBZ�BMUFS�XJUI�UJNF �XJMM�CF�UBLFO�JOUP�BDDPVOU�

5IF�JTTVF�PG�QSJWBDZ�BOE�UIF�GBDU�UIBU�UIF�DBSFS�XJMM�CF�BCMF�UP�WJFX�UIF�"1�NBZ�BMUFS�UIF�SFMBUJPOTIJQ�CFUXFFO�UIF�UXP��5IJT�JT�EJGmDVMU�UP�BOUJDJQBUF�BT�JU�NBZ� TUSFOHUIFO� UIF� CPOE � JODSFBTF� UIF� EFQFOEFODZ� BOE� UIFSFCZ� UIF�QSFTTVSF�PO�UIF�DBSFS�PS�JU�NBZ�NBLF�UIF�"1�GFFM�UIBU�UIF�DBSFS�IBT�UPP�NVDI�DPOUSPM� PWFS� UIF� QSJWBDZ� PG� UIF� "1�� 5IJT� XJMM� CF� DBSFGVMMZ� NPOJUPSFE� BOE�DIBOHFT�JO�UIF�SFMBUJPOTIJQ�BEESFTTFE�

Legal issues

5IF�MBX�PO�DPOmEFOUJBMJUZ�JO�UIF�6,�JT�HPWFSOFE�CZ�UIF�%BUB�1SPUFDUJPO�"DU�����4��BOE�JT�TVNNBSJTFE�JO�UIF���QSJODJQMFT�UIBU�DPWFS�EBUB�DPOUSPM �UZQFT�PG�EBUB �NPEFT�BOE�MFOHUI�PG�UJNF�PG�TUPSBHF �QFSNJTTJPO�UP�VTF�UIF�EBUB�BOE�EBUB�USBOTGFS��4JNJMBS� MFHJTMBUJPO� JT�BQQMJFE� JO�UIF�3FQVCMJD�PG� *SFMBOE�%BUB�1SPUFDUJPO�"DUT��������BOE��������BOE�4QBJO�0SHBOJD�-BX���������PG����%FDFNCFS� PO� UIF� 1SPUFDUJPO� PG� 1FSTPOBM�%BUB�� �� 5IF�&6�EBUB� QSPUFDUJPO�SFGPSN �XIJDI�WPUF�XBT�UBLFO�JO�UIF�&VSPQFBO�1BSMJBNFOU�JO�.BSDI������BJNT�UP�IBSNPOJTF�EBUB�QSPUFDUJPO�BDSPTT�UIF�&6�

PRIV

ACY"

ETH

ICA

L!A

ND

!LEG

AL!

ISSU

ES

PAGE

06

PRIV

ACY"

ETH

ICA

L!A

ND

!LEG

AL!

ISSU

ES

4�%BUB�1SPUFDUJPO�"DU����� �IUUQ���XXX�MFHJTMBUJPO�HPW�VL�VLQHB���������DPOUFOUT�BDDFTTFE�PO�/PWFNCFS�����

� %BUB�1SPUFDUJPO�"DU����� �IUUQ���XXX�JSJTITUBUVUFCPPL�JF������FO�BDU�QVC������JOEFY�IUNM�BDDFTTFE�PO�/PWFNCFS�����

� %BUB�1SPUFDUJPO�"NFOENFOU�"DU����� �IUUQ���XXX�JSJTITUBUVUFCPPL�JF������FO�BDU�QVC������JOEFY�IUNM�BDDFTTFE�PO�/PWFNCFS�����

��0SHBOJD�-BX���������PG����%FDFNCFS�PO�UIF�1SPUFDUJPO�PG�1FSTPOBM�%BUB �IUUQ���XXX�BHQE�FT�QPSUBMXFC"(1%�FOHMJTI@SFTPVSDFT�SFHVMBUJPOT�DPNNPO�QEGT�-FZ@0SHBJDB@�����@JOHMFT�QEG�BDDFTTFE�PO�/PWFNCFS�����

PAGE

07

5IF�UFSN�1SJWBDZ�CZ�%FTJHO��XBT�DSFBUFE�JO�UIF���T�CZ�"OO�$BWPVLJBO �*OGPSNBUJPO���1SJWBDZ�$PNNJTTJPOFS� PG�0OUBSJP �$BOBEB��1SJWBDZ�CZ�%FTJHO�SFGFST�UP�UIF�QIJMPTPQIZ�BOE�BQQSPBDI�PG�FNCFEEJOH�QSJWBDZ�JOUP�UIF�EFTJHO �PQFSBUJPO�BOE�NBOBHFNFOU�PG�JOGPSNBUJPO�QSPDFTTJOH�UFDIOPMPHJFT�BOE�TZTUFNT�

)FS� PGmDF� EFWFMPQFE� UIF� �� 'PVOEBUJPOBM� 1SJODJQMFT� PG� 1SJWBDZ� CZ�%FTJHO �XIJDI�BSF�OPXBEBZT�B�SFGFSFODF�JO�UIF�EFTJHO�PG�UFDIOPMPHJFT��5IFTF�QSJODJQMFT�BSF�

1. Proactive not Reactive; Preventative not Remedial

5IF�1SJWBDZ�CZ�%FTJHO�BQQSPBDI�JT�DIBSBDUFSJ[FE�CZ�QSPBDUJWF�SBUIFS�UIBO� SFBDUJWF�NFBTVSFT�� *U� BOUJDJQBUFT� BOE�QSFWFOUT� QSJWBDZ�JOWBTJWF�FWFOUT�CFGPSF�UIFZ�IBQQFO��1SJWBDZ�CZ�%FTJHO�EPFT�OPU�XBJU�GPS�QSJWBDZ�SJTLT� UP� NBUFSJBMJ[F � OPS� EPFT� JU� PGGFS� SFNFEJFT� GPS� SFTPMWJOH� QSJWBDZ�JOGSBDUJPOT� PODF� UIFZ� IBWF� PDDVSSFE� o� JU� BJNT� UP� QSFWFOU� UIFN� GSPN�PDDVSSJOH��*O�TIPSU �1SJWBDZ�CZ�%FTJHO�DPNFT�CFGPSF�UIF�GBDU �OPU�BGUFS�

2. Privacy as the Default Setting

8F�DBO�BMM�CF�DFSUBJO�PG�POF�UIJOH�o�UIF�EFGBVMU�SVMFTþ�1SJWBDZ�CZ�%FTJHO�TFFLT� UP� EFMJWFS� UIF� NBYJNVN� EFHSFF� PG� QSJWBDZ� CZ� FOTVSJOH� UIBU�QFSTPOBM�EBUB�BSF�BVUPNBUJDBMMZ�QSPUFDUFE� JO�BOZ�HJWFO� *5� TZTUFN�PS�CVTJOFTT� QSBDUJDF�� *G� BO� JOEJWJEVBM� EPFT� OPUIJOH � UIFJS� QSJWBDZ� TUJMM�SFNBJOT� JOUBDU��/P�BDUJPO� JT� SFRVJSFE�PO� UIF�QBSU� PG� UIF� JOEJWJEVBM� UP�QSPUFDU�UIFJS�QSJWBDZ�o�JU�JT�CVJMU�JOUP�UIF�TZTUFN �CZ�EFGBVMU�

3. Privacy Embedded into Design

1SJWBDZ� JT�FNCFEEFE� JOUP� UIF�EFTJHO�BOE�BSDIJUFDUVSF�PG� *5�TZTUFNT�BOE�CVTJOFTT�QSBDUJDFT��*U�JT�OPU�CPMUFE�PO�BT�BO�BEE�PO �BGUFS�UIF�GBDU��5IF� SFTVMU� JT� UIBU� JU� CFDPNFT� BO� FTTFOUJBM� DPNQPOFOU� PG� UIF� DPSF�GVODUJPOBMJUZ�CFJOH�EFMJWFSFE��1SJWBDZ�JT�JOUFHSBM�UP�UIF�TZTUFN �XJUIPVU�EJNJOJTIJOH�GVODUJPOBMJUZ�

4. Full Functionality – Positive-Sum, not Zero-Sum

1SJWBDZ�CZ�%FTJHO�TFFLT�UP�BDDPNNPEBUF�BMM�MFHJUJNBUF�JOUFSFTUT�BOE�PCKFD-UJWFT� JO� B� QPTJUJWF�TVN� iXJO�XJOw� NBOOFS � OPU� UISPVHI� B� EBUFE � [FSP�TVN�BQQSPBDI � XIFSF� VOOFDFTTBSZ� USBEF�PGGT� BSF� NBEF�� 1SJWBDZ� CZ� %FTJHO�BWPJET� UIF� QSFUFODF� PG� GBMTF� EJDIPUPNJFT � TVDI� BT� QSJWBDZ� WT�� TFDVSJUZ �EFNPOTUSBUJOH�UIBU�JU�JT�QPTTJCMF�UP�IBWF�CPUI�

5. End-to-End Security – Full Lifecycle Protection

1SJWBDZ�CZ�%FTJHO �IBWJOH�CFFO�FNCFEEFE�JOUP�UIF�TZTUFN�QSJPS�UP�UIF�mSTU�FMFNFOU�PG�JOGPSNBUJPO�CFJOH�DPMMFDUFE �FYUFOET�UISPVHIPVU�UIF�FOUJSF�MJGFDZ-DMF�PG�UIF�EBUB�JOWPMWFE �GSPN�TUBSU�UP�mOJTI��5IJT�FOTVSFT�UIBU�BU�UIF�FOE�PG�UIF�QSPDFTT �BMM�EBUB�BSF�TFDVSFMZ�EFTUSPZFE �JO�B�UJNFMZ�GBTIJPO��5IVT �1SJWBDZ�CZ�%FTJHO�FOTVSFT�DSBEMF�UP�HSBWF �MJGFDZDMF�NBOBHFNFOU�PG�JOGPSNBUJPO �FOE-UP�FOE�

6. Visibility and Transparency – Keep it Open

1SJWBDZ� CZ� %FTJHO� TFFLT� UP� BTTVSF� BMM� TUBLFIPMEFST� UIBU� XIBUFWFS� UIF�CVTJOFTT�QSBDUJDF�PS�UFDIOPMPHZ�JOWPMWFE �JU�JT�JO�GBDU �PQFSBUJOH�BDDPSEJOH�UP�UIF�TUBUFE�QSPNJTFT�BOE�PCKFDUJWFT �TVCKFDU�UP�JOEFQFOEFOU�WFSJmDBUJPO��*UT�DPNQPOFOU�QBSUT� BOE�PQFSBUJPOT� SFNBJO� WJTJCMF�BOE� USBOTQBSFOU � UP� VTFST�BOE�QSPWJEFST�BMJLF��3FNFNCFS �USVTU�CVU�WFSJGZ�

7. Respect for User Privacy – Keep it User-Centric

"CPWF�BMM �1SJWBDZ�CZ�%FTJHO�SFRVJSFT�BSDIJUFDUT�BOE�PQFSBUPST�UP�LFFQ�UIF�JOUFSFTUT�PG� UIF� JOEJWJEVBM�VQQFSNPTU�CZ�PGGFSJOH�TVDI�NFBTVSFT�BT�TUSPOH�QSJWBDZ�EFGBVMUT �BQQSPQSJBUF�OPUJDF �BOE�FNQPXFSJOH�VTFS�GSJFOEMZ�PQUJPOT��,FFQ�JU�VTFS�DFOUSJD��

PRIV

ACY

!BY

!DES

IGN

���"��$BWPVLJBO��1SJWBDZ�CZ�%FTJHO ��IUUQ���XXX�JQD�PO�DB�JNBHFT�3FTPVSDFT�QSJWBDZCZEFTJHO�QEG�BDDFTTFE�PO�/PWFNCFS�����

PAGE

08

5IF�BQQMJDBUJPO�PG�*OGPSNBUJPO�BOE�$PNNVOJDBUJPO�5FDIOPMPHJFT�*$5�UP�QSPUFDU�QSJWBDZ�IBT�CFDPNF�FYUFOTJWFMZ�LOPXO�BT�1SJWBDZ-&OIBODJOH�5FDIOPMPHJFT�1&5T��5IFZ�IBWF�CFFO�EFTDSJCFE�JO�EJGGFSFOU�XBZT�CVU�UIF�NPTU�BEPQUFE�EFmOJUJPO�XBT�NBEF�JO�UIF�1*4"�&VSPQFBO�1SPKFDU�

i1SJWBDZ�&OIBODJOH�5FDIOPMPHJFT�JT�B�TZTUFN�PG�*$5�NFBTVSFT�QSPUFDUJOH�JOGPSNBUJPOBM�QSJWBDZ�CZ�FMJNJOBUJOH�PS�NJOJNJTJOH�QFSTPOBM�EBUB�UIFSFCZ�QSFWFOUJOH�VOOFDFTTBSZ�PS�VOXBOUFE�QSPDFTTJOH�PG�QFSTPOBM�EBUB �XJUIPVU�UIF�MPTT�PG�GVODUJPOBMJUZ�PG�UIF�JOGPSNBUJPO�

TZTUFN���w

5IFTF�UFDIOPMPHJFT�BSF�WFSZ�SFMFWBOU�OPXBEBZT��'PS�JOTUBODF �UIF�&VSP-QFBO�$PNNJTTJPO�DPOTJEFST�UIBU�1&5T�TIPVME�CF�EFWFMPQFE�BOE�NPSF�XJEFMZ�VTFE � JO�QBSUJDVMBS�XIFSF�QFSTPOBM�EBUB� JT�QSPDFTTFE� UISPVHI�*$5�OFUXPSLT��5IF�$PNNJTTJPO�DPOTJEFST�UIBU�XJEFS�VTF�PG�1&5T�XPVME�JNQSPWF�UIF�QSPUFDUJPO�PG�QSJWBDZ�BT�XFMM�BT�IFMQ�GVMmM�EBUB�QSPUFDUJPO�SVMFT��5IF�VTF�PG�1&5T�XPVME�CF�DPNQMFNFOUBSZ�UP�UIF�FYJTUJOH�MFHBM�GSBNFXPSL�BOE�FOGPSDFNFOU�NFDIBOJTNT���

1&5T� JODPSQPSBUF� 'BJS� *OGPSNBUJPO� 1SBDUJDFT� '*1T � GPMMPXJOH� GPS�JOTUBODF� UIF� CBTJD� QSJODJQMFT� EFWFMPQFE� CZ� UIF� 0SHBOJTBUJPO� GPS�&DPOPNJD�$P�PQFSBUJPO�BOE�%FWFMPQNFOU11�t� �Collection Limitation:� 5IFSF� TIPVME�CF� MJNJUT� UP� UIF�DPMMFDUJPO�PG�QFSTPOBM�EBUB�BOE�BOZ�TVDI�EBUB�TIPVME�CF�PCUBJOFE�CZ�MBXGVM�BOE�GBJS�NFBOT�BOE �XIFSF�BQQSPQSJBUF �XJUI�UIF�LOPXMFEHF�PS�DPOTFOU�PG�UIF�EBUB�TVCKFDU�t��Data Quality:�1FSTPOBM�EBUB�TIPVME�CF�SFMFWBOU�UP�UIF�QVSQPTFT�GPS�XIJDI� UIFZ� BSF� UP� CF� VTFE � BOE � UP� UIF� FYUFOU� OFDFTTBSZ� GPS� UIPTF�QVSQPTFT �TIPVME�CF�BDDVSBUF �DPNQMFUF�BOE�LFQU�VQ�UP�EBUF�t��Purpose Specification: 5IF�QVSQPTFT�GPS�XIJDI�QFSTPOBM�EBUB�BSF�DPMMFDUFE�TIPVME�CF�TQFDJmFE�OPU�MBUFS�UIBO�BU�UIF�UJNF�PG�EBUB�DPMMFD-UJPO�BOE�UIF�TVCTFRVFOU�VTF�MJNJUFE�UP�UIF�GVMmMNFOU�PG�UIPTF�QVSQPTFT�

PS�TVDI�PUIFST�BT�BSF�OPU�JODPNQBUJCMF�XJUI�UIPTF�QVSQPTFT�BOE�BT�BSF�TQFDJ-mFE�PO�FBDI�PDDBTJPO�PG�DIBOHF�PG�QVSQPTF�t��Use Limitation:�1FSTPOBM�EBUB�TIPVME�OPU�CF�EJTDMPTFE �NBEF�BWBJMBCMF�PS�PUIFSXJTF�VTFE�GPS�QVSQPTFT�PUIFS�UIBO�UIPTF�TQFDJmFE�JO�BDDPSEBODF�XJUI�UIF�1VSQPTF�4QFDJmDBUJPO�1SJODJQMF�FYDFQU�B�XJUI�UIF�DPOTFOU�PG� UIF�EBUB�TVCKFDU��PS�C�CZ�UIF�BVUIPSJUZ�PG�MBX�t��Security Safeguards: 1FSTPOBM�EBUB�TIPVME�CF�QSPUFDUFE�CZ�SFBTPOBCMF�TFDVSJUZ� TBGFHVBSET� BHBJOTU� TVDI� SJTLT� BT� MPTT� PS� VOBVUIPSJTFE� BDDFTT �EFTUSVDUJPO �VTF �NPEJmDBUJPO�PS�EJTDMPTVSF�PG�EBUB�t� Openness:�5IFSF�TIPVME�CF�B�HFOFSBM�QPMJDZ�PG�PQFOOFTT�BCPVU�EFWFMPQ-NFOUT �QSBDUJDFT�BOE�QPMJDJFT�XJUI�SFTQFDU�UP�QFSTPOBM�EBUB��.FBOT�TIPVME�CF� SFBEJMZ� BWBJMBCMF� PG� FTUBCMJTIJOH� UIF� FYJTUFODF� BOE� OBUVSF� PG� QFSTPOBM�EBUB �BOE�UIF�NBJO�QVSQPTFT�PG�UIFJS�VTF �BT�XFMM�BT�UIF�JEFOUJUZ�BOE�VTVBM�SFTJEFODF�PG�UIF�EBUB�DPOUSPMMFS�t� Individual Participation:�"O�JOEJWJEVBM�TIPVME�IBWF�UIF�SJHIU�B�UP�PCUBJO�GSPN�B�EBUB�DPOUSPMMFS �PS�PUIFSXJTF �DPOmSNBUJPO�PG�XIFUIFS�PS�OPU�UIF�EBUB�DPOUSPMMFS�IBT�EBUB� SFMBUJOH� UP�IJN��C� UP�IBWF�DPNNVOJDBUFE� UP�IJN �EBUB�SFMBUJOH�UP�IJN�XJUIJO�B�SFBTPOBCMF�UJNF��BU�B�DIBSHF �JG�BOZ �UIBU�JT�OPU�FYDFT-TJWF��JO�B�SFBTPOBCMF�NBOOFS��BOE�JO�B�GPSN�UIBU�JT�SFBEJMZ�JOUFMMJHJCMF�UP�IJN��D�UP�CF�HJWFO�SFBTPOT�JG�B�SFRVFTU�NBEF�VOEFS�TVCQBSBHSBQIT�B�BOE�C�JT�EFOJFE �BOE�UP�CF�BCMF�UP�DIBMMFOHF�TVDI�EFOJBM��BOE�E�UP�DIBMMFOHF�EBUB�SFMBUJOH�UP�IJN�BOE �JG�UIF�DIBMMFOHF�JT�TVDDFTTGVM�UP�IBWF�UIF�EBUB�FSBTFE �SFDUJmFE �DPNQMFUFE�PS�BNFOEFE��BOEt��Accountability: "�EBUB�DPOUSPMMFS�TIPVME�CF�BDDPVOUBCMF�GPS�DPNQMZJOH�XJUI�NFBTVSFT �XIJDI�HJWF�FGGFDU�UP�UIF�QSJODJQMFT�TUBUFE�BCPWF�

PRIV

ACY#

ENH

AN

CIN

G!T

ECH

NO

LOG

IES

$PET

S%

��1*4"�$POTPSUJVN��)BOECPPL�PG�1SJWBDZ�BOE�1SJWBDZ�&OIBODJOH�5FDIOPMPHJFT�o�5IF�DBTF�PG�*OUFMMJHFOU�4PGUXBSF�"HFOUT �(�8��WBO�#MBSLPN �+�+��#PSLJOH �BOE�+�(�&��0ML�FET� ������

���$PNNJTTJPO�PG�UIF�&VSPQFBO�$PNNVOJUJFT��$0.�������� �$PNNVOJDBUJPO�GSPN�UIF�$PNNJTTJPO�UP�UIF�&VSPQFBO�1BSMJBNFOU�BOE�5IF�$PVODJM�PO�1SPNPUJOH�%BUB�1SPUFDUJPO�CZ�1SJWBDZ�&OIBODJOH�5FDIOPMPHJFT�1&5T ������

11�0&$%��5IF�0&$%�1SJWBDZ�'SBNFXPSL �IUUQ���XXX�PFDE�PSH�TUJ�JFDPOPNZ�PFDE@QSJWBDZ@GSBNFXPSL�QEG�BDDFTTFE�PO�/PWFNCFS�����

PAGE

09

6CJRVJUPVT�DPNQVUJOH �DPOUFYU�BXBSFOFTT �JOUFMMJHFODF�BOE�OBUVSBM�JOUFSBDUJPO�BSF�UIF�NBJO�QSPQFSUJFT�PG�BNCJFOU�JOUFMMJHFODF�BOE�TNBSU�FOWJSPONFOUT��$POUFYU�JT�iBOZ�JOGPSNBUJPO�UIBU�DBO�CF�VTFE�UP�DIBSBD-UFSJTF�UIF�TJUVBUJPO�PG�FOUJUJFT�J�F��XIFUIFS�B�QFSTPO �QMBDF�PS�PCKFDU�UIBU�BSF�DPOTJEFSFE�SFMFWBOU�UP�UIF�JOUFSBDUJPO�CFUXFFO�B�VTFS�BOE�BO�BQQMJDBUJPO �JODMVEJOH�UIF�VTFS�BOE�UIF�BQQMJDBUJPO�UIFNTFMWFT��$POUFYU�JT�UZQJDBMMZ�UIF�MPDBUJPO �JEFOUJUZ�BOE�TUBUF�PG�QFPQMF �HSPVQT �BOE�DPNQVUBUJPOBM�BOE�QIZTJDBM�PCKFDUT12�w�$POUFYU�BXBSF�DPNQVUJOH�SFGFST�UP�BO�BQQMJDBUJPO�T�BCJMJUZ�UP�BEBQU�UP�DIBOHJOH�DJSDVNTUBODFT�BOE�SFTQPOE�BDDPSEJOH�UP�UIF�DPOUFYU�PG�VTF13��

3FDFOUMZ �B�QSJWBDZ�CZ�DPOUFYU�QBSBEJHN�XBT�JOUSPEVDFE�GPS�SFNPUF�WJTVBM�NPOJUPSJOH�PG�BTTJTUFE�QFSTPOT14��5IJT�QBSBEJHN�QSPQPTFT�B�MFWFM�CBTFE�TDIFNF�UP�BDDFTT�WJEFP�EBUB�BMUIPVHI�JU�DPVME�CF�FYUFOEFE�UP�BOZ�QFSTPOBM�EBUB�JO�PSEFS�UP�QSPUFDU�QSJWBDZ��&BDI�MFWFM�FTUBCMJTIFT�UIF�XBZ�JO�XIJDI�UIF�WJEFP�TUSFBN�JT�NPEJmFE�BOE�EJTQMBZFE�BOE �UIFSFGPSF �XIJDI�QSPUFDUJPO�EFHSFF�JT�QSPWJEFE��*O�UIJT�TDIFNF �UIF�BQQSPQSJBUF�MFWFM�JT�EZOBNJDBMMZ�TFMFDUFE�BDDPSEJOH�UP�UIF�DPOUFYU �NPEJGZJOH�UIF�SBX�WJEFP�CFGPSF�JU�JT�EJTQMBZFE �BT�PSJHJOBMMZ�QSPQPTFE�JO�UIF�i(PPE�#SPUIFSw�QSPQPTBM����

5IF�DPOUFYU�TIPVME�QSPWJEF�FOPVHI�JOGPSNBUJPO�UP�FNQPXFS�UIF�BTTJTUFE�QFSTPOT�UP�BEBQU�QSJWBDZ�UP�UIFJS�QSFGFSFODFT �JO�TVDI�B�XBZ�UIBU�UIFZ�DBO�EFDJEF�XIP �IPX �BOE�XIFO�UIFJS�DBSFST�DBO�XBUDI�UIFN��*O�BO�BTTJTUFE�MJWJOH�FOWJSPONFOU�UIF�DPOUFYU�NBZ�CF�EFTDSJCFE�CZ������5IF�JEFOUJUZ�PG�UIF�TVCKFDU �JO�PSEFS�UP�SFUSJFWF�UIF�QSJWBDZ�QSPmMF������5IF�BQQFBSBODF �F�H��ESFTTFE������5IF�MPDBUJPO �F�H��LJUDIFO �CBUISPPN �CFESPPN�����5IF�PO�HPJOH�BDUJWJUZ �F�H��IBWJOH�B�TIPXFS �XBUDIJOH�57 �TMFFQJOH �

SFDFJWJOH�B�WJTJU��BOE����5IF�JEFOUJUZ�PG�UIF�PCTFSWFS��UIF�DMPTFOFTT�PG�UIF�BTTJTUFE�QFSTPO�XJUI�B�QBSUJDVMBS�DBSFS�

6TJOH�UIFTF�WBSJBCMFT �BO�JOEJWJEVBM�DBO�UIFO�TFMFDU�JO�BEWBODF�B�WJTVBMJTBUJPO�MFWFM�UP�BOZ�TJUVBUJPO�UIBU�DPVME�CF�NPEFMMFE�CZ�UIF�DPOUFYU �J�F��HJWJOH�EJGGFSFOU�QFSNJTTJPOT�UP�BDDFTT�UIF�WJEFP�TUSFBN�UP�UIF�WBSJPVT�EJGGFSFOU�DBSFST�JO�EJGGFSFOU�XBZT�BDDPSEJOH�UP�XIBU�JT�IBQQFOJOH�BU�UIF�BTTJTUFE�QFSTPO�T�IPNF��

PRIV

ACY

!BY

!CO

NTE

XT

12�"�,��%FZ �(�%��"CPXE �%��4BMCFS��"�DPODFQUVBM�GSBNFXPSL�BOE�B�UPPMLJU�GPS�TVQQPSUJOH�UIF�SBQJE� QSPUPUZQJOH� PG� DPOUFYU�BXBSF� BQQMJDBUJPOT � )VNBO�DPNQVUFS� JOUFSBDUJPO � ���������� ������

13 /��#SJDPO�4PVG �$�3��/FXNBO��$POUFYU� BXBSFOFTT� JO� IFBMUI� DBSF��"� SFWJFX � *OUFSOBUJPOBM�+PVSOBM�PG�.FEJDBM�*OGPSNBUJDT ��������� ������

14 +�3�� 1BEJMMB�-ØQF[ � "�"�� $IBBSBPVJ � '�� 'MØSF[�3FWVFMUB�� 7JTVBM� 1SJWBDZ� CZ� $POUFYU�� "�-FWFM�#BTFE�7JTVBMJTBUJPO�4DIFNF ��UI� *OUFSOBUJPOBM�$POGFSFODF�PO�6CJRVJUPVT�$PNQVUJOH���"NCJFOU�*OUFMMJHFODF �JO�-FDUVSF�/PUFT�JO�$PNQVUFS�4DJFODF ������������� ������

�� +�3��1BEJMMB�-ØQF[ �'��'MØSF[�3FWVFMUB �%�/��.POFLPTTP �1��3FNBHOJOP��5IF�ý(PPEý�#SPUIFS��.POJUPSJOH� 1FPQMF� "DUJWJUZ� JO� 1SJWBUF� 4QBDFT � �UI� *OUFSOBUJPOBM� 4ZNQPTJVN� PO� %JTUSJCVUFE�$PNQVUJOH�BOE�"SUJmDJBM�*OUFMMJHFODF �JO�"EWBODFT�JO�*OUFMMJHFOU�BOE�4PGU�$PNQVUJOH ���������� ������

PAGE

10

""-�TPMVUJPOT�NBZ�BMTP�CF�EFTJHOFE�UP�MFBSO�UIF�EBJMZ�CFIBWJPVS�PG�UIF�BTTJTUFE�QFSTPO �JO�PSEFS�UP�QFSGPSN�DPOUFYU�BOBMZTJT�BOE�UP�EFUFDU�SFMFWBOU�EFWJBUJPOT�B�QSFEFmOF�OPSNBMJUZ��5IFTF�TPMVUJPOT�PGUFO�DPMMFDU�MBSHF�BNPVOUT�PG�VTFS�EBUB�UIBU�JT�FYUSFNFMZ�TFOTJUJWF�BOE�DPOmEFOUJBM��"T�B�SFTVMU �UIF�VTVBM�SVMF�PG�EBUB�IBOEMJOH�JT�UP�BWPJE�USBOTGFSSJOH�SBX�EBUB�UP�B�DFOUSBM�MPDBUJPO �XIFSF�WBSJPVT�EFDJTJPO�NBLJOHT�BSF�NBEF��&WFO�JG�UIJT�SFRVJSFNFOU�NPTU�MJLFMZ�JODSFBTFT�UIF�FRVJQNFOU�DPTUT�BU�UIF�BTTJTUFE�QFSTPO�T�QSFNJTFT �BMM�EBUB�DPMMFDUJPO�BOE�QSPDFTTJOH�TIPVME�CF�EPOF�PO�B�MPDBM�MFWFM�BOE�SBX�EBUB�NVTU�OPU�MFBWF�UIF�IPNF��-BUFS �QSPDFTTFE�JOGPSNBUJPO�GSPN�UIF�SBX�EBUB�JT�BMMPXFE�UP�USBOTGFS�PVUTJEF�UIF�IPNF�UP�JOGPSN�B�TFDPOE�QBSUZ �F�H��UIF�JOGPSNBM�DBSFS �CVU�WJB�B�TFDVSFE�DIBOOFM��5IJT�JT�FTQFDJBMMZ�USVF�XIFO�B�DSJUJDBM�TJUVBUJPO�JT�EFUFDUFE�BOE�UIF�SFTVMUJOH�BMFSU�TIPVME�CF�TFOU�UP�B�UIJSE�QBSUZ �F�H��B�DMPVE�CBTFE�TFSWFS�GPS�DPNNVOJDBUJPOT�CFUXFFO�UIF�mSTU�QBSUZ�BTTJTUFE�QFSTPO�BOE�TFDPOE�QBSUZ�JOGPSNBM�DBSFS��1SJWBDZ�BOE�TFDVSJUZ�DBO�CF�QSFTFSWFE�CZ�EFTJHOJOH�BO�""-�TPMVUJPO�XJUI�SFTQFDU�UP�UIF�GPMMPXJOH�BTQFDUT���t��Integrity�o�BOZ�EBUB�USBOTNJTTJPO�NVTU�CF�WFSJmFE �F�H��DIFDLTVN�BOE�EJHJUBM�TJHOBUVSF�FUD�t��Authenticity o�FWJEFODF�PG�EBUB�TPVSDF�NVTU�CF�QSPWJEFE �F�H��TFOTPS�JEFOUJmDBUJPO�FUD�t��Confidentiality�o�QSJWBDZ�QSPUFDUJPO�CZ�FODSZQUJPO�PG�TFOTJUJWF�EBUB�BOE�JOGPSNBUJPO �F�H��BOPOZNJUZ�PG�UIF�BTTJTUFE�QFSTPOt��Multi-Level User Control�o�EJGGFSFOU�MFWFM�PG�QSPUFDUJPO�PO�DPOmEFO-UJBM�EBUB�BOE�JOGPSNBUJPO�WJB�VTFS�BDDFTT�DPOUSPM�NFUIPET

*O�BO�""-�BQQMJDBUJPO�JU�JT�DSVDJBM�UP�HVBSBOUFF�TBGFUZ�PG�UIF�DPOmEFO-UJBM�EBUB�BOE�JOGPSNBUJPO �XIJMF�PGGFSJOH�QSJWBDZ�UP�UIF�VTFST�XIFOFWFS�SFRVFTUFE��"O�JNQPSUBOU�SFRVJSFNFOU�JT�UP�CBMBODF�CFUXFFO�VOPCUSV-TJWF�BOE�DPNQMFUFMZ�IJEEFO�UFDIOPMPHZ��"DDFQUBODF�PG�BTTJTUFE�

QFSTPOT�JT�SFEVDFE�JG�UPP�NVDI�WJTJCMF�NPOJUPSJOH�UFDIOPMPHZ�JT�JO�UIFJS�IPNFT��)PXFWFS �B�DPNQMFUFMZ�IJEEFO�TZTUFN �XIFSF�UIF�UFDIOPMPHZ�JT�FNCFEEFE�JO�UIF�FOWJSPONFOU �DPVME�CFDPNF�JOFGGFD-UJWF�BOE�QPUFOUJBMMZ�VOBCMF�UP�EFUFDU�QPUFOUJBMMZ�EBOHFSPVT�TJUVBUJPOT��"O�""-�TPMVUJPO�TIPVME�PGGFS�CPUI�TBGFUZ�BOE�DPNGPSU�GPS�UIF�BTTJTUFE�QFSTPO�

PRIV

ACY

!IN!A

AL!

SYST

EMS

���'��8JOLMFS �#��3JOOFS�� 5SVTU$".��4FDVSJUZ� BOE�QSJWBDZ�QSPUFDUJPO� GPS� BO� FNCFEEFE� TNBSU�DBNFSB� CBTFE� PO� USVTUFE� DPNQVUJOH � JO� 1SPDFFEJOHT� PG� UIF� *&&&�$POGFSFODF� PO�"EWBODFE�7JEFP�BOE�4JHOBM�#BTFE�4VSWFJMMBODF �QQ�����o��� ������

PAGE

11

7JEFP�DBNFSBT�BSF�CFJOH�VTFE�NPSF�GSFRVFOUMZ�JO�""-�BQQMJDBUJPOT��$PNQVUFS�WJTJPO�HJWFT�UIF�QPTTJCJMJUZ�UP�NPOJUPS������BO�FOWJSPONFOU�BOE�SFQPSU�PO�WJTVBM�JOGPSNBUJPO �XIJDI�JT�DPNNPOMZ�UIF�NPTU�TUSBJHIU-GPSXBSE�BOE�OBUVSBM�XBZ�PG�EFTDSJCJOH�BO�FWFOU �B�QFSTPO �BO�PCKFDU �BDUJPOT�BOE�JOUFSBDUJPOT��5IF�BEWBODFT�QSPEVDFE�JO�UIF�MBTU�EFDBEFT�IBWF�DPOUSJCVUFE�UP�UIJT��5IF�DPNQVUBUJPOBM�QPXFS�IBT�CFFO�JODSFBTFE�XIJMF �BU�UIF�TBNF�UJNF �DPTUT�IBWF�CFFO�SFEVDFE��'VSUIFS-NPSF �DPNQVUFS�WJTJPO�BEWBODFT�IBWF�HJWFO�WJEFP�DBNFSBT�UIF�BCJMJUZ�PG�|TFFJOHh �CFDPNJOH�TNBSU�DBNFSBT��5IJT�IBT�FOBCMFE�UIF�EFWFMPQ-NFOU�PG�WJTJPO�CBTFE�JOUFMMJHFOU�NPOJUPSJOH�TZTUFNT�UIBU�BSF�BCMF�UP�FYUSBDU�VTFGVM�JOGPSNBUJPO�GSPN�WJTVBM�EBUB�UP�BOBMZTF�BDUJPOT �BDUJWJUJFT�BOE�CFIBWJPVST����7JEFP�DBNFSBT�BSF�CFJOH�JODSFBTJOHMZ�VTFE�JO�PSEFS�UP�PGGFS�OPWFM�UFMFDBSF�TFSWJDFT�UIBU�SFMZ�PO�WJTVBM�JOGPSNBUJPO �F�H��NPOJUPSJOH�PG�BDUJWJUJFT�PG�EBJMZ�MJWJOH�"%- �GBMM�EFUFDUJPO �XBSOJOH�TZTUFN �BOE�NBOZ�PUIFST��5IFZ�BSF�BMTP�CFFO�DPOTJEFSFE�UP�FWBMVBUF�UIF�RVBMJUZ�PG�DBSF��5IFTF�VTFT�BSF�CFHJOOJOH�UP�CF�FYQMPSFE�CZ�DBSF�QSPWJEFST���BOE�SFHVMBUPST�����

5SBEJUJPOBMMZ�DBNFSBT�IBWF�CFFO�VTFE�JO�QVCMJD�TQBDFT�GPS�TVSWFJM-MBODF�TFSWJDFT�JO�TUSFFUT �QBSLJOH�MPUT �CBOLT �BJSQPSUT �USBJO�TUBUJPOT �TIPQQJOH�DFOUSFT �NVTFVNT �TQPSUT�JOTUBMMBUJPOT�BOE�NBOZ�PUIFST��(FOFSBMMZ�UIF�VTF�PG�WJEFP�DBNFSBT�JO�QVCMJD�QMBDFT�IBT�CFFO�UPMFSBUFE�PS�BDDFQUFE�CZ�DJUJ[FOT �XIFSFBT�UIFJS�VTF�JO�QSJWBUF�TQBDFT�IBT�CFFO�SFGVTFE��5IFSF�NBZ�CF�TFWFSBM�SFBTPOT�UP�FYQMBJO�UIJT�EJGGFSFODF��0O�UIF�POF�IBOE �UIF�QFSDFJWFE�QVCMJD�TBGFUZ�CFOFmUT�GBWPVS�UIF�VTBHF�PG�DBNFSBT�JO�QVCMJD�QMBDFT�GPS�DSJNF�QSFWFOUJPO �mHIU�BHBJOTU�UFSSPSJTN�BOE�PUIFST����0O�UIF�PUIFS�IBOE �UIFSF�JT�B�XJEFTQSFBE�CFMJFG�UIBU�XIJMF�TUBZJOH�JO�QVCMJD�FOWJSPONFOUT �QFPQMFhT�TFOTJUJWF�JOGPSNBUJPO�XJMM�OPU�CF�FYQPTFE��)PXFWFS �UIFZ�BSF�OPU�DPNNPOMZ�VTFE�XJUIJO�QSJWBUF�FOWJSPONFOUT�EVF�UP�QFPQMFhT�DPODFSOT�

BCPVU�QSJWBDZ�BT�WJEFP�DBO�DPOWFZ�BO�FOPSNPVT�BNPVOU�PG�JOGPSNB-UJPO�UIBU�DBO�CF�RVBMJmFE�BT�TFOTJUJWF�

*OUFMMJHFOU�WJTJPO�CBTFE�NPOJUPSJOH�TZTUFNT�KFPQBSEJTF�JOEJWJEVBMT��SJHIU�UP�QSJWBDZ�CFDBVTF�UIFZ�DBO�BDRVJSF �TUPSF�BOE�TIPX�B�WBSJFUZ�PG�JOGPSNBUJPO�BCPVU�QFPQMF�IBCJUT �SFMBUJPOTIJQT �BOE�TP�PO��5IJT�FWPMVUJPO�JO�QFPQMF�T�NPOJUPSJOH�NBZ�CF�TFFO�BT�BQQSPBDIJOH�BO�0SXFMMJBO�#JH�#SPUIFS �BT�QFPQMF�NBZ�IBWF�UIF�GFFMJOH�PG�CFJOH�DPOTUBOUMZ�NPOJUPSFE��5IFSFGPSF �QSJWBDZ�BXBSF�TNBSU�DBNFSBT�CFDPNF�FTTFOUJBM�GPS�""-�BQQMJDBUJPOT��5IVT �JG�JOEJWJEVBMT��QSJWBDZ�DBO�CF�HVBSBOUFFE�UISPVHI�UIF�VTF�PG�TNBSU�DBNFSBT �BDDFQUBODF�XPVME�CF�JODSFBTFE�

VIS

UA

L!PR

IVAC

Y

���"�"��$IBBSBPVJ �1��$MJNFOU�1ÏSF[ �'��'MØSF[�3FWVFMUB��"�SFWJFX�PO�WJTJPO�UFDIOJRVFT�BQQMJFE�UP�)VNBO�#FIBWJPVS�"OBMZTJT� GPS�"NCJFOU�"TTJTUFE�-JWJOH �&YQFSU�4ZTUFNT�XJUI�"QQMJDBUJPOT ����������������� ������

���)$�0OF�-JNJUFE��)$�0OF�T�$POTVMUBUJPO�PO�BO�0QU�*O�7JTJCMF�$BNFSB�4DIFNF �IUUQ���XXX�ID�POF�DP�VL�NFEJB�JNBHF�7JTJCMF@$BNFSB@$POTVMUBUJPO@3FQPSU@0DU@����@-"5&45�1%'�BDDFTTFE�PO�%FDFNCFS�����

���$BSF�2VBMJUZ�$PNNJTTJPO��$BSF�2VBMJUZ�$PNNJTTJPO�#PBSE�NFFUJOH�����/PWFNCFS����� �JUFN�� � IUUQ���XXX�DRD�PSH�VL�DPOUFOU�DBSF�RVBMJUZ�DPNNJTTJPO�CPBSE�NFFUJOH����OPWFNCFS������BDDFTTFE�PO�/PWFNCFS�����

���4��(SBIBN �+��#SPPL �%��)FFSZ��5PXOT�PO�UIF�UFMFWJTJPO��$MPTFE�DJSDVJU�UW�JO�CSJUJTI�UPXOT�BOE�DJUJFT �-PDBM�(PWFSONFOU�4UVEJFT �7PMVNF��� �*TTVF�� ������

PAGE

12

5IFSF�BSF�UXP�BQQSPBDIFT�JO�PSEFS�UP�QSPUFDU�BOE�QSFTFSWF�JOEJWJEVBMhT�QSJWBDZ�JO�WJEFPT�BOE�JNBHFT��5IFTF�EFQFOE�PO�XIFO�QSJWBDZ�QSPUFDUJPO�JT�BQQMJFE��CFGPSF�UIF�JNBHF�JT�BDRVJSFE�JNBHF�BDRVJTJUJPO�UJNF �PS�BGUFS�JNBHF�QSPDFTTJOH�UJNF��0O�UIF�POF�IBOE �JU�JT�QPTTJCMF�UP�QSFWFOU�PUIFST�PG�TVDDFTTGVMMZ�DBQUVSJOH�JNBHFT�JO�XIJDI�BO�JOEJWJEVBM�BQQFBST��0O�UIF�PUIFS�IBOE �PODF�BO�JNBHF�IBT�CFJOH�BDRVJSFE�BOE�JT�HPJOH�UP�CF�EJTUSJCVUFE �TIBSFE �PS�WJTVBMJTFE��TPNF�QBSUT�GSPN�JU �XIJDI�BSF�DPOTJEFSFE�QSJWBUF �DBO�CF�mMUFSFE�PS�SFNPWFE�

$VSSFOU�NFUIPET�GPS�WJTVBM�QSJWBDZ�QSFTFSWBUJPO�JODMVEF�JOUFSWFOUJPO �CMJOE�WJTJPO �TFDVSF�QSPDFTTJOH�BOE�SFEBDUJPO�5BCMF���

VIS

UA

L!PR

IVAC

Y

Secure processing

Intervention

Redaction

Blind vision

5IJT�BQQSPBDI�JT�TJNJMBS�UP�CMJOE�WJTJPO�CVU�JU�JT�OPU�CBTFE�PO�TFDVSF�NVMUJ�QBSUZ�DPNQVUBUJPO��5IFTF�NFUIPET�QSPDFTT�WJTVBM�JOGPSNBUJPO�JO�B�QSJWBDZ�SFTQFDUGVM�XBZ �F�H��XPSLJOH�XJUI�JNBHFT�JO�B�EPNBJO�UIBU�EPFT�OPU�SFWFBM�WJTVBM�JOGPSNBUJPO �SFKFDUJOH�WJTVBM�JOGPSNBUJPO�UIBU�JT�OPU�OFDFTTBSZ�GPS�UIF�BMHPSJUIN�UP�XPSL��3FDFOUMZ �TPNF�TZTUFNT�FNQMPZ�EFQUI�SBOHF�TFOTPST�UIBU�BMMPX�XPSLJOH�POMZ�XJUI�TJMIPVFUUFT�BWPJEJOH�VTJOH�BOZ�PUIFS�WJTVBM�EBUB�

*OUFSWFOUJPO�NFUIPET�EFBM�XJUI�UIF�QSPCMFN�PG�QSFWFOUJOH�TPNFPOF�UP�DBQUVSF�QSJWBUF�WJTVBM�EBUB�GSPN�UIF�FOWJSPONFOU��5IFZ�DBO�CF�BT�TJNQMF�BT�UP�FNQPXFS�UIF�NPOJUPSFE�QFSTPO�UP�UVSO�PGG�UIF�NPOJUPSJOH��5IFSF�BSF�BMTP�BVUPNBUJD�NFUIPET�UIBU�QIZTJDBMMZ�JOUFSWFOF�DBNFSB�EFWJDFT�UP�QSFWFOU�UIF�BDRVJTJUJPO�PG�BO�JNBHF�CZ�NFBOT�PG�B�TQFDJBMJTFE�EFWJDF�UIBU�JOUFSGFSFT�XJUI�UIF�DBNFSB�PQUJDBM�MFOT

*NBHF�BOE�WJEFP�NPEJmDBUJPO�PS�SFEBDUJPO�NFUIPET�BSF�UIF�NPTU�DPNNPO�WJTVBM�QSJWBDZ�QSPUFDUJPO�NFUIPET��5IFZ�NPEJGZ�UIF�TFOTJUJWF�SFHJPOT�PG�BO�JNBHF�GBDFT �CPEJFT �PCKFDUT �OVNCFS�QMBUFT �FUD��UP�DPODFBM�QSJWBUF�JOGPSNBUJPO�DPODFSOJOH�UIF�TVCKFDUT�BQQFBSJOH�PO�JU��3FEBDUJPO�NFUIPET�JODMVEF�BE�IPD�EJTUPSUJPO�TVQQSFTTJPO�NFUIPET �JNBHF�FODSZQUJPO �GBDF�EF�JEFOUJmDBUJPO �BOE�JO�QBJOUJOH�CBTFE�BMHPSJUINT��*O�PSEFS�UP�EFUFSNJOF�UIF�TFOTJUJWF�SFHJPOT�JO�XIJDI�B�SFEBDUJPO�NFUIPE�PQFSBUFT �DPNQVUFS�WJTJPO�BMHPSJUINT�BSF�VTFE��5IJT�JT�POF�PG�UIF�NBJO�EJGmDVMUJFT �BT�UIPTF�QSJWBUF�SFHJPOT�NVTU�CF�DPSSFDUMZ�EFUFDUFE�BU�FWFSZ�NPNFOU�

#MJOE�WJTJPO�BEESFTTFT�QSJWBDZ�SFMBUFE�QSPDFTTJOH�JTTVFT�CZ�NFBOT�PG�TFDVSF�NVMUJ�QBSUZ�DPNQVUBUJPO�UFDIOJRVFT�UIBU�BSF�BQQMJFE�UP�WJTJPO�BMHPSJUINT��4FDVSF�NVMUJ�QBSUZ�DPNQVUBUJPO�JT�B�TVCmFME�PG�DSZQUPHSBQIZ�UIBU�FOBCMFT�NVMUJQMF�QBSUJFT�UP�KPJOUMZ�DPNQVUF�B�GVODUJPO�JO�TVDI�B�XBZ�UIBU�UIFJS�JOQVUT�BOE�UIF�GVODUJPO�JUTFMG�BSF�OPU�SFWFBMFE�

Table 1. Methods for visual privacy preservation

PAGE

13

5IF�NBJO�PCKFDUJWF�PG�#3&"5)&�JT�UP�QSPWJEF�BO�*$5�CBTFE�TPMVUJPO�UP�TVQQPSU�BOE�SFMJFWF�UIF�CVSEFO�FYQFSJFODFE�CZ�JOGPSNBM�DBSFST�BOE�JNQSPWF�UIF�RVBMJUZ�PG�MJGF�PG�CPUI�UIF�DBSFS�BOE�UIF�QFSTPO�XIP�JT�CFJOH�DBSFE�GPS��5IF�QMBUGPSN�JT�DPNQPTFE�PG�UXP�EJGGFSFOU�NPEVMFT �OBNFMZ�UIF�""-�IPNF�TZTUFN�BOE�UIF�JOGPSNBM�DBSFHJWFS�UPPM��5IF�mSTU�NPEVMF�DPOTJTUT�PG�B�HSPVQ�PG�DBNFSBT�BOE�BO�BSSBZ�PG�TFOTPST�JOTUBMMFE�BU�UIF�BTTJTUFE�QFSTPO}T�IPNF�BOE�JT�SFTQPOTJCMF�GPS�DPMMFDU-JOH�JOGPSNBUJPO�PO�B�EBJMZ�CBTJT�BOE�JO�BO�BVUPNBUJD�XBZ�BCPVU�UIF�BDUJWJUJFT�BOE�CFIBWJPVS�PG�UIF�BTTJTUFE�QFSTPO��5IF�DBNFSBT�BMMPX�EJGGFSFOU�UZQFT�PG�WJEFP�QSPDFTTJOH�UP�FOBCMF�WBSZJOH�MFWFMT�PG�QSJWBDZ��5IF�JOGPSNBM�DBSFHJWFS�UPPM�XJMM�CF�CBTFE�PO�B�8FC�QMBUGPSN�UIBU�QSPWJEFT �UP�UIF�GBNJMZ�DBSFS�DPNNVOJUZ �HVJEBODF�BOE�TVQQPSU�UP�JNQSPWF�UIFJS�MJWJOH�DPOEJUJPOT�BOE�FOBCMF �BT�B�SFTVMU �B�CFUUFS�RVBMJUZ�PG�DBSF�

#3&"5)&�EFWFMPQT�UIF�QSJODJQMFT�PG�QSJWBDZ�CZ�EFTJHO�JO�UIF�GPMMPX-JOH�XBZ�t��"DDFTT�UP�UIF�SFQPSUT�HFOFSBUFE�CZ�UIF�TZTUFN�PDDVST�UISPVHI�B�QBTTXPSE�QSPUFDUFE�BOE�FODSZQUFE�POMJOF�JOUFSGBDF��#FTJEFT �BDDFTT�UP�JOEJWJEVBM�JOGPSNBUJPO�JT�SFTUSJDUFE�UP�UIF�JOEJWJEVBM�T�DBSFHJWFST�GPMMPXJOH�UIF�QFSNJTTJPOT�HSBOUFE�CZ�UIF�BTTJTUFE�QFSTPO�t��&NCFEEFE�QSJWBDZ�EPFT�OPU�OFHBUJWFMZ�JNQBDU�UIF�BWBJMBCJMJUZ�PG�DSJUJDBM�JOGPSNBUJPO�UP�UIF�DBSFHJWFST�JODMVEJOH�SFBM�UJNF�BMFSUT�t��#SPBEDBTUJOH�PG�WJEFP�GPMMPXT�UIF�QSJWBDZ�CZ�DPOUFYU�BQQSPBDI�XIFSF�EJGGFSFOU�WJTVBMJTBUJPO�BMUFSOBUJWFT�BSF�PGGFSFE�BDDPSEJOH�UP�UIF�DPOUFYU �J�F��PO�HPJOH�BDUJWJUZ�PS�FWFOU �MPDBUJPO�PG�UIF�BTTJTUFE�QFSTPO �BOE�JEFOUJUZ�PG�UIF�PCTFSWFS�t��%JGGFSFOU�SFEBDUJPO�NFUIPET �XIJDI�BWPJE�UP�TFF�UIF�SFBM�JNBHF�PG�UIF�BTTJTUFE�QFSTPO �BSF�FNQMPZFE�UP�TVQQPSU�UIPTF�WJTVBMJTBUJPO�

PRIV

ACY

!PRE

SERV

ATIO

N!IN

!TH

E!BR

EATH

E!PR

OJE

CT

MFWFMT�FTUBCMJTIFE�CZ�UIF�DPOUFYU�t��5IF�BTTJTUFE�QFSTPO�JT�FNQPXFSFE�UP�UVSO�PGG�UIF�NPOJUPSJOH�TZTUFN�BU�XJMM�t��5IF�BTTJTUFE�QFSTPO�JT�FNQPXFSFE�UP�BTTJHO�UIF�EJGGFSFOU�WJTVBMJTBUJPO�MFWFMT�UP�EJGGFSFOU�DPOUFYUT�

Figure 1. Overall BREATHE system

DISCL

AIMER

#3&"5)& 1SPKFDU� IBT� CFFO� DP�GVOEFE� CZ� UIF� "NCJFOU�"TTJTUFE� -JWJOH� +PJOU� 1SPHSBNNF� $BMM� � � ����� BOE� TPNF�/BUJPOBM� "VUIPSJUJFT� BOE� MPDBM� 3FTFBSDI� 1SPHSBNNFT� JO�4QBJO �6OJUFE�,JOHEPN �*SFMBOE�BOE�*UBMZ�

The ownership of IPR (Intellectual Property Right) as well as all foreground information (including the tangible and intangible results of the project) will be fully retained by all partners without exception. All issues regarding confidentiality, dissemination, access rights, use of knowledge, intellectual property and results exploitation are included in the Consortium Agreement (CA), which was signed by all partners before starting the project.

PAGE

14

DISCL

AIMER

Project referenceAAL-JP-2012-5-045

Contact Us

Juan-Pablo Lázaro-Ramos- Project Coordinator -+34 96 182 71 77 | [email protected]

Visit us on the Webhttp://www.breathe-project.eu

PAGE

15