Analysis of the Use of Privacy-Enhancing Technologies to Achieve PIPEDA Compliance in a B2C e-Business Model

Abstract

The advanced computing power and reduced acquisition cost of information technology have facilitated the collection, storage, and processing of information in a short amount of time. Privacy legislation has been enacted to ensure that governments and businesses secure such collections in their systems and implement solutions to comply with the law. One such legislation in Canada is the Personal Information Protection and Electronic Documents Act (PIPEDA), intended as a technologyneutral data protection law, where the principles are general and do not require organizations to use a specific vendor or technological tool. In this paper, we give a detailed analysis and taxonomy of use of several privacy-enhancing technologies (PET) to assist Business-to-Consumer (B2C) organizations to comply with PIPEDA.Our analysis indicates that a combination of PETs can assist in complying with the ten PIPEDA privacy principles, with selection of the PETs to be determined by the organization's privacy handling practices.

Recent trend of e-business in Canada

“…One such legislation in Canada is called the Personal Information Protection and Electronic Documents Act (PIPEDA), intended as a technology-neutral data protection law, where the principles are general and do not need firms to apply a specific vendor or technological tool. Szeto and Miri (2007) give a detailed analysis and taxonomy of implementation of several privacy-enhancing technologies (PET) to help Business-to-Consumer (B2C) enterprises to comply with PIPEDA. The analysis reports that a combination of PETs could help in complying with the ten PIPEDA privacy principles, with selection of the PETs to be appointed by the organization's privacy handling practices.…”