On Privacy in Business Processes - Observing Delegation of Personal Data by using Digital Watermarking

Privacy in business processes for personalized services is currently a matter of trust. Business processes require the delegation of personal data and users are not able to control their delegation and so their usage. Existing privacy-enhancing technologies consider access control but not usage control of personal data. Current work on usage control considers especially formalization of usage rules, so called obligations, and their enforcement by using mechanisms of Digital Rights Management, secure logging of access requests for an ex post enforcement, and the non-linkable delegation of access rights to personal data. However, either these enforcement mechanisms do not consider a delegation of personal data or they assume trustworthy data consumers or data providers respectively. We investigate on digital watermarking in order to observe the enforcement of obligations for a delegation of personal data without mandatory trusting in service providers.