Privacy in business processes for providing personalized services is currently a matter of
trust. Business processes require the disclosure of personal data to third parties and users
are not able to control their usage and so their further disclosure. Existing privacy-enhancing
technologies consider access control but not usage control of personal data. The current
work on usage control mainly considers formalization of usage rules, ie obligations, and
their enforcement by using the mechanisms of digital rights management, secure logging of …

Privacy in cloud computing is at the moment simply a promise to be kept by the software
service providers. Users are neither able to control the disclosure of personal data to third
parties nor to check if the software service providers have followed the agreed-upon privacy
policy. Therefore, disclosure of the users´ data to the software service providers of the cloud
raises privacy risks. This project focuses on enhancing the trust model of the practice so that
users and auditors, eg, data protection officers, can check whether software service …