Compliance of privacy policies with PIPEDA.

摘要

As Internet usage rapidly grows, personal privacy is gaining attention from both Internet users and business. Several countries have legislated Privacy Acts to govern businesses' collection, use, and disclosure of personal information. This thesis investigates and develops a prototype user agent which automatically checks whether sites' posted privacy policies address the principles of the Personal Information Protection and Electronic Documents Act (PIPEDA). The user agent flags any obvious omissions in the P3P policy and any mismatches with privacy principles in both the P3P and natural language aspects of the privacy policies. Two information retrieval approaches are used in alternative implementations of the agent and their results are compared. The accuracy of the experimental results shows that the agent has the capability to do an initial check of whether a business policy addresses PIPEDA principles.