论文标题
通过答案集编程探索与叙事产生的隐私政策的后果
Exploring Consequences of Privacy Policies with Narrative Generation via Answer Set Programming
论文作者
论文摘要
知情同意已越来越明显数据隐私及其法规。从政府到营利性公司的实体通过列举个人数据存储和转移条件的政策解决了对数据隐私的担忧。但是，数据隐私政策的枚举和透明度的提高并没有改善最终用户对如何使用数据的理解：不仅使用用户可能难以理解的法律语言编写的隐私政策，而且这些政策的要素可能以这样的方式构成政策的后果。 我们提出了一个使用答案集编程（ASP）的框架（一种逻辑编程）来形式化隐私政策。因此，隐私政策成为对叙事计划空间的限制，使最终用户可以从扮演角色和在领域中采取行动的角色前进塑造政策的可能后果。我们通过《健康保险可移植性和问责制法》（HIPAA）如何以各种方式使用系统，包括询问有关可能性的问题并确定通过给定事件序列打破了哪些法律条款的问题。
Informed consent has become increasingly salient for data privacy and its regulation. Entities from governments to for-profit companies have addressed concerns about data privacy with policies that enumerate the conditions for personal data storage and transfer. However, increased enumeration of and transparency in data privacy policies has not improved end-users' comprehension of how their data might be used: not only are privacy policies written in legal language that users may struggle to understand, but elements of these policies may compose in such a way that the consequences of the policy are not immediately apparent. We present a framework that uses Answer Set Programming (ASP) -- a type of logic programming -- to formalize privacy policies. Privacy policies thus become constraints on a narrative planning space, allowing end-users to forward-simulate possible consequences of the policy in terms of actors having roles and taking actions in a domain. We demonstrate through the example of the Health Insurance Portability and Accountability Act (HIPAA) how to use the system in various ways, including asking questions about possibilities and identifying which clauses of the law are broken by a given sequence of events.
