Exposing Privacy Obligation Policies in Social Networking Sites

Increasingly, web-based applications are created through thecomposition of multiple functional components provided bydifferent institutions. These so called ''mash-ups'' are an effectivemeans to rapidly develop new applications. However,when these mash-ups are embedded within social networkingsites that aggregate and expose personal data, such as Facebook,MySpace, or LinkedIn, serious privacy issues arise becausepersonal data can be transmitted outside the applicationshosting institution. In this paper, we describe an initial architecture and implementation to address these privacy concernsthrough the exposure of privacy obligation policies to the user using a workflow-based representation of mash-ups.