OPERANDO produced the following results.
1. PlusPrivacy Application
As a direct-to-user (B2C) service OPERANDO offers a privacy product to consumers which is currently available to the public. PlusPrivacy (
https://plusprivacy.com/(opens in new window)) gives users a unified dashboard for protecting themselves from a variety of threats to privacy. It enables control over the privacy settings in social network accounts, hidden email identity, ad blocking, and prevention of malware and unwanted apps or browser extensions from tracking and collecting private data.
2. OPERANDO G2C Platform – Privacy as a Service
OPERANDO offers OSPs a privacy enforcement platform, available as a service from public bodies (government) to consumers (G2C). This platform contains many innovations, including a unique architecture for privacy protection. The architecture includes automated privacy policy decision making, user device privacy, user-centric privacy management and regulatory compliance.
This platform has been used in three rounds of testing with G2C test sites across the UK and Italy to validate the use cases identified for the platform, and demonstrate the functionality of the platform is of value to these service providers in the healthcare and social care sectors. Testing was also used to improve the platform in an iterative way using the feedback from potential customers, working to provide a solution which is more appealing at the end of the project.
3. Privacy Service Provider Business Concept
OPERANDO innovates by a new service and business model. Privacy Service Providers (PSPs) use the OPERANDO software to offer Privacy as a Service, thereby becoming a Privacy Authority (PA). They provide free privacy services to citizens (“user-side services”) and associated paid services to OSPs, supporting a trusted privacy protection relationship between OSPs, users and a Privacy Regulator. The PA may store the users’ personal data securely and release it judiciously to authorized OSPs, based on each individual’s User Privacy Policy (UPP). The concept of a PA was developed and business plans produced for a model PSP business. The concept was included in testing and validation of the OPERANDO platform, where OPERANDO partners acted as a PSP business to deliver the platform to a test site (an OSP). OPERANDO source code is available as open source software allowing others to replicate the platform to provide privacy as a service to customers.
4. Legally compliant Privacy Framework
OPERANDO innovates in proposing a legally motivated privacy framework that pursues beyond-state-of-the-art ambitions to be standardized at European level. This includes translation of privacy and data protection into technical concepts and providing support of cross-border compliance with privacy laws of the EU, even if the OSP is located outside the EU. The OPERANDO method brings about advances by ensuring that PSPs consider ethical and legal values and demonstrate the methodology to DPAs.
For Privacy Regulators OPERANDO provides machine readable privacy guarantees, the ability to input privacy regulations in a semantic form, and automated compliance audit of the OSP’s. The project has also developed guidelines and tools for the privacy-by-design method used when developing the OPERANDO platform.
