Reasoning about the Appropriate Use of Private Data through Computational Workflows

While there is a plethora of mechanisms to ensure lawful ac- cess to privacy-protected data, additional research is required in order to reassure individuals that their personal data is being used for the purpose that they consented to. This is particularly important in the context of new data mining ap- proaches, as used, for instance, in biomedical research and commercial data mining. We argue for the use of compu- tational workflows to ensure and enforce appropriate use of sensitive personal data. Computational workflows describe in a declarative manner the data processing steps and the ex- pected results of complex data analysis processes such as data mining (Gil et al. 2007b; Taylor et al. 2006). We see work- flows as an artifact that captures, among other things, how data is being used and for what purpose. Existing frame- works for computational workflows need to be extended to incorporate privacy policies that can govern the use of data.