Identification of Compositional Risks in Data Protection Impact Assessments and Beyond

• URL: http://arxiv.org/abs/2609.01201v1
• Date: Tue, 01 Sep 2026 13:08:18 GMT
• Title: Identification of Compositional Risks in Data Protection Impact Assessments and Beyond
• Abstract summary: Privacy risks may emerge solely from the choice of data processors included in the composition.<n>Different data processors may unknowingly rely on the same cloud provider, allowing for unintended linkability of personal data.<n>We propose a novel protocol to detect and manage such compositional risks to privacy.
• Score: 0.06999740786886537
• License: http://creativecommons.org/licenses/by-nc-nd/4.0/
• Abstract: When personal data is processed in a distributed manner by cooperating service providers, privacy risks may emerge solely from the choice of data processors included in the composition. For instance, different data processors may unknowingly rely on the same cloud provider, allowing for unintended linkability of personal data at that very provider. As such compositional risks to privacy are beyond the scope of each individual risk assessment, they are likely to be overseen when performing a data protection impact assessment. In this paper, we propose a novel protocol to detect and manage such compositional risks to privacy. Following an initial problem definition and requirements elicitation, we elaborate how our protocol identifies candidates for compositional risks and how this information may be used to improve the results of a data protection impact assessment over service compositions including multiple data processors.

Related papers

• Shapley-Value-Based Feature Attribution for Data Masking [1.181206257787103]
  This study proposes a novel framework that adapts the Shapley-value-based feature attribution approach to the problem domain of data privacy.<n>Our proposed framework takes a holistic view of data masking through a fair feature attribution approach based on Shapley values.<n> Experimental results show that our proposed method can effectively reduce disclosure risk while preserving data utility.
  arXiv  Detail & Related papers  (2026-07-31T01:58:19Z)
• Rethinking Visual Privacy: A Compositional Privacy Risk Framework for Severity Assessment with VLMs [58.7856837806126]
  Existing visual privacy benchmarks largely treat privacy as a binary property, labeling images as private or non-private based on visible sensitive content.<n>We argue that privacy is fundamentally compositional. Attributes that are benign in isolation may combine to produce severe privacy violations.<n>We introduce the Compositional Privacy Risk Taxonomy (CPRT), a regulation-aware framework that organizes visual attributes according to standalone identifiability and compositional harm potential.
  arXiv  Detail & Related papers  (2026-03-23T04:48:42Z)
• Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective [18.404146545866812]
  Training generative machine learning models to produce synthetic data has become a popular approach for enhancing privacy in data sharing.<n>As this typically involves processing sensitive personal information, releasing either the trained model or generated synthetic anonymity can still pose privacy risks.<n>We argue that meaningful assessments must account for the capabilities and properties of underlying generative model and be grounded in state-of-the-art privacy attacks.
  arXiv  Detail & Related papers  (2026-01-30T00:57:41Z)
• Your Privacy Depends on Others: Collusion Vulnerabilities in Individual Differential Privacy [50.66105844449181]
  Individual Differential Privacy (iDP) promises users control over their privacy, but this promise can be broken in practice.<n>We reveal a previously overlooked vulnerability in sampling-based iDP mechanisms.<n>We propose $(varepsilon_i,_i,overline)$-iDP a privacy contract that uses $$-divergences to provide users with a hard upper bound on their excess vulnerability.
  arXiv  Detail & Related papers  (2026-01-19T10:26:12Z)
• A Personal data Value at Risk Approach [0.0]
  This paper proposes a quantitative approach to data protection risk-based compliance from a data controllers perspective. It aims at proposing a mindset change, where data protection impact assessments can be improved by using data protection analytics, quantitative risk analysis, and calibrating expert opinions.
  arXiv  Detail & Related papers  (2024-11-05T16:09:28Z)
• Causal Discovery Under Local Privacy [5.7835417207193585]
  Local differential privacy is a variant that allows data providers to apply the privatization mechanism themselves on their data individually. We consider various well-known locally differentially private mechanisms and compare the trade-off between the privacy they provide and the accuracy of the causal structure produced by algorithms for causal learning.
  arXiv  Detail & Related papers  (2023-11-07T14:44:27Z)
• How Do Input Attributes Impact the Privacy Loss in Differential Privacy? [55.492422758737575]
  We study the connection between the per-subject norm in DP neural networks and individual privacy loss. We introduce a novel metric termed the Privacy Loss-Input Susceptibility (PLIS) which allows one to apportion the subject's privacy loss to their input attributes.
  arXiv  Detail & Related papers  (2022-11-18T11:39:03Z)
• PRIVEE: A Visual Analytic Workflow for Proactive Privacy Risk Inspection of Open Data [3.2136309934080867]
  Open data sets that contain personal information are susceptible to adversarial attacks even when anonymized. We develop a visual analytic solution that enables data defenders to gain awareness about the disclosure risks in local, joinable data neighborhoods. We use this problem and domain characterization to develop a set of visual analytic interventions as a defense mechanism.
  arXiv  Detail & Related papers  (2022-08-12T19:57:09Z)
• Releasing survey microdata with exact cluster locations and additional privacy safeguards [77.34726150561087]
  We propose an alternative microdata dissemination strategy that leverages the utility of the original microdata with additional privacy safeguards. Our strategy reduces the respondents' re-identification risk for any number of disclosed attributes by 60-80% even under re-identification attempts.
  arXiv  Detail & Related papers  (2022-05-24T19:37:11Z)
• Partial sensitivity analysis in differential privacy [58.730520380312676]
  We investigate the impact of each input feature on the individual's privacy loss. We experimentally evaluate our approach on queries over private databases. We also explore our findings in the context of neural network training on synthetic data.
  arXiv  Detail & Related papers  (2021-09-22T08:29:16Z)
• Decision Making with Differential Privacy under a Fairness Lens [65.16089054531395]
  The U.S. Census Bureau releases data sets and statistics about groups of individuals that are used as input to a number of critical decision processes. To conform to privacy and confidentiality requirements, these agencies are often required to release privacy-preserving versions of the data. This paper studies the release of differentially private data sets and analyzes their impact on some critical resource allocation tasks under a fairness perspective.
  arXiv  Detail & Related papers  (2021-05-16T21:04:19Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.