Providing transparency in private-user-data access
Examples described herein include systems and methods for providing privacy information to a user of a user device. An example method can include detecting, at a management server, access of the private data by an entity other than the user, such as an administrator who is authorized to access the management server. The method further includes generating an event reflecting the access of the private data. The generated event can be stored as part of an event log in a database. The method further includes providing the event to the user device for display to the user. The event displayed on the user device can include information such as an identity of the accessing entity, a description of the private data that was accessed, and when the access occurred. The user can select a displayed event at the user device and request further information on the event from an administrator.
1. A method for providing privacy information to a user of a user device, comprising:
identifying data as private data of the user;
detecting, at a management server, access of the private data by an entity other than the user and the user device;
generating, at the management server, an event file reflecting the access of the private data;
storing the event file as part of an event log in a database accessible to the management server;
causing the user device to display a graphical element summarizing the detected access;
providing the event file to the user device for display to the user;
receiving a feedback message from the user device, the feedback message being generated based on a user selection condoning or disapproving of the private access; and
aggregating the feedback message with other feedback messages received from other user devices to recommend whether to change a data access policy related to the private data, wherein the recommendation is sent to an administrator.
2. The method of claim 1 , wherein the event file identifies the accessing entity, the private data accessed, and when the access occurred.
3. The method of claim 1 , further comprising storing the event log as a hash in a blockchain.
4. The method of claim 3 , further comprising performing an audit by comparing the event log to the blockchain, and taking a remedial action when a difference exists between event files in the blockchain and the event log.
5. The method of claim 4 , wherein the event file indicates whose private data was accessed, wherein the database associates a blockchain element with the event file, and wherein the audit includes comparing the blockchain element to the event file.
6. The method of claim 1 , further comprising receiving, at the management server, a second event file from a management agent on the user device, the second event file indicating access of private data on the user device by a third-party service other than the management server.
7. The method of claim 1 , wherein the entity other than the user and the user device is not previously authorized to access the private data.
8. A non-transitory, computer-readable medium comprising instructions that, when executed by a processor of a management server, cause the management server to perform stages for providing an event log to a user of a user device, the stages comprising:
identifying data as private data of the user;
detecting, at a management server, access of the private data by an entity other than the user and the user device;
generating, at the management server, an event file reflecting the access of the private data;
storing the event file as part of an event log in a database accessible to the management server;
causing the user device to display a graphical element summarizing the detected access;
providing the event file to the user device for display to the user;
receiving a feedback message from the user device, the feedback message being generated based on a user selection condoning or disapproving of the private access; and
aggregating the feedback message with other feedback messages received from other user devices to recommend whether to change a data access policy related to the private data, wherein the recommendation is sent to an administrator.
9. The non-transitory, computer-readable medium of claim 8 , wherein the event file identifies the accessing entity, the private data accessed, and when the access occurred.
10. The non-transitory, computer-readable medium of claim 8 , the stages further comprising storing the event log as a hash in a blockchain.
11. The non-transitory, computer-readable medium of claim 10 , the stages further comprising performing an audit by comparing the event log to the blockchain, and taking a remedial action when a difference exists between event files in the blockchain and the event log.
12. The non-transitory, computer-readable medium of claim 11 , wherein the event file indicates whose private data was accessed, wherein the database associates a blockchain element with the event file, and wherein the audit includes comparing the blockchain element to the event file.
13. The non-transitory, computer-readable medium of claim 8 , the stages further comprising receiving, at the management server, a second event file from a management agent on the user device, the second event file indicating access of private data on the user device by a third-party service other than the management server.
14. The non-transitory, computer-readable medium of claim 8 , wherein the entity other than the user and the user device is not previously authorized to access the private data.
15. A system for providing an event log to a user of a user device, comprising:
a memory storage including a non-transitory, computer-readable medium comprising instructions; and
a processor that executes the instructions to carry out stages comprising:
identifying data as private data of the user;
detecting, at a management server, access of the private data by an entity other than the user and the user device;
generating, at the management server, an event file reflecting the access of the private data;
storing the event file as part of an event log in a database accessible to the management server;
causing the user device to display a graphical element summarizing the detected access;
providing the event file to the user device for display to the user;
receiving a feedback message from the user device, the feedback message being generated based on a user selection condoning or disapproving of the private access; and
aggregating the feedback message with other feedback messages received from other user devices to recommend whether to change a data access policy related to the private data, wherein the recommendation is sent to an administrator.
16. The system of claim 15 , wherein the event file identifies the accessing entity, the private data accessed, and when the access occurred.
17. The system of claim 15 , the stages further comprising storing the event log as a hash in a blockchain.
18. The system of claim 17 , the stages further comprising performing an audit by comparing the event log to the blockchain, and taking a remedial action when a difference exists between event files in the blockchain and the event log.
19. The system of claim 18 , wherein the event file indicates whose private data was accessed, wherein the database associates a blockchain element with the event file, and wherein the audit includes comparing the blockchain element to the event file.
20. The system of claim 15 , wherein the entity other than the user and the user device is not previously authorized to access the private data.