Paper 2022/033

Deletion-Compliance in the Absence of Privacy

Jonathan Godin and Philippe Lamontagne

Abstract

Garg, Goldwasser and Vasudevan (Eurocrypt 2020) invented the notion of deletion-compliance to formally model the "right to be forgotten", a concept that confers individuals more control over their digital data. A requirement of deletion-compliance is strong privacy for the deletion requesters since no outside observer must be able to tell if deleted data was ever present in the first place. Naturally, many real world systems where information can flow across users are automatically ruled out. The main thesis of this paper is that deletion-compliance is a standalone notion, distinct from privacy. We present an alternative definition that meaningfully captures deletion-compliance without any privacy implications. This allows broader class of data collectors to demonstrate compliance to deletion requests and to be paired with various notions of privacy. Our new definition has several appealing properties: - It is implied by the stronger definition of Garg et al. under natural conditions, and is equivalent when we add a privacy requirement. - It is naturally composable with minimal assumptions. - Its requirements are met by data structure implementations that do not reveal the order of operations, a concept known as history-independence. Along the way, we discuss the many challenges that remain in providing a universal definition of compliance to the "right to be forgotten."

Metadata
Available format(s)
PDF
Publication info
Published elsewhere. MAJOR revision.PST2021
DOI
10.1109/PST52912.2021.9647774
Contact author(s)
philippe lamontagne2 @ nrc-cnrc gc ca
History
2022-01-14: received
Short URL
https://ia.cr/2022/033
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2022/033,
      author = {Jonathan Godin and Philippe Lamontagne},
      title = {Deletion-Compliance in the Absence of Privacy},
      howpublished = {Cryptology ePrint Archive, Paper 2022/033},
      year = {2022},
      doi = {10.1109/PST52912.2021.9647774},
      note = {\url{https://eprint.iacr.org/2022/033}},
      url = {https://eprint.iacr.org/2022/033}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.