{"id":"https://openalex.org/W7154203123","doi":"https://doi.org/10.48550/arxiv.2604.10832","title":"Privacy as Permissible Operations: An ABAC Framework for Policy-Law Compliance","display_name":"Privacy as Permissible Operations: An ABAC Framework for Policy-Law Compliance","publication_year":2026,"publication_date":"2026-04-12","ids":{"openalex":"https://openalex.org/W7154203123","doi":"https://doi.org/10.48550/arxiv.2604.10832"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.10832","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.10832","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.10832","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133553888","display_name":"Ajay Dhakar","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dhakar, Ajay","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074575821","display_name":"Arunesh Sinha","orcid":"https://orcid.org/0000-0002-3594-3848"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sinha, Arunesh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5132995898","display_name":"Shamik Sural","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sural, Shamik","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.8041999936103821,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.8041999936103821,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.027799999341368675,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.019700000062584877,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6029000282287598},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.5863999724388123},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.5755000114440918},{"id":"https://openalex.org/keywords/privacy-policy","display_name":"Privacy policy","score":0.5666000247001648},{"id":"https://openalex.org/keywords/privacy-law","display_name":"Privacy law","score":0.5370000004768372},{"id":"https://openalex.org/keywords/data-protection-act-1998","display_name":"Data Protection Act 1998","score":0.5001000165939331},{"id":"https://openalex.org/keywords/privacy-by-design","display_name":"Privacy by Design","score":0.4909999966621399},{"id":"https://openalex.org/keywords/safeguard","display_name":"Safeguard","score":0.461899995803833},{"id":"https://openalex.org/keywords/privacy-software","display_name":"Privacy software","score":0.44110000133514404}],"concepts":[{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6029000282287598},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5863999724388123},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.5755000114440918},{"id":"https://openalex.org/C102938260","wikidata":"https://www.wikidata.org/wiki/Q1999831","display_name":"Privacy policy","level":3,"score":0.5666000247001648},{"id":"https://openalex.org/C141972696","wikidata":"https://www.wikidata.org/wiki/Q1247836","display_name":"Privacy law","level":4,"score":0.5370000004768372},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5235000252723694},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5031999945640564},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.5001000165939331},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.4909999966621399},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.48919999599456787},{"id":"https://openalex.org/C2780771206","wikidata":"https://www.wikidata.org/wiki/Q3271761","display_name":"Safeguard","level":2,"score":0.461899995803833},{"id":"https://openalex.org/C509729295","wikidata":"https://www.wikidata.org/wiki/Q7246032","display_name":"Privacy software","level":3,"score":0.44110000133514404},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4172999858856201},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.41370001435279846},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.40400001406669617},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.3984000086784363},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.39149999618530273},{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.3328000009059906},{"id":"https://openalex.org/C2779886121","wikidata":"https://www.wikidata.org/wiki/Q288682","display_name":"XACML","level":3,"score":0.3093999922275543},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.29739999771118164},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.29170000553131104},{"id":"https://openalex.org/C78524284","wikidata":"https://www.wikidata.org/wiki/Q6031155","display_name":"Information privacy law","level":4,"score":0.2802000045776367},{"id":"https://openalex.org/C14587133","wikidata":"https://www.wikidata.org/wiki/Q7760779","display_name":"The Right to Privacy","level":3,"score":0.2718000113964081},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.2662000060081482},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.26159998774528503},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.2526000142097473}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.10832","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.10832","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.10832","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.10832","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7979763150215149,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"In":[0,48],"recent":[1],"years,":[2],"many":[3],"countries":[4],"have":[5],"started":[6],"enacting":[7],"laws":[8],"to":[9,114],"safeguard":[10],"privacy":[11,36,56,85,101,179],"of":[12,15,38,44,79,83,90,99,106,147,156,182],"personal":[13],"data":[14],"their":[16],"citizens":[17],"collected":[18],"and":[19,28,96,164],"maintained":[20],"by":[21,126],"various":[22],"enterprises":[23,40],"through":[24],"websites,":[25],"mobile":[26],"apps,":[27],"other":[29],"means.":[30],"It":[31],"is":[32,112],"imperative":[33],"that":[34],"the":[35,42,45,77,80,88,97,118,127,145,148,178],"policies":[37,57],"these":[39,121],"respect":[41],"provisions":[43],"applicable":[46],"law.":[47,65],"this":[49],"paper,":[50],"we":[51,140],"show":[52],"how":[53],"such":[54],"organizational":[55],"can":[58,133],"be":[59,115,134],"efficiently":[60],"checked":[61],"against":[62],"a":[63,84,100,104,175,183],"prevalent":[64],"Our":[66],"novel":[67],"approach":[68],"named":[69],"APLiance":[70,132,173],"(\\underline{A}BAC":[71],"framework":[72],"for":[73,167],"\\underline{P}olicy-\\underline{L}aw":[74],"Compl\\underline{iance})":[75],"models":[76],"requirements":[78],"different":[81],"sections":[82],"law":[86,119],"in":[87,136,144],"form":[89],"Attribute-based":[91],"Access":[92],"Control":[93],"(ABAC)":[94],"rules":[95],"clauses":[98],"policy":[102,111,180],"as":[103],"sequence":[105],"implied":[107],"access":[108,122],"requests.":[109],"A":[110,158],"considered":[113],"compliant":[116],"with":[117],"if":[120],"requests":[123],"are":[124],"permitted":[125],"corresponding":[128],"ABAC":[129],"rules.":[130],"Although":[131],"used":[135],"any":[137],"policy-law":[138],"setting,":[139],"demonstrate":[141],"its":[142],"effectiveness":[143],"context":[146],"recently":[149],"introduced":[150],"Digital":[151],"Personal":[152],"Data":[153],"Protection":[154],"Act":[155],"India.":[157],"browser":[159],"plugin":[160],"has":[161],"been":[162],"developed":[163],"publicly":[165],"released":[166],"real":[168],"time":[169],"compliance":[170],"checking":[171],"using":[172],"whenever":[174],"user":[176],"visits":[177],"page":[181],"website.":[184]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-15T00:00:00"}