SYSTEM FOR MANAGING PERSONAL DATA

摘要

A method for managing personal data of a user of a user device is disclosed. Said user device is adapted to have installed thereon an APP. Said APP is configured to require access to said personal data when running on said user device. The method comprises: - creating a certification for said APP, said certification being based on a corresponding statement providing information regarding the relationship between said APP and personal data of the user; - associating said certification to said APP for certifying said APP; - allowing the user to provide user-defined policies about exploiting the user personal data; - checking whether the user-defined policies provided by the user are compatible with requirements of said APP defined in the corresponding statement; - if the user-defined policies are compatible with said requirements of said APP defined in the statement, carrying out the following operations when the APP running on the user device requires to access personal data: - enforcing rules defined in the APP statement to guarantee that the APP accesses PD according to the requirements of said APP defined in the corresponding statement; - if, as a result of said enforcing rules,the requirements of said APP defined in the statement are not fulfilled, denying access to the personal data; -if, as a result of said enforcing rules,the requirements of said APP defined in the statement are fulfilled, carrying out the following operations: -if the APP requests to access real time personal data, collecting personal data from the user device according to the user-defined policies, and, if said personal data is to be collected, storing the accessed personal data in a secured digital space; -if the APP requests to access personal data already stored in the secured digital space,retrieving said personal data from the secured digital space according to the user-defined policies.