Secure cloud computing is key for business success and end-user adoption of federated and decentralized cloud services and thus essential to stimulate the growth of the European Digital Single Market. RestAssured will provide solutions to specific technical concerns of data protection in the cloud (such as geo-location restrictions on personal data), which are imposed by the dynamic, multi-stakeholder and decentralized nature of federated cloud systems. These concerns mean that privacy and security by design approaches will no longer be sufficient, due to uncertainty at design time of how the cloud and privacy requirements may dynamically evolve and change at run time. To this end, RestAssured provides novel mechanisms and cloud architectures for the runtime detection, prediction and prevention of data protection violations. RestAssured will assure the protection of sensitive business and citizen data in the cloud by combining four pillars of innovation: (1) combination of fully homomorphic encryption to process data without decryption with cloud enablement of SGX hardware for protected data processing, (2) sticky policies for decentralized data lifecy-cle management, (3) models@runtime for data protection assurance, and (4) automated risk management for run-time data protection. The applicability and usefulness of the RestAssured solutions will be demonstrated through three use cases driven by project partners and involving other stakeholders from outside the consortium; High Performance Computing for commercial enterprises; Pay As You Drive usage based insurance; and self-directed Social care for vulnerable adults and social care providers. The main impact of RestAssured will be to enable the free and seamless movement of data within the EU, whilst assuring conformance to data protection regulations, such as the EU Data Protection Directive and its successor the General Data Protection Regulation.

The goal of the OPERANDO project is to specify, implement, field-test, validate and exploit an innovative privacy enforcement platform that will enable the Privacy as a Service (PaS) business paradigm and the market for online privacy services. The OPERANDO project will integrate and extend the state of the art to create a platform that will used by independent Privacy Service Providers (PSPs) to provide comprehensive user privacy enforcement in the form of a dedicated online service, called “Privacy Authority”. The OPERANDO platform will support flexible and viable business models, including targeting of individual market segments such as public administration, social networks and Internet of Things. A key aspect addressed by OPERANDO is the need to simplify privacy for end users (data subjects). OPERANDO will support a simple Privacy Dashboard allowing users to specify their preferences. These will be automatically compared with Online Service Provider (OSP) privacy policies and translated into personal data access control decisions by the PSP. OPERANDO will also address OSP requirements for simplified privacy compliance checking and auditing, to verify that they will meet user expectations or to satisfy privacy regulators. The technology will be trialled in the health care and public administration sectors. The OPERANDO consortium thereby aims to contribute to the entire ecosystem of online privacy stakeholders: Users, PSPs, Online Service Providers and Regulators. Federation of Privacy Authorities will be supported to increase value of the services and their uptake. The OPERANDO platform will be positioned for endorsement by European governments and standardization bodies. To increase transparency of the privacy services and dissemination of results, OPERANDO outcomes will be implemented in Open Source, and will be made available to the community for evolution and value-adding beyond the scope of the project.