Specifying and enforcing a fine-grained information flow policy : model and experiments

In this paper we present a model for defining and enforcing a fine-grained information flow policy. We describe how the policy can be enforced on a typical computer and present experiments using the proposed model. A key feature of the model is that it allows the expression of rules which detail precisely which information elements are allowed to mix together. For example, the model allows the expression of a policy which forbids a doctor from mixing the personal medical details of the patients. The enforcement mechanisms tracks and records information flows within the system so that dynamic changes to the policy can be made with respect to information elements which may have propagated to different locations in the system.

Managing illegal street racing and associated risky driving behaviour : An Australian perspective

Illegal street racing has received increased attention in recent years from the media, governments and road safety professionals. At the same time, there has been a shift from treating illegal street racing as a public nuisance issue to a road safety problem in Australia, as this behaviour now attracts a penalty of increased periods of vehicle impoundment leading to permanent vehicle forfeiture for repeat offences. This severe vehicle sanction is typically applied to repeat drink driving offenders and drivers who breach suspensions and disqualifications in North American jurisdictions, but was first introduced in Australia to deal with illegal street racing and associated risky driving behaviours, grouped together under the label of ‘hooning’ in Australian jurisdictions. This paper describes how Australian jurisdictions are dealing with this issue. The research described in this paper drew on multiple data sources to explore illegal street racing and the management of this issue in Australia. First, the paper reviews the relevant legislation in each Australian state to describe the cross-jurisdictional similarities and differences in approaches. It also describes some results from focus group discussions and a quantitative online survey with drivers who self-report engaging in illegal street racing and associated behaviours in Queensland, Australia. It was found that approaches to dealing with illegal street racing and associated risky driving behaviours in each Australian state are similar, with increasing periods of vehicle impoundment (leading to vehicle forfeiture) applied to repeat hooning offences within prescribed periods. Participants in the focus groups and respondents to the questionnaire generally felt these penalty periods were severe, with perceptions of severity increasing with the length of the penalty period. It was concluded that there is a need for each jurisdiction to objectively evaluate the effectiveness of their vehicle impoundment and forfeiture programs for hooning. These evaluations should compare the relative costs of these programs (e.g., enforcement, unrecovered towing and storage fees, and court costs) to the observed benefits (e.g., reduction in target behaviours, reduction in community complaints, and reduction in the number and severity of associated crashes).

Stakeholder perspectives regarding the mandatory notification of Australian data breaches

The advent of data breach notification laws in the United States (US) has unearthed a significant problem involving the mismanagement of personal information by a range of public and private sector organisations. At present, there is currently no statutory obligation under Australian law requiring public or private sector organisations to report a data breach of personal information to law enforcement agencies or affected persons. However, following a comprehensive review of Australian privacy law, the Australian Law Reform Commission (ALRC) has recommended the introduction of a mandatory data breach notification scheme. The issue of data breach notification has ignited fierce debate amongst stakeholders, especially larger private sector entities. The purpose of this article is to document the perspectives of key industry and government representatives to identify their standpoints regarding an appropriate regulatory approach to data breach notification in Australia.

A matter of confidence : privacy compliance for connected-up enterprises

Governments around the world are increasingly investing in information and communications technology (ICT) as a means of improving service delivery to citizens. Government ICT adoption is also being driven by a desire to streamline information accessibility and information flows within government - both between different levels of government and between different departments at the same level. Increasing the availability of information internally and to citizens has clear and compelling benefits but it also carries risks that must be carefully managed. This talk will examine the implications of such E-government initiatives for a range of compliance obligations, with a focus on information privacy. It will review recent developments in the area of systems-based enforcement of privacy policies and the particular privacy challenges presented by the aggregation of geospatial information.

Local autonomy, tax morale, and the shadow economy

Policymakers often propose strict enforcement strategies to fight the shadow economy and to increase tax morale. However, there is an alternative bottom-up approach that decentralises political power to those who are close to the problems. This paper analyses the relationship with local autonomy. We use data on tax morale at the individual level and macro data on the size of the shadow economy to analyse the relevance of local autonomy and compliance in Switzerland. The findings suggest that there is a positive (negative) relationship between local autonomy and tax morale (size of the shadow economy).

Evaluation of the Scottsdale Loop 101 automated speed enforcement demonstration program

Speeding is recognized as a major contributing factor in traffic crashes. In order to reduce speed-related crashes, the city of Scottsdale, Arizona implemented the first fixed-camera photo speed enforcement program (SEP) on a limited access freeway in the US. The 9-month demonstration program spanning from January 2006 to October 2006 was implemented on a 6.5 mile urban freeway segment of Arizona State Route 101 running through Scottsdale. This paper presents the results of a comprehensive analysis of the impact of the SEP on speeding behavior, crashes, and the economic impact of crashes. The impact on speeding behavior was estimated using generalized least square estimation, in which the observed speeds and the speeding frequencies during the program period were compared to those during other periods. The impact of the SEP on crashes was estimated using 3 evaluation methods: a before-and-after (BA) analysis using a comparison group, a BA analysis with traffic flow correction, and an empirical Bayes BA analysis with time-variant safety. The analysis results reveal that speeding detection frequencies (speeds> or =76 mph) increased by a factor of 10.5 after the SEP was (temporarily) terminated. Average speeds in the enforcement zone were reduced by about 9 mph when the SEP was implemented, after accounting for the influence of traffic flow. All crash types were reduced except rear-end crashes, although the estimated magnitude of impact varies across estimation methods (and their corresponding assumptions). When considering Arizona-specific crash related injury costs, the SEP is estimated to yield about $17 million in annual safety benefits.

Employer evasion of workers’ entitlements 1968 – 1995: why, what and whose?

Employer non-compliance with workers’ entitlements has been largely ignored in Australian industrial relations. The legal and regulatory literature however, identifies arguments relating to employer propensity to evade regulatory requirements, as well as highlighting environmental factors that may influence such behaviour. This article explores these issues in the Australian federal industrial relations jurisdiction, as well as providing a picture of employer evasion of minimum labour standards between 1986 and 1995: who is exploited and in respect of what entitlements. Industry contexts and common characteristics of non-compliance are outlined by exploration of 30 awards ranked by the extent of underpayments recovered by the federal inspectorate during the period. Employer evasion of workers’ entitlements is arguably a calculated business decision, prompted or facilitated by intense competition, precarious employment (particularly female and youth), non-unionized workplaces and under-resourced enforcement agencies.