# The Need for Machine-Processable Agreements in Health Data Management +
## 5 A Policy Language for Multi-Privilege Consent
### Conflict Detection
(2003) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Enterprise privacy authorization language (EPAL). _IBM Res._**2003**, _30_, 31. * [PERSON] et al. (2003) [PERSON]; [PERSON]; [PERSON] A policy based approach to security for the semantic web. In Proceedings of the International Semantic Web Conference, Sanibel, FL, USA, 20-23 October 2003; Springer: Berlin/Heidelberg, Germany; pp. 402-418. * [PERSON] et al. (2008) [PERSON]; [PERSON]; [PERSON] Using dependency tracking to provide explanations for policy management. In Proceedings of the 2008 IEEE Workshop on Policies for Distributed Systems and Networks, Palisades, NY, USA, 2-4 June 2008; pp. 54-61. * (38) [PERSON]; [PERSON] Data usage control in the future internet cloud. In Proceedings of the Future Internet Assembly, Budapest, Hungary, 17-19 May 2011; Springer: Berlin/Heidelberg, Germany; pp. 223-231. * (39) W3C. The Platform for Privacy Preferences 1.0. Available online: [[https://www.w3.org/TR/P3P/](https://www.w3.org/TR/P3P/)]([https://www.w3.org/TR/P3P/](https://www.w3.org/TR/P3P/)) (accessed on 6 April 2020)
* (40) W3C. A P3P Preference Exchange Language 1.0 Available online: [[https://www.w3.org/TR/P3P-preferences/](https://www.w3.org/TR/P3P-preferences/)]([https://www.w3.org/TR/P3P-preferences/](https://www.w3.org/TR/P3P-preferences/)) (accessed on 6 April 2020)
* (41) [PERSON]; [PERSON]; [PERSON]; [PERSON] XPref: A preference language for P3P. _Comput. Netw._**2005**, _48_, 809-827. [CrossRef]
* (42) [PERSON]; [PERSON]; [PERSON]; [PERSON] A privacy-aware access control system. _J. Comput. Secur._**2008**, _16_, 369-397. [CrossRef]
* (43) [PERSON]; [PERSON]; [PERSON]; [PERSON] E-P3P privacy policies and privacy authorization. In Proceedings of the 2002 ACM workshop on Privacy in the Electronic Society, Washington, DC, USA, 21 November 2002; Association for Computing Machinery: New York, NY, USA; pp. 103-109. * (44) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] APPEL: Adaptable and Programmable Policy Environment and Language. 2014. Available online: [[http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.639.4150](http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.639.4150)]([http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.639.4150](http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.639.4150)) (accessed on 7 April 2020). * (45) [PERSON]; [PERSON] [PERSON] P2u: A privacy policy specification language for secondary data sharing and usage. In Proceedings of the 2014 IEEE Security and Privacy Workshops, San Jose, CA, USA, 17-18 May 2014; pp. 18-22. * (46) [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON] Primelife policy language. In Proceedings of the W3C Workshop on Access Control Application Scenarios, Abbaye, Luxembourg, 17-18 November 2009. * (47) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON] A-PPL: An accountability policy language. In _Data Privacy Management, Autonomous Spontaneous Security, and Security Assurance_; Springer: Berlin/Heidelberg, Germany, 2014; pp. 319-326. * (48) [PERSON]; [PERSON]; [PERSON] SecPAL: Design and semantics of a decentralized authorization language. _J. Comput. Secur._**2010**, _18_, 619-665. [CrossRef]
* (49) [PERSON]; [PERSON]; [PERSON] _A Framework for Privacy Preferences and Data-Handling Policies_; Technical Report, MSR-TR-2009-128; Microsoft Research: Cambridge, UK, 2009. * (50) [PERSON]; [PERSON]; [PERSON] Purpose Based Access Control of Complex Data for Privacy Protection. In Proceedings of the Tenth ACM Symposium on Access Control Models and Technologies, Stockholm, Sweden, 1-3 June 2005; pp. 102-110.