{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T06:40:26Z","timestamp":1785566426460,"version":"3.56.0"},"reference-count":32,"publisher":"MDPI AG","issue":"5","license":[{"start":{"date-parts":[[2022,5,16]],"date-time":"2022-05-16T00:00:00Z","timestamp":1652659200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"UK Research and Innovation London Medical Imaging &amp; Artificial Intelligence Centre for Value Based Healthcare","award":["SPP2177"],"award-info":[{"award-number":["SPP2177"]}]},{"DOI":"10.13039\/501100001659","name":"German Research Foundation (DFG)","doi-asserted-by":"publisher","award":["SPP2177"],"award-info":[{"award-number":["SPP2177"]}],"id":[{"id":"10.13039\/501100001659","id-type":"DOI","asserted-by":"publisher"}]},{"name":"German Cancer Research Center Joint Funding Programs UPGRADE and SUBPAN","award":["SPP2177"],"award-info":[{"award-number":["SPP2177"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Entropy"],"abstract":"<jats:p>The increasing prevalence of large-scale data collection in modern society represents a potential threat to individual privacy. Addressing this threat, for example through privacy-enhancing technologies (PETs), requires a rigorous definition of what exactly is being protected, that is, of privacy itself. In this work, we formulate an axiomatic definition of privacy based on quantifiable and irreducible information flows. Our definition synthesizes prior work from the domain of social science with a contemporary understanding of PETs such as differential privacy (DP). Our work highlights the fact that the inevitable difficulties of protecting privacy in practice are fundamentally information-theoretic. Moreover, it enables quantitative reasoning about PETs based on what they are protecting, thus fostering objective policy discourse about their societal implementation.<\/jats:p>","DOI":"10.3390\/e24050714","type":"journal-article","created":{"date-parts":[[2022,5,16]],"date-time":"2022-05-16T21:36:06Z","timestamp":1652736966000},"page":"714","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Privacy: An Axiomatic Approach"],"prefix":"10.3390","volume":"24","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3242-0195","authenticated-orcid":false,"given":"Alexander","family":"Ziller","sequence":"first","affiliation":[{"name":"Institute of Artificial Intelligence in Medicine, Technical University of Munich, 81675 Munich, Germany"},{"name":"Institute of Radiology, Technical University of Munich, 81675 Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1818-1036","authenticated-orcid":false,"given":"Tamara T.","family":"Mueller","sequence":"additional","affiliation":[{"name":"Institute of Artificial Intelligence in Medicine, Technical University of Munich, 81675 Munich, Germany"},{"name":"Institute of Radiology, Technical University of Munich, 81675 Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6039-6957","authenticated-orcid":false,"given":"Rickmer","family":"Braren","sequence":"additional","affiliation":[{"name":"Institute of Radiology, Technical University of Munich, 81675 Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5683-5889","authenticated-orcid":false,"given":"Daniel","family":"Rueckert","sequence":"additional","affiliation":[{"name":"Institute of Artificial Intelligence in Medicine, Technical University of Munich, 81675 Munich, Germany"},{"name":"Department of Computing, Imperial College London, London SW7 2BX, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8382-8062","authenticated-orcid":false,"given":"Georgios","family":"Kaissis","sequence":"additional","affiliation":[{"name":"Institute of Artificial Intelligence in Medicine, Technical University of Munich, 81675 Munich, Germany"},{"name":"Institute of Radiology, Technical University of Munich, 81675 Munich, Germany"},{"name":"Department of Computing, Imperial College London, London SW7 2BX, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2022,5,16]]},"reference":[{"key":"ref_1","unstructured":"Boardman, R., and Munoz Rodriguez, J. (2022, April 20). The EU Data Governance Act: What Privacy Professionals Need to Know. Available online: https:\/\/www.twobirds.com\/en\/insights\/2022\/global\/the-eu-data-governance-act-what-privacy-professionals-need-to-know."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"10","DOI":"10.1177\/1095796018819461","article-title":"Surveillance capitalism and the challenge of collective action","volume":"Volume 28","author":"Zuboff","year":"2019","journal-title":"New Labor Forum"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"305","DOI":"10.1038\/s42256-020-0186-1","article-title":"Secure, privacy-preserving and federated machine learning in medical imaging","volume":"2","author":"Kaissis","year":"2020","journal-title":"Nat. Mach. Intell."},{"key":"ref_4","unstructured":"Cavoukian, A. (2022, April 20). Privacy by Design. Available online: www.privacybydesign.ca."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"307","DOI":"10.2307\/1190673","article-title":"Some psychological aspects of privacy","volume":"31","author":"Jourard","year":"1966","journal-title":"Law Contemp. Prob."},{"key":"ref_6","unstructured":"Westin, A. (1967). Privacy and Freedom, Athenum."},{"key":"ref_7","first-page":"119","article-title":"Privacy as contextual integrity","volume":"79","author":"Nissenbaum","year":"2004","journal-title":"Wash. Law Rev."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"1087","DOI":"10.2307\/3481326","article-title":"Conceptualizing privacy","volume":"90","author":"Solove","year":"2002","journal-title":"Calif. Law Rev."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"477","DOI":"10.2307\/40041279","article-title":"A taxonomy of privacy","volume":"154","author":"Solove","year":"2005","journal-title":"Univ. Pa. Law Rev."},{"key":"ref_10","unstructured":"Solove, D.J. (2008). Understanding Privacy, Harvard University Press."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1561\/0400000042","article-title":"The Algorithmic Foundations of Differential Privacy","volume":"9","author":"Dwork","year":"2013","journal-title":"Found. Trends Theor. Comput. Sci."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1145\/3433638","article-title":"The limits of differential privacy (and its misuse in data release and machine learning)","volume":"64","year":"2021","journal-title":"Commun. ACM"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"557","DOI":"10.1142\/S0218488502001648","article-title":"k-anonymity: A model for protecting privacy","volume":"10","author":"Sweeney","year":"2002","journal-title":"Int. J. Uncertain. Fuzziness Knowl.-Based Syst."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Lidstr\u00f6mer, N., and Ashrafian, H. (2020). Artificial Intelligence in Medicine and Privacy Preservation. Artificial Intelligence in Medicine, Springer International Publishing.","DOI":"10.1007\/978-3-030-58080-3"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"379","DOI":"10.1002\/j.1538-7305.1948.tb01338.x","article-title":"A mathematical theory of communication","volume":"27","author":"Shannon","year":"1948","journal-title":"Bell Syst. Tech. J."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Mac Kay, D.M. (1969). Information, Mechanism and Meaning, The MIT Press.","DOI":"10.7551\/mitpress\/3769.001.0001"},{"key":"ref_17","unstructured":"Dretske, F.I. (1981). Knowledge and the Flow of Information, Stanford University."},{"key":"ref_18","unstructured":"Benthall, S.P. (2018). Context, Causality, and Information Flow: Implications for Privacy Engineering, Security, and Data Economics, University of California."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Alvim, M.S., Chatzikokolakis, K., McIver, A., Morgan, C., Palamidessi, C., and Smith, G. (2020). The Science of Quantitative Information Flow, Springer.","DOI":"10.1007\/978-3-319-96131-6"},{"key":"ref_20","unstructured":"Eryurek, E., Gilad, U., Lakshmanan, V., Kibunguchy, A., and Ashdown, J. (2021). Data Governance: The Definitive Guide, O\u2019Reilly Media, Inc."},{"key":"ref_21","unstructured":"Watzlawick, P., Bavelas, J.B., and Jackson, D.D. (2011). Pragmatics of Human Communication: A Study of Interactional Patterns, Pathologies and Paradoxes, WW Norton & Company."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Pearl, J. (2009). Causality, Cambridge University Press.","DOI":"10.1017\/CBO9780511803161"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Benthall, S. (2019, January 1\u20133). Situated information flow theory. Proceedings of the 6th Annual Symposium on Hot Topics in the Science of Security, Nashville, TN, USA.","DOI":"10.1145\/3314058.3314066"},{"key":"ref_24","unstructured":"Berlo, D.K. (1965). The Process of Communication: An Introduction to Theory and Practice, Holt. Technical Report."},{"key":"ref_25","first-page":"126","article-title":"The medium is the message","volume":"123","author":"McLuhan","year":"1967","journal-title":"New York"},{"key":"ref_26","unstructured":"Trask, A., Bluemke, E., Garfinkel, B., Cuervas-Mons, C.G., and Dafoe, A. (2020). Beyond privacy trade-offs with structured transparency. arXiv."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Narayanan, A., and Shmatikov, V. (2008, January 18\u201321). Robust De-anonymization of Large Sparse Datasets. Proceedings of the 2008 IEEE Symposium on Security and Privacy (SP 2008), Oakland, CA, USA.","DOI":"10.1109\/SP.2008.33"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"1376","DOI":"10.1038\/srep01376","article-title":"Unique in the Crowd: The privacy bounds of human mobility","volume":"3","author":"Hidalgo","year":"2013","journal-title":"Sci. Rep."},{"key":"ref_29","unstructured":"Rothwell, J.D. (2010). In the Company of Others: An Introduction to Communication, Oxford University Press."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Tschantz, M.C., Sen, S., and Datta, A. (2020, January 18\u201320). SoK: Differential privacy as a causal property. Proceedings of the 2020 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA.","DOI":"10.1109\/SP40000.2020.00012"},{"key":"ref_31","first-page":"18075","article-title":"Remember what you want to forget: Algorithms for machine unlearning","volume":"34","author":"Sekhari","year":"2021","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Flaherty, E. (2019). Complexity Theory: Societies as Complex Systems. Complexity and Resilience in the Social and Ecological Sciences, Palgrave Macmillan.","DOI":"10.1057\/978-1-137-54978-5"}],"container-title":["Entropy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1099-4300\/24\/5\/714\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T23:11:30Z","timestamp":1760137890000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1099-4300\/24\/5\/714"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5,16]]},"references-count":32,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2022,5]]}},"alternative-id":["e24050714"],"URL":"https:\/\/doi.org\/10.3390\/e24050714","relation":{},"ISSN":["1099-4300"],"issn-type":[{"value":"1099-4300","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,5,16]]}}}