An abstract model of control over personal data [pdf]
hal.inria.fr