Privacy Compliance via Model Transformations - CEA - Commissariat à l’énergie atomique et aux énergies alternatives Access content directly
Books Year : 2018

Privacy Compliance via Model Transformations

Thibaud Antignac
  • Function : Scientific advisor
  • PersonId : 1023772
Riccardo Scandariato
  • Function : Scientific advisor
  • PersonId : 1032848
Gerardo Schneider
  • Function : Scientific advisor
  • PersonId : 1023774

Abstract

Due to the upcoming, more restrictive regulations (like the European GDPR), designing privacy preserving architectures for information systems is becoming a pressing concern for practitioners. In particular, verifying that a design is compliant with the regulations might be a challenging task for engineers. This work presents an approach based on model transformations, which guarantee that an architectural design encompasses regulation-oriented principles such as purpose limitation, or accountability of the data controller. Our work improves the state of the art along two main dimensions. The approach we propose (i) embeds privacy principles coming from regulations, thus helping to bridge the gap between the technical and the legal worlds, (ii) systematize the embedding of the privacy principles coming from regulations, thus enabling a constructive approach to privacy by design.

Keywords

Fichier principal
Vignette du fichier
iwpe18.pdf (431.87 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

cea-01809076 , version 1 (06-06-2018)

Identifiers

  • HAL Id : cea-01809076 , version 1

Cite

Thibaud Antignac, Riccardo Scandariato, Gerardo Schneider (Dir.). Privacy Compliance via Model Transformations. In press. ⟨cea-01809076⟩
68 View
331 Download

Share

Gmail Facebook X LinkedIn More