Compiling Personal Data and Subject Categories from App Data Models - ICT Systems Security and Privacy Protection
Conference Papers Year : 2021

Compiling Personal Data and Subject Categories from App Data Models

Christian Burkert
  • Function : Author
  • PersonId : 1154399
Maximilian Blochberger
  • Function : Author
  • PersonId : 1154400
Hannes Federrath
  • Function : Author
  • PersonId : 986216

Abstract

Maintaining documentation about personal data processing is mandated by GDPR. When it comes to application software and its operation, this obligation can become challenging. Operators often do not know enough about app internals to be comprehensive in their documentation or follow changes enough to be up-to-date. We therefore propose a semi-automatic process to compile documentation from the source of truth: the app data model. Our approach uses data model entity relations to determine identifiability of data subjects. We guide app experts to add the semantic knowledge that is necessary to determine subject categories and to subsequently compile a condensed listing of personal data. We provide evidence for the real-world applicability of our proposal by evaluating the data models of five common web apps.
Fichier principal
Vignette du fichier
512098_1_En_16_Chapter.pdf (337.66 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03746040 , version 1 (04-08-2022)

Licence

Identifiers

Cite

Christian Burkert, Maximilian Blochberger, Hannes Federrath. Compiling Personal Data and Subject Categories from App Data Models. 36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.242-255, ⟨10.1007/978-3-030-78120-0_16⟩. ⟨hal-03746040⟩
19 View
14 Download

Altmetric

Share

More