Modeling and Reasoning About Privacy-Consent Requirements - The Practice of Enterprise Modeling Access content directly
Conference Papers Year : 2018

Modeling and Reasoning About Privacy-Consent Requirements

Abstract

Since the origin of the web, up to social networks, and now to the internet of things, the quantity of personal information produced and shared is uncontrollably increasing. Privacy regulations protect our right to have the control on our personal data. According to the recent General Data Protection Regulation (GDPR), entered into force in May 2018, infringements can be very costly to organizations, ranging from 10s to 100s of thousands of Euros. In order to ensure compliance with such regulations, privacy should be taken into consideration as early as at requirements time, so to avoid expensive after-the-fact fixes. Modeling frameworks have been proposed to support the analysis of requirements in complex socio-technical systems, however, even if a primary role is given to security, for privacy more work need to be done. In this paper, starting from the social concept of consent, we propose a modeling language and define the formal framework for the analysis of privacy-consent requirements. We report on our experience in the analysis of privacy in the medical domain, in the context of a research project with the Trentino health-care provider (APSS).
Fichier principal
Vignette du fichier
474841_1_En_15_Chapter.pdf (339.72 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-02156452 , version 1 (14-06-2019)

Licence

Attribution

Identifiers

Cite

Marco Robol, Elda Paja, Mattia Salnitri, Paolo Giorgini. Modeling and Reasoning About Privacy-Consent Requirements. 11th IFIP Working Conference on The Practice of Enterprise Modeling (PoEM), Oct 2018, Vienna, Austria. pp.238-254, ⟨10.1007/978-3-030-02302-7_15⟩. ⟨hal-02156452⟩
64 View
97 Download

Altmetric

Share

Gmail Facebook X LinkedIn More