Skip to main content

Semantic Techniques for Validation of GDPR Compliance of Business Processes

  • Conference paper
  • First Online:
Complex, Intelligent, and Software Intensive Systems (CISIS 2019)

Abstract

Starting from 25th May 2018, the EU Regulation 2016/679, known as GDPR (General Data Protection Regulation) - relating to the protection of individuals with regard to the processing and free circulation of personal data - is directly applicable in all Member States. The application of the GDPR caught a lot of companies and institutions unprepared and off guard. One of the most complex activities that the GDPR requires is the Data Protection Impact Assessment (DPIA). The aim of this paper is to provide an Expert System that is able to draw up the DPIA, and a prototype is shown.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 169.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 219.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Ahmadian, A.S., Strüber, D., Riediger, V., Jürjens, J.: Supporting privacy impact assessment by model-based privacy analysis. In: Proceedings of the 33rd Annual ACM Symposium on Applied Computing, pp. 1467–1474 (2018)

    Google Scholar 

  2. Shapiro, R., White; S.A., Bock, C., Palmer, N., Muhelen, M., Brambilla, M., Gagné, D. et al.: BPMN 2.0 Handbook 2nd Ed.: Methods, Concepts, Case Studies and Standards in Business Process Management Notation. Future Strategies Inc., Lighthouse Point (2011)

    Google Scholar 

  3. Rospocher, M., Ghidini, C., Serafini,L.: An ontology for the business process modelling notation. In: Formal Ontology in Information Systems: Proceedings of the Eighth International Conference, vol. 267, pp. 133–146. IOS Press, Amsterdam (2014)

    Google Scholar 

  4. Workgroup CODAU on Privacy and GDPR: Linee guida in materia di privacy e protezione dei dati personali in ambito universitario, Version 1.1 (2017). Online: http://www.codau.it/sites/default/files/verbali/all_3_lineeguida_privacy_gdpr_ravera.pdf

  5. The W3C Consortium: OWL 2 Web Ontology Language Document Overview, Second Edition (2012). Online: https://www.w3.org/TR/owl2-overview/

  6. Vassilades, V., Wielemaker, J., Mungall, C.: Processing OWL2 ontologies using Thea: An application of logic programming. In: Proceedings of the 5th International Workshop on OWL: Experiences and Directions, vol. 529. CEUR-WS.com (2009)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Michele Mastroianni .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2020 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Di Martino, B., Mastroianni, M., Campaiola, M., Morelli, G., Sparaco, E. (2020). Semantic Techniques for Validation of GDPR Compliance of Business Processes. In: Barolli, L., Hussain, F., Ikeda, M. (eds) Complex, Intelligent, and Software Intensive Systems. CISIS 2019. Advances in Intelligent Systems and Computing, vol 993. Springer, Cham. https://doi.org/10.1007/978-3-030-22354-0_78

Download citation

Publish with us

Policies and ethics