A metamodel for GDPR-based privacy level agreements

Vasiliki Diamantopoulou; Konstantinos Angelopoulos; Michalis Pavlidis; Haralambos Mouratidis

A metamodel for GDPR-based privacy level agreements

Vasiliki Diamantopoulou, Konstantinos Angelopoulos, Michalis Pavlidis, Haralambos Mouratidis

University of Brighton

Research output: Contribution to journal › Conference article › peer-review

Abstract

The adoption of the General Data Protection Regulation (GDPR) is a major concern for data controllers of the public and private sector, as they are obliged to conform to the new principles and requirements managing personal data. In this paper, we propose that the data controllers adopt the concept of the Privacy Level Agreement. We present a metamodel for PLAs to support privacy management, based on analysis of privacy threats, vulnerabilities and trust relationships in their Information Systems, whilst complying with laws and regulations, and we illustrate the relevance of the metamodel with the GDPR.

Original language	English
Pages (from-to)	299-305
Number of pages	7
Journal	Ceur Workshop Proceedings
Volume	1979
Publication status	Published - 1 Jan 2017
Event	ER Forum and the ER Demo Track, ER-Forum-Demos 2017 - Valencia, Spain Duration: 6 Nov 2017 → 9 Nov 2017

Keywords

General Data Protection Regulation
Metamodel
Privacy Engineering
Privacy Level Agreement
Privacy Management

Access to Document

A Metamodel for GDPR-based Privacy Level AgreementsFinal published version, 246 KB

Cite this

@article{8d35fe5ac5044e789482ec11b378a38b,

title = "A metamodel for GDPR-based privacy level agreements",

abstract = "The adoption of the General Data Protection Regulation (GDPR) is a major concern for data controllers of the public and private sector, as they are obliged to conform to the new principles and requirements managing personal data. In this paper, we propose that the data controllers adopt the concept of the Privacy Level Agreement. We present a metamodel for PLAs to support privacy management, based on analysis of privacy threats, vulnerabilities and trust relationships in their Information Systems, whilst complying with laws and regulations, and we illustrate the relevance of the metamodel with the GDPR.",

keywords = "General Data Protection Regulation, Metamodel, Privacy Engineering, Privacy Level Agreement, Privacy Management",

author = "Vasiliki Diamantopoulou and Konstantinos Angelopoulos and Michalis Pavlidis and Haralambos Mouratidis",

year = "2017",

month = jan,

day = "1",

language = "English",

volume = "1979",

pages = "299--305",

journal = "Ceur Workshop Proceedings",

issn = "1613-0073",

note = "ER Forum and the ER Demo Track, ER-Forum-Demos 2017 ; Conference date: 06-11-2017 Through 09-11-2017",

}

TY - JOUR

T1 - A metamodel for GDPR-based privacy level agreements

AU - Diamantopoulou, Vasiliki

AU - Angelopoulos, Konstantinos

AU - Pavlidis, Michalis

AU - Mouratidis, Haralambos

PY - 2017/1/1

Y1 - 2017/1/1

N2 - The adoption of the General Data Protection Regulation (GDPR) is a major concern for data controllers of the public and private sector, as they are obliged to conform to the new principles and requirements managing personal data. In this paper, we propose that the data controllers adopt the concept of the Privacy Level Agreement. We present a metamodel for PLAs to support privacy management, based on analysis of privacy threats, vulnerabilities and trust relationships in their Information Systems, whilst complying with laws and regulations, and we illustrate the relevance of the metamodel with the GDPR.

AB - The adoption of the General Data Protection Regulation (GDPR) is a major concern for data controllers of the public and private sector, as they are obliged to conform to the new principles and requirements managing personal data. In this paper, we propose that the data controllers adopt the concept of the Privacy Level Agreement. We present a metamodel for PLAs to support privacy management, based on analysis of privacy threats, vulnerabilities and trust relationships in their Information Systems, whilst complying with laws and regulations, and we illustrate the relevance of the metamodel with the GDPR.

KW - General Data Protection Regulation

KW - Metamodel

KW - Privacy Engineering

KW - Privacy Level Agreement

KW - Privacy Management

UR - http://www.scopus.com/inward/record.url?scp=85035047124&partnerID=8YFLogxK

M3 - Conference article

AN - SCOPUS:85035047124

SN - 1613-0073

VL - 1979

SP - 299

EP - 305

JO - Ceur Workshop Proceedings

JF - Ceur Workshop Proceedings

T2 - ER Forum and the ER Demo Track, ER-Forum-Demos 2017

Y2 - 6 November 2017 through 9 November 2017

ER -

A metamodel for GDPR-based privacy level agreements

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Michalis Pavlidis

Cite this

A metamodel for GDPR-based privacy level agreements

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Profiles

Michalis Pavlidis

Cite this