DEFeND DSM: A Data Scope Management Service for Model-Based Privacy by Design GDPR Compliance

Luca Piras, Mohammed Ghazi Al-Obeidallah, Michalis Pavlidis, Haralambos Mouratidis, Aggeliki Tsohou, Emmanouil Magkos, Andrea Praitano, Annarita Iodice, Beatriz Gallego Nicasio Crespo

Research output: Chapter in Book/Conference proceeding with ISSN or ISBNConference contribution with ISSN or ISBN

Abstract

The introduction of the European General Data Protection Regulation (GDPR) has brought significant benefits to citizens, but it has also created challenges for organisations, which are facing with difficulties interpreting it and properly applying it. An important challenge is compliance with the Privacy by Design and by default (PbD) principles, which require that data protection is integrated into processing activities and business practices from the design stage. Recently, the European Data Protection Board (EDPB) released an official document with PbD guidelines, and there are various efforts to provide approaches to support these. However, organizations are still facing difficulties in identifying a flow for executing, in a coherent, linear and effective way, these activities, and a complete toolkit for supporting this. In this paper, we: (i) identify the most important PbD activities and strategies, (ii) design a coherent, linear and effective flow for them, and (iii) describe our comprehensive supporting toolkit, as part of the DEFeND EU Project platform. Specifically, within DEFeND, we identified candidate tools, fulfilling specific GDPR aspects, and integrated them in a comprehensive toolkit: the DEFeND Data Scope Management service (DSM). The aim of DSM is to support organizations for continuous GDPR compliance through Model-Based Privacy by Design analysis. Here, we present important PbD activities and strategies individuated, then describe DSM, its design, flow, and a preliminary case study and evaluation performed with pilots from the healthcare, banking, public administration and energy sectors.

Original languageEnglish
Title of host publicationTrust, Privacy and Security in Digital Business - 17th International Conference, TrustBus 2020, Proceedings
EditorsStefanos Gritzalis, Edgar R. Weippl, Gabriele Kotsis, Ismail Khalil, A Min Tjoa
Pages186-201
Number of pages16
DOIs
Publication statusPublished - 14 Sep 2020
Event17th International Conference on Trust, Privacy and Security in Digital Business, TrustBus 2020 - Bratislava, Slovakia
Duration: 14 Sep 202017 Sep 2020

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume12395 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference17th International Conference on Trust, Privacy and Security in Digital Business, TrustBus 2020
CountrySlovakia
CityBratislava
Period14/09/2017/09/20

Bibliographical note

The final authenticated version is available online at https://doi.org/10.1007/978-3-030-58986-8_13

Keywords

  • Data protection
  • Data Scope Management
  • GDPR
  • Privacy
  • Privacy by Design
  • Privacy engineering
  • Security engineering

Fingerprint Dive into the research topics of 'DEFeND DSM: A Data Scope Management Service for Model-Based Privacy by Design GDPR Compliance'. Together they form a unique fingerprint.

Cite this