Fiche du document
31 octobre 2018
- handle: 10670/1.7aup5v
- hal: hal-02156452
- doi: 10.1007/978-3-030-02302-7_15
Ce document est lié à :
info:eu-repo/semantics/altIdentifier/doi/10.1007/978-3-030-02302-7_15
http://creativecommons.org/licenses/by/ , info:eu-repo/semantics/OpenAccess
Mots-clés
Privacy Regulations Consent Socio-technical systems Requirements Modeling Automated reasoningSujets proches
Molding (Clay, plaster, etc.) Clay modeling ModellingCiter ce document
Marco Robol et al., « Modeling and Reasoning About Privacy-Consent Requirements », HAL-SHS : sciences de l'information, de la communication et des bibliothèques, ID : 10.1007/978-3-030-02302-7_15
Métriques
Partage / Export
Résumé
Since the origin of the web, up to social networks, and now to the internet of things, the quantity of personal information produced and shared is uncontrollably increasing. Privacy regulations protect our right to have the control on our personal data. According to the recent General Data Protection Regulation (GDPR), entered into force in May 2018, infringements can be very costly to organizations, ranging from 10s to 100s of thousands of Euros. In order to ensure compliance with such regulations, privacy should be taken into consideration as early as at requirements time, so to avoid expensive after-the-fact fixes. Modeling frameworks have been proposed to support the analysis of requirements in complex socio-technical systems, however, even if a primary role is given to security, for privacy more work need to be done. In this paper, starting from the social concept of consent, we propose a modeling language and define the formal framework for the analysis of privacy-consent requirements. We report on our experience in the analysis of privacy in the medical domain, in the context of a research project with the Trentino health-care provider (APSS).