Compiling Personal Data and Subject Categories from App Data Models - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

Compiling Personal Data and Subject Categories from App Data Models

Christian Burkert
  • Fonction : Auteur
  • PersonId : 1154399
Maximilian Blochberger
  • Fonction : Auteur
  • PersonId : 1154400
Hannes Federrath
  • Fonction : Auteur
  • PersonId : 986216

Résumé

Maintaining documentation about personal data processing is mandated by GDPR. When it comes to application software and its operation, this obligation can become challenging. Operators often do not know enough about app internals to be comprehensive in their documentation or follow changes enough to be up-to-date. We therefore propose a semi-automatic process to compile documentation from the source of truth: the app data model. Our approach uses data model entity relations to determine identifiability of data subjects. We guide app experts to add the semantic knowledge that is necessary to determine subject categories and to subsequently compile a condensed listing of personal data. We provide evidence for the real-world applicability of our proposal by evaluating the data models of five common web apps.
Fichier principal
Vignette du fichier
512098_1_En_16_Chapter.pdf (337.66 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03746040 , version 1 (04-08-2022)

Licence

Paternité

Identifiants

Citer

Christian Burkert, Maximilian Blochberger, Hannes Federrath. Compiling Personal Data and Subject Categories from App Data Models. 36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.242-255, ⟨10.1007/978-3-030-78120-0_16⟩. ⟨hal-03746040⟩
11 Consultations
6 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More