Privacy as a Service (PraaS):: A Conceptual Model of GDPR to Construct Privacy Services

E.E. Roubtsova; R. Bosua

doi:10.1007/978-3-030-79976-2_10

Privacy as a Service (PraaS): A Conceptual Model of GDPR to Construct Privacy Services

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference Article in proceeding › Academic › peer-review

Abstract

The General Data Protection Regulation (GDPR) requires transparency about the use of personal data. However, what does the transparency mean for an individual? This transparency is an ability of an individual to uniformly fulfill actions stated in the GDPR from checking his/her data usage to erasing data. An individual assumes that these actions are supported by services. Such a uniform aspect ``Privacy as a Service'' is proposed in this paper. The contribution of this work is a conceptual model of the GDPR for designing privacy services. This model has been built by a content coding of key Articles from the GDPR, followed by incremental conceptual modelling and, finally, adopting the business-generic pattern of a contract. With executable protocol models of two privacy services identified from the GDPR we illustrate how to use our conceptual model. This work contributes to a uniform understanding of privacy by design as ``Privacy as a Service''. We discuss the semantic and organizational value of the proposed model.

Original language	English
Title of host publication	International Symposium on Business Modeling and Software Design
Subtitle of host publication	BMSD 2021: Business Modeling and Software Design
Editors	Boris Shishkov
Place of Publication	Cham
Publisher	Springer
Pages	170-189
Number of pages	20
Volume	422
ISBN (Electronic)	978-3-030-79976-2
ISBN (Print)	978-3-030-79975-5
DOIs	https://doi.org/10.1007/978-3-030-79976-2_10
Publication status	Published - Jul 2021
Event	11th International Symposium on Business Modeling and Software Design - Sofia, Bulgaria Duration: 5 Jul 2021 → 7 Jul 2021 Conference number: 11 http://www.is-bmsd.org/

Publication series

Series	Lecture Notes in Business Information Processing
Volume	422
ISSN	1865-1348

Conference

Conference	11th International Symposium on Business Modeling and Software Design
Abbreviated title	BMSD 2021
Country/Territory	Bulgaria
City	Sofia
Period	5/07/21 → 7/07/21
Internet address	http://www.is-bmsd.org/

Keywords

Business Process Modelling
Privacy Aspect
Privacy as a Service (PraaS)
Conceptual Model
Executable Protocol Model
General Data Protection Regulation
General Data Protection Regulation (GDPR)
Business process modelling
Executable protocol model
Conceptual model
Privacy aspect

Access to Document

10.1007/978-3-030-79976-2_10

https://link.springer.com/chapter/10.1007/978-3-030-79976-2_10Licence: CC BY-ND

Cite this

@inproceedings{e29c47c44f9f40f7b85352c9b72d2b6d,

title = "Privacy as a Service (PraaS):: A Conceptual Model of GDPR to Construct Privacy Services",

abstract = "The General Data Protection Regulation (GDPR) requires transparency about the use of personal data. However, what does the transparency mean for an individual? This transparency is an ability of an individual to uniformly fulfill actions stated in the GDPR from checking his/her data usage to erasing data. An individual assumes that these actions are supported by services. Such a uniform aspect ``Privacy as a Service'' is proposed in this paper. The contribution of this work is a conceptual model of the GDPR for designing privacy services. This model has been built by a content coding of key Articles from the GDPR, followed by incremental conceptual modelling and, finally, adopting the business-generic pattern of a contract. With executable protocol models of two privacy services identified from the GDPR we illustrate how to use our conceptual model. This work contributes to a uniform understanding of privacy by design as ``Privacy as a Service''. We discuss the semantic and organizational value of the proposed model.",

keywords = "Business Process Modelling, Privacy Aspect, Privacy as a Service (PraaS), Conceptual Model, Executable Protocol Model, General Data Protection Regulation, General Data Protection Regulation (GDPR), Business process modelling, Executable protocol model, Conceptual model, Privacy aspect",

author = "E.E. Roubtsova and R. Bosua",

note = "Privacy as a Service (PraaS). A Conceptual Model of GDPR to Construct Privacy Services. Springer Nature Switzerland AG 2021 B. Shishkov (Ed.): BMSD 2021, LNBIP 422, pp. 1–20, 2021. https://doi.org/10.1007/978-3-030-79976-2_10; 11th International Symposium on Business Modeling and Software Design, BMSD 2021 ; Conference date: 05-07-2021 Through 07-07-2021",

year = "2021",

month = jul,

doi = "10.1007/978-3-030-79976-2_10",

language = "English",

isbn = "978-3-030-79975-5",

volume = "422",

series = "Lecture Notes in Business Information Processing",

publisher = "Springer",

pages = "170--189",

editor = "Shishkov, {Boris }",

booktitle = "International Symposium on Business Modeling and Software Design",

url = "http://www.is-bmsd.org/",

}

Roubtsova, EE & Bosua, R 2021, Privacy as a Service (PraaS): A Conceptual Model of GDPR to Construct Privacy Services. in B Shishkov (ed.), International Symposium on Business Modeling and Software Design: BMSD 2021: Business Modeling and Software Design. vol. 422, Springer, Cham, Lecture Notes in Business Information Processing, vol. 422, pp. 170-189, 11th International Symposium on Business Modeling and Software Design, Sofia, Bulgaria, 5/07/21. https://doi.org/10.1007/978-3-030-79976-2_10

Privacy as a Service (PraaS): A Conceptual Model of GDPR to Construct Privacy Services. / Roubtsova, E.E.; Bosua, R.
International Symposium on Business Modeling and Software Design: BMSD 2021: Business Modeling and Software Design. ed. / Boris Shishkov. Vol. 422 Cham: Springer, 2021. p. 170-189 (Lecture Notes in Business Information Processing, Vol. 422).

Research output: Chapter in Book/Report/Conference proceeding › Conference Article in proceeding › Academic › peer-review

TY - GEN

T1 - Privacy as a Service (PraaS):

T2 - 11th International Symposium on Business Modeling and Software Design

AU - Roubtsova, E.E.

AU - Bosua, R.

N1 - Conference code: 11

PY - 2021/7

Y1 - 2021/7

N2 - The General Data Protection Regulation (GDPR) requires transparency about the use of personal data. However, what does the transparency mean for an individual? This transparency is an ability of an individual to uniformly fulfill actions stated in the GDPR from checking his/her data usage to erasing data. An individual assumes that these actions are supported by services. Such a uniform aspect ``Privacy as a Service'' is proposed in this paper. The contribution of this work is a conceptual model of the GDPR for designing privacy services. This model has been built by a content coding of key Articles from the GDPR, followed by incremental conceptual modelling and, finally, adopting the business-generic pattern of a contract. With executable protocol models of two privacy services identified from the GDPR we illustrate how to use our conceptual model. This work contributes to a uniform understanding of privacy by design as ``Privacy as a Service''. We discuss the semantic and organizational value of the proposed model.

AB - The General Data Protection Regulation (GDPR) requires transparency about the use of personal data. However, what does the transparency mean for an individual? This transparency is an ability of an individual to uniformly fulfill actions stated in the GDPR from checking his/her data usage to erasing data. An individual assumes that these actions are supported by services. Such a uniform aspect ``Privacy as a Service'' is proposed in this paper. The contribution of this work is a conceptual model of the GDPR for designing privacy services. This model has been built by a content coding of key Articles from the GDPR, followed by incremental conceptual modelling and, finally, adopting the business-generic pattern of a contract. With executable protocol models of two privacy services identified from the GDPR we illustrate how to use our conceptual model. This work contributes to a uniform understanding of privacy by design as ``Privacy as a Service''. We discuss the semantic and organizational value of the proposed model.

KW - Business Process Modelling

KW - Privacy Aspect

KW - Privacy as a Service (PraaS)

KW - Conceptual Model

KW - Executable Protocol Model

KW - General Data Protection Regulation

KW - General Data Protection Regulation (GDPR)

KW - Business process modelling

KW - Executable protocol model

KW - Conceptual model

KW - Privacy aspect

U2 - 10.1007/978-3-030-79976-2_10

DO - 10.1007/978-3-030-79976-2_10

M3 - Conference Article in proceeding

SN - 978-3-030-79975-5

VL - 422

T3 - Lecture Notes in Business Information Processing

SP - 170

EP - 189

BT - International Symposium on Business Modeling and Software Design

A2 - Shishkov, Boris

PB - Springer

CY - Cham

Y2 - 5 July 2021 through 7 July 2021

ER -

Roubtsova EE, Bosua R. Privacy as a Service (PraaS): A Conceptual Model of GDPR to Construct Privacy Services. In Shishkov B, editor, International Symposium on Business Modeling and Software Design: BMSD 2021: Business Modeling and Software Design. Vol. 422. Cham: Springer. 2021. p. 170-189. (Lecture Notes in Business Information Processing, Vol. 422). doi: 10.1007/978-3-030-79976-2_10