Ryan, Paul, Pandit, Harshvardhan J. ORCID: 0000-0002-5068-3714 and Brennan, Rob ORCID: 0000-0001-8236-362X (2021) Building a data processing activities catalog: representing heterogeneous compliance-related information for GDPR using DCAT-AP and DPV. In: Semantics EU 2021, 6-9 Sept 2021, Amsterdam, Netherlands and Online. ISBN 978-1-64368-200-6
Abstract
This paper describes a new semantic metadata-based approach to describing and integrating diverse data processing activity descriptions gathered from heterogeneous organisational sources such as departments, divisions, and external processors. This information must be collated to assess and document GDPR legal compliance, such as creating a Register of Processing Activities (ROPA). Most GDPR knowledge graph research to date has focused on developing detailed compliance graphs. However, many organisations already have diverse data collection tools for documenting data processing activities, and this heterogeneity is likely to grow in the future. We provide a new approach extending the well-known DCAT-AP standard utilising the data privacy vocabulary (DPV) to express the concepts necessary to complete a ROPA. This approach enables data catalog implementations to merge and federate the metadata for a ROPA without requiring full alignment or merging all the underlying data sources. To show our approach's feasibility, we demonstrate a deployment use case and develop a prototype system based on diverse data processing records and a standard set of SPARQL queries for a Data Protection Officer preparing a ROPA to monitor compliance. Our catalog's key benefits are that it is a lightweight, metadata-level integration point with a low cost of compliance information integration, capable of representing processing activities from heterogeneous sources.
Metadata
Item Type: | Conference or Workshop Item (Paper) |
---|---|
Event Type: | Conference |
Refereed: | Yes |
Uncontrolled Keywords: | Legal Compliance; Data Governance |
Subjects: | Computer Science > Information storage and retrieval systems Social Sciences > Law |
DCU Faculties and Centres: | DCU Faculties and Schools > Faculty of Engineering and Computing > School of Computing Research Institutes and Centres > ADAPT |
Published in: | Further with Knowledge Graphs. Studies on the Semantic Web 53. IOS. ISBN 978-1-64368-200-6 |
Publisher: | IOS |
Official URL: | https://doi.org/10.3233/SSW210043 |
Copyright Information: | © 2021 The Authors. Open Access (CC-BY-4.0) |
Funders: | ADAPT - under the SFI Research Centres Programme (Grant 13/RC/2106_P2) and the European Regional Development Fund, Paul Ryan - Uniphar PLC, Harshvardhan J. Pandit - Irish Research Council Government of Ireland Postdoctoral Fellowship Grant#GOIPD/2020/790 and the European Union's Horizon 2020 research and innovation programme under NGI TRUST Grant#825618 for Project#3.40 Priv |
ID Code: | 26008 |
Deposited On: | 08 Sep 2021 08:36 by Vidatum Academic . Last Modified 16 Jan 2023 16:39 |
Documents
Full text available as:
Preview |
PDF
- Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader
257kB |
Downloads
Downloads
Downloads per month over past year
Archive Staff Only: edit this record