loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Said Daoudagh 1 ; 2 ; Eda Marchetti 1 ; Vincenzo Savarino 3 ; Roberto Di Bernardo 3 and Marco Alessi 3

Affiliations: 1 ISTI-CNR, Pisa, Italy ; 2 University of Pisa, Pisa, Italy ; 3 Engineering Ingegneria Informatica, Italy

Keyword(s): Access Control, Consent Management, GDPR, Privacy-by-Design.

Abstract: This paper presents a privacy-by-design solution based on Consent Manager (CM) and Access Control (AC) to aid organizations to comply with the GDPR. The idea is to start from the GDPR’s text, transform it into a machine-readable format through a given CM, and then convert the obtained outcome to a set of enforceable Access Control Policies (ACPs). As a result, we have defined a layered architecture that makes any given system privacy-aware, i.e., systems that are compliant by-design with the GDPR. Furthermore, we have provided a proof-of-concept by integrating a Consent Manager coming from an industrial context and an AC Manager coming from academia.

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 34.205.246.61

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Daoudagh, S.; Marchetti, E.; Savarino, V.; Di Bernardo, R. and Alessi, M. (2021). How to Improve the GDPR Compliance through Consent Management and Access Control. In Proceedings of the 7th International Conference on Information Systems Security and Privacy - ICISSP; ISBN 978-989-758-491-6; ISSN 2184-4356, SciTePress, pages 534-541. DOI: 10.5220/0010260205340541

@conference{icissp21,
author={Said Daoudagh. and Eda Marchetti. and Vincenzo Savarino. and Roberto {Di Bernardo}. and Marco Alessi.},
title={How to Improve the GDPR Compliance through Consent Management and Access Control},
booktitle={Proceedings of the 7th International Conference on Information Systems Security and Privacy - ICISSP},
year={2021},
pages={534-541},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0010260205340541},
isbn={978-989-758-491-6},
issn={2184-4356},
}

TY - CONF

JO - Proceedings of the 7th International Conference on Information Systems Security and Privacy - ICISSP
TI - How to Improve the GDPR Compliance through Consent Management and Access Control
SN - 978-989-758-491-6
IS - 2184-4356
AU - Daoudagh, S.
AU - Marchetti, E.
AU - Savarino, V.
AU - Di Bernardo, R.
AU - Alessi, M.
PY - 2021
SP - 534
EP - 541
DO - 10.5220/0010260205340541
PB - SciTePress