Behavioral Types as a Semantic Foundation for the GDPR Notion of Purpose
In recent decades, various countries have enacted laws for protecting the privacy of individuals, one such example being the European General Data Protection Regulation (GDPR). The notion of purpose plays a crucial role in these regulations. However, in most situations purposes are expressed as vague textual descriptions, which often prevents (i) the user from fully understanding how their data is going to be processed, and (ii) a precise analysis that a system satisfies a given (GDPR-based) privacy policy. To address this shortcoming, various works have been concerned with providing semantic foundations to the notion of purpose. In this work, we pursue the same goal and we advocate the use of behavioral types as a means of capturing the notion of a purpose and, consequently, the use of type checking to formally verify that a system conforms to its privacy policy. We instantiate this proposal in the context of our previous work on the Privacy calculus.
Sun 13 JanDisplayed time zone: Belfast change
16:00 - 18:25 | Session 4BEAT at Sala VII Chair(s): Adrian Francalanza University of Malta, Jorge A. Pérez University of Groningen, The Netherlands | ||
16:00 50mTalk | Invited Talk: Session Types for Fault-Tolerant Distributed Algorithms BEAT Kirstin Peters TU Berlin | ||
16:50 20mTalk | Behavioral Types as a Semantic Foundation for the GDPR Notion of Purpose BEAT Evangelia Vanezi University of Cyprus, Dimitrios Kouzapas University of Cyprus, Anna Philippou University of Cyprus | ||
17:10 20mTalk | Relating Process Languages for Security and Communication Correctness BEAT Daniele Nantes-Sobrinho University of Brasília, Brazil, Jorge A. Pérez University of Groningen, The Netherlands | ||
17:30 10mBreak | Short break BEAT | ||
17:40 20mTalk | Towards Legally Compliant Governmental Case Work with Dynamic Condition Response Graphs BEAT Søren Debois IT University of Copenhagen, Thomas H. Hildebrandt , Hugo A. López IT University of Copenhagen, Denmark & DCR Solutions A/S Media Attached | ||
18:00 20mTalk | Hardware Interactions as Behavioural Types BEAT Carlos Mão de Ferro LASIGE, Faculty of Sciences, University of Lisbon, Francisco Martins LaSIGE, University of Lisbon, Tiago Cogumbreiro University of Massachusetts Boston File Attached | ||
18:20 5mDay closing | Closing BEAT António Ravara Department of Informatics, Faculty of Sciences and Technology, NOVA University of Lisbon and NOVA LINCS, Jorge A. Pérez University of Groningen, The Netherlands |