Scalable Policy-awarE Linked Data arChitecture for

prIvacy, trAnsparency and compLiance

H2020-ICT-2016-1BigDataPPP:privacy-preservingBigDatatechnologies(ICT-18-2016)call

Technological problem - General Data Protection Regulation supporting consent and transparency

2012

2013 2014 2015 2016 2017 2018

Draftoftheregulation7/22/2012

Revisionsinthedraft3/12/2013

DiscussionsintheEUCouncil5/19/2014

EUCouncilfinalisesthechapters8/6/2015

Triloguestarts6/24/2015

Trilogueagrees12/17/2015

Comesintoforce5/15/2018

Companies whose business models rely on personal data Data subjects who would like to declare, monitor and optionally revoke their (often not explicit) preferences on data sharing Regulators who can leverage technical means to check compliance with the GDPR

2012

2013 2014 2015 2016 2017 2018

Draftoftheregulation7/22/2012

Revisionsinthedraft3/12/2013

DiscussionsintheEUCouncil5/19/2014

EUCouncilfinalisesthechapters8/6/2015

Triloguestarts6/24/2015

Trilogueagrees12/17/2015

Comesintoforce5/15/2018

Technological problem - General Data Protection Regulation supporting consent and transparency

Data$&$Data$Driven$Services

Regulators

Companies/Service4Providers

Customers/Service4Users

Privacy4Preferences

LegalPolicies

Contracts/Terms4of4use

Technological problem - General Data Protection Regulation supporting consent and transparency

•  Policymanagementframeworkv Givesuserscontroloftheirpersonaldatav Representsaccess/usagepoliciesandlegislativerequirementsinamachinereadableformat

•  Transparencyandcomplianceframeworkv Providesinformationonhowdataisprocessedandwithwhomitisshared

v Allowsdatasubjectstotakecorrectiveaction•  Scalablepolicy-awareLinkedDataarchitecture

v BuildontopoftheBigDataEurope(BDE)platformscalabilityandelasticitymechanisms

v ExtendedBDEwithrobustpolicy,transparencyandcomplianceprotocols

Technological problem - General Data Protection Regulation supporting consent and transparency

Software components - Foundations

•  BigDataEuropescalabilityandelasticity•  PrimeLifepolicylanguages,accesscontrolpolicies,releasepoliciesanddatahandlingpolicies

Payload'Data

PermissionsSemantifica

tion

Policy'ingestion

Compressio

n'&'Encryption

Persisting'policies'with''data:

“Sticky”'Policies

Policy>aware'Q

uerrying:Data'Subsets/Filtering'Policies

HDT

SPECIAL

APIs

User'Control

Dashboards

Blockchain Opportunities & Challenges

• Authentication&AccessControl

• Protectionoftradesecrets

• Non-repudiation

•  Loggingincorrectdata• Notloggingthedataatall• Rectificationanderasure

•  Linkevents•  Interoperability•  Immutability

Technical/ScientificcontactSabrinaKirraneViennaUniversityofEconomicsandBusinesssabrina.kirrane@wu.ac.at

Scalable Policy-awarE Linked Data arChitecture for

prIvacy, trAnsparency and compLiance

AdminsitrativecontactPhilippeRohouERCIMW3Cphilippe.rohou@ercim.eu