Descripción del proyecto
Cómo lograr el cumplimiento del Reglamento General de Protección de Datos mientras se impulsa la innovación
Las organizaciones se enfrentan hoy a numerosos retos para garantizar el cumplimiento del Reglamento General de Protección de Datos (RGPD). El equipo del proyecto BPR4GDPR, financiado con fondos europeos, ofrece un marco versátil que se adapta a diversas escalas y ámbitos de aplicación y proporciona un conjunto de herramientas que se corresponden con los requisitos del RGPD. El equipo del proyecto, basado en la nube y que utiliza cimientos semánticos, emplea modelos de procesos expresados a través de un metamodelo de cumplimiento, que recoge disposiciones avanzadas sobre privacidad. Un potente marco normativo garantiza la verificación y transformación automáticas de los modelos, haciendo que sean inherentemente conscientes de la privacidad. Gracias a la minería de procesos, se verifica el cumplimiento y se mejoran los modelos progresivamente. En BPR4GDPR, donde se aborda de forma exhaustiva los retos del RGPD, se ofrecen herramientas para apoyar el cumplimiento del RGPD, la elaboración de informes, el tratamiento de datos y la mejora de la privacidad.
Objetivo
The goal of BPR4GDPR is to provide a holistic framework able to support end-to-end GDPR-compliant intra- and inter-organisational ICT-enabled processes at various scales, while also being generic enough, fulfilling operational requirements covering diverse application domains. To this end, proposed solutions will have a strong semantic foundation and cover the full process lifecycle addressing major challenges and priorities posed by the regulation, including requirements interpretation, broad territorial scope, accountability, security means enforcement, data subject’s rights and consent, unified data view and processing actions inventory, privacy by design, etc.
The starting point will be process models, either automatically discovered through organisation logs or manually specified, formally expressed through a Compliance Metamodel, a comprehensive process modelling technology able to capture advanced privacy provisions. Thereupon, a highly expressive policy framework will guide the automatic verification of these models regarding GDPR requirements, and their subsequent transformation, so that they are rendered inherently privacy-aware before being deployed for execution. Subsequently, the consistent execution of GDPR-compliant processes will be ensured by a comprehensive set of tools able to support all diverging requirements that may arise from GDPR, related to data handling, data subjects’ involvement, various PETs, etc., so that even organisations with currently no such infrastructure in place can readily have such mechanisms. Finally, process mining will be extensively used for the ex post analysis of processes, in order to ensure that specified policies are indeed enforced. However, apart from verifying compliance, such techniques will offer the added value of automatically improving process models over time towards optimised fulfillment of both legal and business requirements.
Deployed on the Cloud, BPR4GDPR will provide for Compliance-as-a-Service (CaaS)
Ámbito científico
- natural sciencescomputer and information sciencesknowledge engineeringontology
- natural sciencescomputer and information sciencescomputer securitydata protection
- social scienceseconomics and businessbusiness and managementbusiness models
- social scienceseconomics and businesseconomicssustainable economy
- social scienceslaw
Programa(s)
Convocatoria de propuestas
Consulte otros proyectos de esta convocatoriaConvocatoria de subcontratación
H2020-DS-SC7-2017
Régimen de financiación
IA - Innovation actionCoordinador
76131 Karlsruhe
Alemania