The General Data Protection Regulation (GDPR) requires transparency about the use of personal dat... more The General Data Protection Regulation (GDPR) requires transparency about the use of personal data. However, what does the transparency mean for an individual? This transparency is an ability of an individual to uniformly fulfill actions stated in the GDPR from checking his/her data usage to erasing data. An individual assumes that these actions are supported by services. Such a uniform aspect ``Privacy as a Service'' is proposed in this paper. The contribution of this work is a conceptual model of the GDPR for designing privacy services. This model has been built by a content coding of key Articles from the GDPR, followed by incremental conceptual modelling and, finally, adopting the business-generic pattern of a contract. With executable protocol models of two privacy services identified from the GDPR we illustrate how to use our conceptual model. This work contributes to a uniform understanding of privacy by design as ``Privacy as a Service''. We discuss the semantic and organizational value of the proposed model. \keywords{Business Process Modelling, Privacy Aspect, Privacy as a Service (PraaS), Conceptual Model, Executable Protocol Model, General Data Protection Regulation (GDPR)}
The General Data Protection Regulation (GDPR) requires transparency about the use of personal dat... more The General Data Protection Regulation (GDPR) requires transparency about the use of personal data. However, what does the transparency mean for an individual? This transparency is an ability of an individual to uniformly fulfill actions stated in the GDPR from checking his/her data usage to erasing data. An individual assumes that these actions are supported by services. Such a uniform aspect ``Privacy as a Service'' is proposed in this paper. The contribution of this work is a conceptual model of the GDPR for designing privacy services. This model has been built by a content coding of key Articles from the GDPR, followed by incremental conceptual modelling and, finally, adopting the business-generic pattern of a contract. With executable protocol models of two privacy services identified from the GDPR we illustrate how to use our conceptual model. This work contributes to a uniform understanding of privacy by design as ``Privacy as a Service''. We discuss the semantic and organizational value of the proposed model. \keywords{Business Process Modelling, Privacy Aspect, Privacy as a Service (PraaS), Conceptual Model, Executable Protocol Model, General Data Protection Regulation (GDPR)}
This classroom-texted textbook/reference presents a set of useful modeling techniques, describing... more This classroom-texted textbook/reference presents a set of useful modeling techniques, describing how these can be combined into a powerful framework for the analysis and design of business systems. These techniques follow an interactive modeling and simulation (IMS) approach, enabling the modeling and simulation of separate parts of the system at different levels of abstraction, and the composition of these parts in a flexible crosscutting manner that preserves the behavior of the individual parts. Topics and features: presents a detailed introduction to the foundations of IMS for business system design, covering protocol modeling and goal modeling semantics; describes the practical application of IMS for business system design, illustrated by a selection of useful case studies; highlights the advantages of this approach to IMS for business system design, with a focus on performance management, motivation modeling, and communication; includes review questions and exercises at the end of each chapter.
Uploads
Papers by Ella Roubtsova
\keywords{Business Process Modelling, Privacy Aspect, Privacy as a Service (PraaS), Conceptual Model, Executable Protocol Model, General Data Protection Regulation (GDPR)}
\keywords{Business Process Modelling, Privacy Aspect, Privacy as a Service (PraaS), Conceptual Model, Executable Protocol Model, General Data Protection Regulation (GDPR)}