Abstract Accountability Language

Abstract

Accountability becomes a necessary principle for future computer systems. This is specially critical for the cloud and Web applications that collect personal and sensitive data from end users. Accountability regards the responsibility and liability for the data handling performed by a computer system on behalf of an organization. In case of misconduct (e.g. security breaches, personal data leaks, etc.), accountability should imply remediation and redress actions. Contrary to data privacy and access control, which is already supported by several concrete languages, there is currently no language supporting accountability clauses representation. In this work, we provide an abstract language for accountability clauses representation with temporal logic semantics.

Accountability for data protection

“…In our current work we draw a general representation framework in [9], we propose an abstract language for accountability in [10] and we start defining design rules and verification means for accountability ( [17]). …”

“…This clause specifies that the file storage service (service) do not allow the user U to have a write access to the Data Subject's data (DS-Data) and expresses the associated audit and rectification parts. Further details on AAL's syntax and semantics can be found at [10].…”