Business Process Compliance Using Reference Models of Law

Abstract

Legal compliance is an important part of certifying the correct behaviour of a business process. To be compliant, organizations might hard-wire regulations into processes, limiting the discretion that workers have when choosing what activities should be executed in a case. Worse, hard-wired compliant processes are difficult to change when laws change, and this occurs very often. This paper proposes a model-driven approach to process compliance and combines a) reference models from laws, and b) business process models. Both reference and process models are expressed in a declarative process language, The Dynamic Condition Response (DCR) graphs. They are subject to testing and verification, allowing law practitioners to check consistency against the intent of the law. Compliance checking is a combination of alignments between events in laws and events in a process model. In this way, a reference model can be used to check different process variants. Moreover, changes in the reference model due to law changes do not necessarily invalidate existing processes, allowing their reuse and adaptation. We exemplify the framework via the alignment of laws and business rules and a real contract change management process, Finally, we show how compliance checking for declarative processes is decidable, and provide a polynomial time approximation that contrasts NP complexity algorithms used in compliance checking for imperative business processes. All-together, this paper presents technical and methodological steps that are being used by legal practitioners in municipal governments in their efforts towards digitalization of work practices in the public sector.

Pareto-Optimal Trace Generation from Declarative Process Models

“…On the other hand, e →%e ′ signifies that when event e occurs, event e ′ is excluded from the graph. Moreover, we will simplify our development by assuming l to be a bijective function [15], thus allowing us to compute its inverse.…”

DLT Compliance Reporting

“…As a result, banks now represent more than 30 pct of DLT use cases (Rauchs and Hileman 2018), further exacerbated by the evolution of research within machine-readable regulation (McLaughlin and Stover 2021) and business process compliance (López et al 2020). Yet, in spite of the extensive empirical and theoretical exploration of DLT in the financial settings few concrete results have materialized.…”

Chain of Events: Modular Process Models for the Law

“…We specifically consider the Danish Consolidation Act on Social Services [1], which regulates in minute detail the operations of Danish Municipalities. We formalise fragments of this law in the Timed Dynamic Condition Response graphs (DCR graphs) declarative modelling language [11,18,20], as they are already actively being used to to create executable models of law to for public digital case management systems [25].…”