Smart Contracts and Smart Disclosure: Coding a GDPR Compliance Framework

Compagnucci, Marcelo Corrales; Jurčys, Paulius; Kousiouris, George

doi:10.2139/ssrn.3121658

Cited by 12 publications

(11 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the language of trust, Blockchain verifies integrity. Blockchain has been proposed as a solution to a number of cloud-related contract issues including verifiability of performance (Dong et al 2017), GDPR compliance (Corrales et al 2019), and digital rights management (Finck and Moscon 2019). Despite the benefits of smart contracts, significant questions remain unanswered regarding their enforceability (Savelyev 2017).…”

Section: Future Of Cloud Contractsmentioning

confidence: 99%

Dear Cloud, I Think We Have Trust Issues: Cloud Computing Contracts and Trust

Lynn¹

2020

Palgrave Studies in Digital Business &Amp; Enabling Technologies

View full text Add to dashboard Cite

Cloud computing is the dominant paradigm in modern computing, used by billions of Internet users worldwide. It is a market dominated by a small number of hyperscale cloud service providers. The overwhelming majority of cloud customers agree to standard form click-wrap contracts, with no opportunity to negotiate specific terms and conditions. Few cloud customers read the contracts that they agree to. It is clear that contracts in cloud computing are primarily an instrument of control benefiting one side, the cloud service provider. This chapter provides an introduction to the relationship between psychological trust, contracts and contract law. It also offers an overview of the key contract law issues that arise in cloud computing and introduces some emerging paradigms in cloud computing and contracts.

show abstract

Section: Future Of Cloud Contractsmentioning

confidence: 99%

Dear Cloud, I Think We Have Trust Issues: Cloud Computing Contracts and Trust

Lynn¹

2020

Palgrave Studies in Digital Business &Amp; Enabling Technologies

View full text Add to dashboard Cite

show abstract

“…Future work will focus on translating other available GDPR rules, particularly those legislated for cloud [10], into smart contracts. Particularly, we will investigate how the GDPR rule "the right to be forgotten" can be supported by our proposed technique, since the rule currently has a conflict with the immutability feature of a Blockchain network.…”

Section: Resultsmentioning

confidence: 99%

“…The idea of verifying GDPR compliance in an automated way comes from an approach presented in [10], where the authors identified a number of questions related to legal concerns around GDPR. These questions relate to data protection and privacy measures that should be supported by cloud services.…”

Section: Translating Gdpr Rules Into Pseudo-codementioning

confidence: 99%

“…Legal question L4: checks for Binding Corporate Rules (BCR) certification of non-European data receivers. The BCR is a code of conduct adopted by a community of multinational companies that want to move user data internationally across various jurisdictions [10].…”

Section: Translating Gdpr Rules Into Pseudo-codementioning

confidence: 99%

“…To verify provider compliance with GDPR rules as identified above, pseudo-code was created to support automated verification [10]. The pseudo-code first categorizes a legal question into the most relevant GDPR rule(s), followed by a ("Yes" or "No") confirmation for each question.…”

Section: Translating Gdpr Rules Into Pseudo-codementioning

confidence: 99%

See 2 more Smart Citations

Tracking GDPR Compliance in Cloud-Based Service Delivery

Barati

Rana

2022

IEEE Trans. Serv. Comput.

View full text Add to dashboard Cite

The European General Data Protection Regulation (GDPR) has had a far-reaching impact on data privacy and compliance for cloud providers. GDPR influences access to, storage, processing and transmission of personal data, requiring these operations to be verified by a cloud user through explicit consent prior to execution. GDPR rules implemented for such operations can be ambiguous and often open to interpretation, making manual verification a time consuming and error prone process for cloud providers. An encoding of GDPR rules is described, with each operation carried out using these rules recorded into a Blockchain for auditing purposes. Specifically, this work shows how some GDPR rules can appear as opcodes in smart contracts to verify the operations of providers on user data in a transparent and automatic way. An abstract model is designed to demonstrate how cloud providers can access and deploy such smart contracts through a Blockchain-based virtual machine. A case study is used to demonstrate how this approach can be used in practice. The case study uses a collection of design patterns and smart contracts to verify provider operations, including read, write, execution and transfer on user data. Validation is undertaken by deploying the smart contracts in a Blockchain test network to investigate the execution costs of GDPR compliance checking.

show abstract

Privacy‐aware cloud ecosystems: Architecture and performance

Barati

Rana

2020

Concurrency and Computation

View full text Add to dashboard Cite

With an increasing number of cloud providers offering services made use of by both individual users and other providers, there is a realization that service provision now involves an "ecosystem" of providers. Some providers may be directly visible to a user, while others may be contributors to composite services and not directly known to the user-as only the provider offering the composite service is visible. Such services may include: domain specific services (eg, simulation), advertising services, or profiling/analytics services. Understanding the impact on data privacy of a user for such a composite service remains a challenge, and providing transparency (and obtaining user consent for data use) remains a key requirement of the European General Data Protection Regulation (GDPR). An architecture that makes use of blockchains and smart contracts is proposed that addresses this requirement. An implementation of the architecture is used to demonstrate how access control can be managed and audited. The scalability and cost of undertaking access control, as the number of actors (both service providers and "voters") increases, is also described. The proposed approach can be used to support service aggregation across both private and public clouds. K E Y W O R D Sblockchain, cloud architecture, data privacy, general data protection regulation, smart contracts INTRODUCTIONWith increasing number of on-line services, often hosted over cloud infrastructure, there is a realization that such services can involve an interlinked set of cloud providers. To access a service, users primarily interact through a Web interface, and are (often) unaware of the larger collection of services that are made available behind the Web interface, and deployed across a distributed infrastructure. Users entrust their data without realizing that the providers may share their data with back-end services such as cloud hosted analytics and advertisers-the growth in Internet-connected devices adds further complexity to this challenge. In order to address this, the general data protection regulation (GDPR) is implemented to impose obligations on providers to ensure that consent is obtained from users before their data are made use of, thereby enabling nonexpert users to make informed decisions about their privacy. 1The key elements introduced in GDPR are a data subject, a controller or joint controller, and a processor. 2 The data subject is the data owner and the controller a person/organization specifying aims of processing a user's personal data. The notion of joint controller is introduced where two or more controllers jointly specify the purpose of data processing. Finally, the processor is responsible for processing personal data on behalfThis is an open access article under the terms of the Creative Commons Attribution License, which permits use, distribution and reproduction in any medium, provided the original work is properly cited.

show abstract

Smart Contracts and Smart Disclosure: Coding a GDPR Compliance Framework

Cited by 12 publications

References 0 publications

Dear Cloud, I Think We Have Trust Issues: Cloud Computing Contracts and Trust

Dear Cloud, I Think We Have Trust Issues: Cloud Computing Contracts and Trust

Tracking GDPR Compliance in Cloud-Based Service Delivery

Privacy‐aware cloud ecosystems: Architecture and performance

Contact Info

Product

Resources

About