The Role of Vocabulary Mediation to Discover and Represent Relevant Information in Privacy Policies

Leone, Valentina; Di, Luigi

doi:10.3233/faia200851

Cited by 6 publications

(4 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Year Mention Use Extension Contributed Domain [11] 2020 X Health [53] 2020 X Media [7,54,81] 2020 X [12,47,51,71] 2020 X [10] 2020 X Health [15,60,74] 2020 X X [17,55,29] 2021 X Health [37,6,76,62,39] 2021 X [72,20,16,73,52] 2021 X [34] 2021 X Smart products [42] 2021 X X [44,46,43,75,59,66,22] 2022 X [21] 2022 X X [69,70,57,23] 2022 X X [5] 2022 X Health [25,14,13,32,50] 2022 X [4] 2022 X IoT [40] 2022 X Health [58,…”

Section: Workmentioning

confidence: 99%

“…In terms of applications to specific use cases, there is a body of work focusing on providing tools for auditing and GDPR compliance evaluation [71,72,79], on data minimisation [34], as well as on the documentation and annotation of privacy policies [51,52,47,38] and privacy preferences [4]. Moreover, ML models were trained with DPV's taxonomies to identify personal data processing activities in code repositories [80,41] and textual datasets [32,33].…”

Section: Workmentioning

confidence: 99%

See 1 more Smart Citation

Data Privacy Vocabulary (DPV) - Version 2

Pandit,

Esteves,

Krog

et al. 2024

Preprint

View full text Add to dashboard Cite

The Data Privacy Vocabulary (DPV), developed by the W3C Data Privacy Vocabularies and Controls Community Group (DPVCG), enables the creation of machine-readable, interoperable, and standards-based representations for describing the processing of personal data. The group has also published extensions to the DPV to describe specific applications to support legislative requirements such as the EU's GDPR. The DPV fills a crucial niche in the state of the art by providing a vocabulary that can be embedded and used alongside other existing standards such as W3C ODRL, and which can be customised and extended for adapting to specifics of use-cases or domains. This article describes the version 2 iteration of the DPV in terms of its contents, methodology, current adoptions and uses, and future potential. It also describes the relevance and role of DPV in acting as a common vocabulary to support various regulatory (e.g. EU's DGA and AI Act) and community initiatives (e.g. Solid) emerging across the globe.

show abstract

Section: Workmentioning

confidence: 99%

Section: Workmentioning

confidence: 99%

Data Privacy Vocabulary (DPV) - Version 2

Pandit,

Esteves,

Krog

et al. 2024

Preprint

View full text Add to dashboard Cite

show abstract

“…This vocabulary is utilised in many use cases, and many projects have declared their interest in its adoption [9,44,45]. The DPV organises its concepts in a lightweight taxonomic structure [46] using RDFS, the W3C resource description framework (RDF) schema language.…”

Section: Csm-ropa Overviewmentioning

confidence: 99%

Support for Enhanced GDPR Accountability with the Common Semantic Model for ROPA (CSM-ROPA)

Ryan

Brennan

2022

SN COMPUT. SCI.

View full text Add to dashboard Cite

The creation and maintenance of Registers of Processing Activities (ROPA) are essential to meeting the General Data Protection Regulation (GDPR) and thus to demonstrate compliance based on the GDPR concept of accountability. To establish its effectiveness in meeting this obligation, we evaluate an ROPA semantic model, the Common Semantic Model–ROPA (CSM–ROPA). Semantic models and tools represent one solution to the compliance challenges faced by organisations: the heterogeneity of relevant data sources, and the lack of tool interoperability and agreed common standards. By surveying current practice and the literature we identify the requirements for GDPR accountability tools: digital exchange of data, automated accountability verification and privacy-aware data governance. A case study was conducted to analyse the expressivity and effectiveness of CSM–ROPA when used as an interoperable, machine-readable mediation layer to express the concepts in a comprehensive regulator-provided accountability framework used for GDPR compliance. We demonstrate that CSM–ROPA can express 98% of ROPA accountability terms and fully express nine of the ten European regulators' ROPA templates. We identify three terms for addition to CSM–ROPA, and we identify areas where CSM–ROPA relies on partial matches that indicate model limitations. These improvements to CSM–ROPA will provide comprehensive coverage of the regulator-supplied model. We show that tools based on CSM–ROPA can fully meet the requirements of compliance best practice when compared with either manual accountability approaches or a leading privacy software solution.

show abstract

“…It also highlights the need for automated compliance checking. In [14], Leoni and Di Caro use the DPV to look at natural language processing of privacy policies.…”

Section: Related Workmentioning

confidence: 99%

A GDPR International Transfer Compliance Framework Based on an Extended Data Privacy Vocabulary (DPV)

Hickey

Brennan

2021

Frontiers in Artificial Intelligence and Applications

View full text Add to dashboard Cite

This paper describes a tool using an extended Data Privacy Vocabulary (the DPV) to audit and monitor GDPR compliance of international transfers of personal data. New terms were identified which have been proposed as extensions to the DPV W3C Working Group. A prototype software tool was built based on the model plus a set of validation rules, and synthetic use-cases created to test the capabilities of the model and tool (together a compliance framework). This framework was created because the rules around international transfer compliance are complex and changing, there is an absence of a common approach to ensuring compliance, few tools exist to assist, and those that do lack interoperability. Evaluation results demonstrate that the proposed model improves compliance identification and standardisation. The tool received positive feedback from the data protection practitioners who participated in the evaluation, and an initial version of is now in use in one financial services organisation. While currently the tool only addresses international transfers, in theory the framework can be extended through further work to the broader area of compliance of other aspects of the GPDR.

show abstract

The Role of Vocabulary Mediation to Discover and Represent Relevant Information in Privacy Policies

Cited by 6 publications

References 11 publications

Data Privacy Vocabulary (DPV) - Version 2

Data Privacy Vocabulary (DPV) - Version 2

Support for Enhanced GDPR Accountability with the Common Semantic Model for ROPA (CSM-ROPA)

A GDPR International Transfer Compliance Framework Based on an Extended Data Privacy Vocabulary (DPV)

Contact Info

Product

Resources

About