Data-CASE: Grounding Data Regulations for Compliant Data Processing Systems

Vishal Chakraborty, Stacy Ann-Elvy, Sharad Mehrotra, Faisal Nawab, Mohammad Sadoghi, Shantanu Sharma, Nalini Venkatasubramanian, Farhan Saeed

Research output: Chapter in Book/Report/Conference proceedingConference contribution

1 Scopus citations

Abstract

Data regulations, such as GDPR, are increasingly being adopted globally to protect against unsafe data management practices. Such regulations are, often ambiguous (with multiple valid interpretations) when it comes to defining the expected dynamic behavior of data processing systems. This paper argues that it is possible to represent regulations such as GDPR formally as invariants using a (small set of) data processing concepts that capture system behavior. When such concepts are grounded, i.e., they are provided with a single unambiguous interpretation, systems can achieve compliance by demonstrating that the system-actions they implement maintain the invariants (representing the regulations). To illustrate our vision, we propose Data-CASE, a simple yet powerful model that (a) captures key data processing concepts (b) a set of invariants that describe regulations in terms of these concepts. We further illustrate the concept of grounding using "deletion" as an example and highlight several ways in which end-users, companies, and software designers/engineers can use Data-CASE.

Original languageEnglish (US)
Title of host publicationAdvances in Database Technology - EDBT
PublisherOpenProceedings.org
Pages108-115
Number of pages8
Edition1
ISBN (Electronic)9783893180912, 9783893180943, 9783893180950
DOIs
StatePublished - Aug 18 2023
Event27th International Conference on Extending Database Technology, EDBT 2024 - Paestum, Italy
Duration: Mar 25 2024Mar 28 2024

Publication series

NameAdvances in Database Technology - EDBT
Number1
Volume27
ISSN (Electronic)2367-2005

Conference

Conference27th International Conference on Extending Database Technology, EDBT 2024
Country/TerritoryItaly
CityPaestum
Period3/25/243/28/24

All Science Journal Classification (ASJC) codes

  • Information Systems
  • Software
  • Computer Science Applications

Fingerprint

Dive into the research topics of 'Data-CASE: Grounding Data Regulations for Compliant Data Processing Systems'. Together they form a unique fingerprint.

Cite this