Data-CASE: Grounding Data Regulations for Compliant Data Processing Systems

Vishal Chakraborty, Stacy Ann-Elvy, Sharad Mehrotra, Faisal Nawab, Mohammad Sadoghi, Shantanu Sharma, Nalini Venkatasubramanian, Farhan Saeed

Research output: Chapter in Book/Report/Conference proceedingConference contribution


Data regulations, such as GDPR, are increasingly being adopted globally to protect against unsafe data management practices. Such regulations are, often ambiguous (with multiple valid interpretations) when it comes to defining the expected dynamic behavior of data processing systems. This paper argues that it is possible to represent regulations such as GDPR formally as invariants using a (small set of) data processing concepts that capture system behavior. When such concepts are grounded, i.e., they are provided with a single unambiguous interpretation, systems can achieve compliance by demonstrating that the system-actions they implement maintain the invariants (representing the regulations). To illustrate our vision, we propose Data-CASE, a simple yet powerful model that (a) captures key data processing concepts (b) a set of invariants that describe regulations in terms of these concepts. We further illustrate the concept of grounding using "deletion" as an example and highlight several ways in which end-users, companies, and software designers/engineers can use Data-CASE.

Original languageEnglish (US)
Title of host publicationAdvances in Database Technology - EDBT
Number of pages8
ISBN (Electronic)9783893180912, 9783893180943, 9783893180950
StatePublished - Aug 18 2023
Event27th International Conference on Extending Database Technology, EDBT 2024 - Paestum, Italy
Duration: Mar 25 2024Mar 28 2024

Publication series

NameAdvances in Database Technology - EDBT
ISSN (Electronic)2367-2005


Conference27th International Conference on Extending Database Technology, EDBT 2024

All Science Journal Classification (ASJC) codes

  • Information Systems
  • Software
  • Computer Science Applications


Dive into the research topics of 'Data-CASE: Grounding Data Regulations for Compliant Data Processing Systems'. Together they form a unique fingerprint.

Cite this