TY - GEN
T1 - Data-CASE
T2 - 27th International Conference on Extending Database Technology, EDBT 2024
AU - Chakraborty, Vishal
AU - Ann-Elvy, Stacy
AU - Mehrotra, Sharad
AU - Nawab, Faisal
AU - Sadoghi, Mohammad
AU - Sharma, Shantanu
AU - Venkatasubramanian, Nalini
AU - Saeed, Farhan
N1 - Publisher Copyright:
© 2024 Copyright held by the owner/author(s).
PY - 2023/8/18
Y1 - 2023/8/18
N2 - Data regulations, such as GDPR, are increasingly being adopted globally to protect against unsafe data management practices. Such regulations are, often ambiguous (with multiple valid interpretations) when it comes to defining the expected dynamic behavior of data processing systems. This paper argues that it is possible to represent regulations such as GDPR formally as invariants using a (small set of) data processing concepts that capture system behavior. When such concepts are grounded, i.e., they are provided with a single unambiguous interpretation, systems can achieve compliance by demonstrating that the system-actions they implement maintain the invariants (representing the regulations). To illustrate our vision, we propose Data-CASE, a simple yet powerful model that (a) captures key data processing concepts (b) a set of invariants that describe regulations in terms of these concepts. We further illustrate the concept of grounding using "deletion" as an example and highlight several ways in which end-users, companies, and software designers/engineers can use Data-CASE.
AB - Data regulations, such as GDPR, are increasingly being adopted globally to protect against unsafe data management practices. Such regulations are, often ambiguous (with multiple valid interpretations) when it comes to defining the expected dynamic behavior of data processing systems. This paper argues that it is possible to represent regulations such as GDPR formally as invariants using a (small set of) data processing concepts that capture system behavior. When such concepts are grounded, i.e., they are provided with a single unambiguous interpretation, systems can achieve compliance by demonstrating that the system-actions they implement maintain the invariants (representing the regulations). To illustrate our vision, we propose Data-CASE, a simple yet powerful model that (a) captures key data processing concepts (b) a set of invariants that describe regulations in terms of these concepts. We further illustrate the concept of grounding using "deletion" as an example and highlight several ways in which end-users, companies, and software designers/engineers can use Data-CASE.
UR - http://www.scopus.com/inward/record.url?scp=85190943049&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85190943049&partnerID=8YFLogxK
U2 - 10.48786/edbt.2024.10
DO - 10.48786/edbt.2024.10
M3 - Conference contribution
AN - SCOPUS:85190943049
T3 - Advances in Database Technology - EDBT
SP - 108
EP - 115
BT - Advances in Database Technology - EDBT
PB - OpenProceedings.org
Y2 - 25 March 2024 through 28 March 2024
ER -