Skip to Main content Skip to Navigation
Conference papers

Modeling and Reasoning About Privacy-Consent Requirements

Abstract : Since the origin of the web, up to social networks, and now to the internet of things, the quantity of personal information produced and shared is uncontrollably increasing. Privacy regulations protect our right to have the control on our personal data. According to the recent General Data Protection Regulation (GDPR), entered into force in May 2018, infringements can be very costly to organizations, ranging from 10s to 100s of thousands of Euros. In order to ensure compliance with such regulations, privacy should be taken into consideration as early as at requirements time, so to avoid expensive after-the-fact fixes. Modeling frameworks have been proposed to support the analysis of requirements in complex socio-technical systems, however, even if a primary role is given to security, for privacy more work need to be done. In this paper, starting from the social concept of consent, we propose a modeling language and define the formal framework for the analysis of privacy-consent requirements. We report on our experience in the analysis of privacy in the medical domain, in the context of a research project with the Trentino health-care provider (APSS).
Complete list of metadata

Cited literature [36 references]  Display  Hide  Download
Contributor : Hal Ifip Connect in order to contact the contributor
Submitted on : Friday, June 14, 2019 - 1:47:56 PM
Last modification on : Tuesday, August 13, 2019 - 11:10:04 AM


Files produced by the author(s)


Distributed under a Creative Commons Attribution 4.0 International License



Marco Robol, Elda Paja, Mattia Salnitri, Paolo Giorgini. Modeling and Reasoning About Privacy-Consent Requirements. 11th IFIP Working Conference on The Practice of Enterprise Modeling (PoEM), Oct 2018, Vienna, Austria. pp.238-254, ⟨10.1007/978-3-030-02302-7_15⟩. ⟨hal-02156452⟩



Record views


Files downloads