On the Systematic Design of Privacy Policies and Privacy Architectures

Abstract

In this paper, we address the problem of systematic privacy policy and privacy architecture design. We focus on two relevant aspects of privacy, namely, accountability and personal data control. We propose a systematic design approach of privacy policies adapting the current international data protection regulations, as well as an automated privacy architectures generation method from the corresponding policies. In particular, we propose a high-level policy language and an architecture language, as well as a systematic mapping procedure from policies to the corresponding architectures. We demonstrate the usability of our proposed approach on real-world systems such as Facebook.