Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.
Queryable Provenance Metadata
For GDPR Compliance
Harshvardhan J. Pandit, Declan O’Sullivan, Dave Lewis
ADAPT Centre - Tri...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
www.adaptcentre.ie
“Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018
Presented by: Harshvardhan J. Pan...
Upcoming SlideShare
Loading in …5
×

Queryable Provenance Metadata For GDPR Compliance

15 views

Published on

Conference paper
Harshvardhan J. Pandit, Declan O'Sullivan, Dave Lewis.
SEMANTiCS 2018 – 14th International Conference on Semantic Systems, Vienna, Austria. 2018

Published in: Technology
  • Be the first to comment

  • Be the first to like this

Queryable Provenance Metadata For GDPR Compliance

  1. 1. Queryable Provenance Metadata For GDPR Compliance Harshvardhan J. Pandit, Declan O’Sullivan, Dave Lewis ADAPT Centre - Trinity College Dublin - Dublin, Ireland https://openscience.adaptcentre.ie/ pandith@tcd.ie | @coolharsh55 The ADAPT Centre is funded under the SFI Research Centres Programme (Grant 13/RC/2106) and is co-funded under the European Regional Development Fund. that'sme all our GDPR related work I twitter EEekoet.mgemail
  2. 2. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Overview GDPR what why who where when guidance byregulatory autuonton.es GDPR Readiness checklist by Ireland's DPC semantification of queries Implementation Demonstration Related work I t I I
  3. 3. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 GDPR General Data Protection Regulation ● Enforced from 25th May 2018 ● Fines: 4% global turnover or 20 million whichever is higher ● Obligations and rights based on use of consent and legal basis ● Necessary documentation ● Impact Assessments ● Data Privacy Officer ● Rights for Data Subjects ● Distinction between Controllers and Processors ● Sharing with Named Third Parties ● Privacy Seals
  4. 4. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 GDPR Readiness Checklist http://gdprandyou.ie/ Structure & Layout 1. 13 pages 2. 63 questions 3. 9 sections EffortbyIreland's DataProtection Commissioner mi
  5. 5. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 GDPR Readiness Checklist (pg.10) categoryofquestions m m BINARY 1 more information is a V is so specifics details f
  6. 6. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Analysis Consider each question a ‘query’ Three categories of queries: 1. Demonstrative 2. Evaluative 3. Assistive offroad murmur demonstrate a process or an activity evaluate a moana ideal cannot demonstrate or evaluate thereforeretrieve all relevant yeahinformation thatcanassist5h demonstrating or evaluation
  7. 7. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Analysis - notes https://w3id.org/GDPRep/checklist-demo/notes Fiber Article eq datainvolved gO l 0 Fibered NOT IMPLEMENTED can this be assessed on the model of the system or it requires instances?
  8. 8. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 SPARQL queries ● 33 SPARQL queries ● Ontologies ○ ○ https://w3id.org/GDPRep/checklist-demo/sparql-queries nearlyarbitrarynumber based of questionsinchecklist if µ provenanceontology forGDPRextends PRO o PPlan 7 oGDPR as linkeddata resource Vocabulary of terms concepts non existent
  9. 9. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Implementation ● proof-of-concept demonstration ● example use-case: online shopping service ● GDPRov & GDPRtEXT ontologies ● Protege (environment) → FACT++ (reasoner) proofof conceptthatcompliance questionsCANbeexpressed µ as SPARKqueries muumununurnum define instances tr t G easy to use checkscommonhumanerrors visualtool integrateswithreasoners can executeSPAREL
  10. 10. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Demonstration ● online demo for querying of ‘readiness checklist’ information ● aims ○ ○ ● same layout and format as original document ● queries SPARQL endpoint on page load (browser) https://w3id.org/GDPRep/checklist-demo originaldocument was a spreadsheet 4 executes SPAR L on page refresh
  11. 11. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Query G2: Personal Data in Data Category categorydescription query 7 ID SPARGL µ data category typeofdata
  12. 12. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Invalid/Non-existant/Empty/Null Queries not all questionsfrom the GDPR Readiness checklist could be interpreted into SPARK queries can bechecked with additionaldata total questions 63 that'salot SPARQLqueries 33 thishappened because not hot implemented Dog 57554120230 all queries were quantitativeIRquestions
  13. 13. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Queries that provide information cannot be evaluated SPAROL query to retrieve relevant information is used in check givenconsent to evaluate whetherthis is valid
  14. 14. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Assumptions and Limitations 1. Does not assess compliance 2. Depends on consent 3. Interpretation of results is not clear not inscope nottheaim ofthe wook requiresmore data as in themodellingofconsent and howtointerpret it I pre GDPR notion ofconsent I was a confusioncarnival results are just tabular data what todo with it Doingthem now E 4 SPAR8L ASKQUERIES b checkoutmy POSTER whyhaven't youdone them
  15. 15. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Proof of Concept! started out as an evaluation of how to express these compliancerelated questions as queries over semantic metadata SUCCES.SItmwTI
  16. 16. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Technologies g VirtuosoOpensource SPARG I colour highlight query 8display browser wishtist privacyconscious YASGOI choice
  17. 17. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Keep your friends close, your ‘peers’ closer... SPECIAL PROJECT semanticweb based complianceframework OWLreasoningtoevaluate compliance webbaseddashboard Pronto Ontology OWL modellingofcompliance relatedconceptsandteams describe data metadata withrelationtocompliance
  18. 18. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Join DPVCG Data Privacy Vocabularies and Controls Community Group https://www.w3.org/community/dpvcg/ tr t t
  19. 19. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 Future Work 1. check GDPR compliance using SHACL 2. build a ‘knowledge graph’ with compliance related information 3. create a ‘unit testing’ approach towards compliance POSTER hmmmm vision papertobepresented at ISWCworkshop Kh test one thing but test It well lime internal external harsh'sPhDviva
  20. 20. www.adaptcentre.ie “Queryable Provenance Metadata for GDPR Compliance” at SEMANTiCS 2018 Presented by: Harshvardhan J. Pandit http://openscience.adaptcentre.ie/ | pandith@tcd.ie | @coolharsh55 I'm a SPAROL endpoint Query me Howextensible 22.89 78974969 Hidingisthisapproach end How doatyfmEEEEeamercE.h.oe.eeiiE define the qif.EE Futadguefriestor www.mfpp.EE yjof Justpropel THESYSTEMASRDF OKAYsemaatiewds rods Iis the demo IVEFITABERATE onma.tk'T YES Ja

×