Automating Analysis of Privacy Requirements

Against a backdrop of alarming privacy breaches at social media, banking, and government websites, the European Union will see the General Data Protection Regulation (GDPR) come into force as of May 25 2018. GDPR will drastically increase fines for data loss and breach, introduces new requirements to obtain individual consent for data use, and defines new responsibilities for data processors and controllers. Any company, including Canadian companies, that processes EU citizen data is within the purview of the GDPR.
Many Canadian ICT companies have realized that their activities are potentially covered by the regulation. However, fully understanding where and how the technical architecture of the companys information processing and storage may be non-compliant with GDPR is challenging for two reasons. TO BE CONT’D

Faculty Supervisor:

Neil Ernst

Student:

Ze Shi Li

Partner:

Tutela Technologies Ltd.

Discipline:

Computer science

Sector:

Information and communications technologies

University:

Program: