Logo des Repositoriums
 

Towards Identifying GDPR-Critical Tasks in Textual Business Process Descriptions

dc.contributor.authorNake, Leonard
dc.contributor.authorKuehnel, Stephan
dc.contributor.authorBauer, Laura
dc.contributor.authorSackmann, Stefan
dc.contributor.editorKlein, Maike
dc.contributor.editorKrupka, Daniel
dc.contributor.editorWinter, Cornelia
dc.contributor.editorWohlgemuth, Volker
dc.date.accessioned2023-11-29T14:50:24Z
dc.date.available2023-11-29T14:50:24Z
dc.date.issued2023
dc.description.abstractComplying with data protection regulations is an essential duty for organizations since violating them would lead to monetary penalties from authorities. In Europe, the General Data Protection Regulation (GDPR) defines personal data and requirements for dealing with this type of data. Hence, organizations must identify business activities that deal with personal data to establish measures to fulfill these requirements. Especially for large organizations, a manual identification can be labor-intensive and error-prone. However, textual business process descriptions, such as work instructions, provide valuable insights into the data used in organizations. Therefore, we propose a first approach to automatically identify GDPR-critical tasks in textual business process descriptions. More specifically, we use a supervised machine learning algorithm to automatically identify whether a task deals with personal data or not. A first evaluation of our approach with a dataset of 37 process descriptions containing 509 activities demonstrates that our approach generates satisfactory results.en
dc.identifier.doi10.18420/inf2023_191
dc.identifier.isbn978-3-88579-731-9
dc.identifier.pissn1617-5468
dc.identifier.urihttps://dl.gi.de/handle/20.500.12116/43120
dc.language.isoen
dc.publisherGesellschaft für Informatik e.V.
dc.relation.ispartofINFORMATIK 2023 - Designing Futures: Zukünfte gestalten
dc.relation.ispartofseriesLecture Notes in Informatics (LNI) - Proceedings, Volume P-337
dc.subjectLegal Compliance
dc.subjectGeneral Data Protection Regulation (GDPR)
dc.subjectBusiness Process
dc.subjectTask Identification
dc.titleTowards Identifying GDPR-Critical Tasks in Textual Business Process Descriptionsen
dc.typeText/Conference Paper
gi.citation.endPage1908
gi.citation.publisherPlaceBonn
gi.citation.startPage1895
gi.conference.date26.-29. September 2023
gi.conference.locationBerlin
gi.conference.sessiontitleWirtschaft, Management Industrie - Workshop zum Stand, den Herausforderungen und Impulsen des Geschäftsprozessmanagements (ZuGPM 2023)

Dateien

Originalbündel
1 - 1 von 1
Vorschaubild nicht verfügbar
Name:
09_04_03_Nake.pdf
Größe:
337.64 KB
Format:
Adobe Portable Document Format