Abstract
The evolution of information and communications technology, and particularly the Internet of Things as the basis for the setting up of the Smart Cities, are provoking a worldwide revolution in terms of data protection management. A clear example of this shift can be seen in the European Union which is adapting the regulation to meet current society requirements, although similar initiatives are being undertaken by the rest of continents. However, existing data regulation and management solutions offer isolated tools that cover particular rights and laws and are actually not conceived to be integrated with libraries widely used by organizations to implement data management processes. To cover the previous gap, we propose a novel platform which is geared toward the protection of citizen’s sensitive data according to their data protection preferences and the rights provided by current data protection regulation laws. Finally, we present a case study to demonstrate how our platform manages data anonymization, protecting a private citizen’s right.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsReferences
Wachter, S.: Normative challenges of identification in the Internet of Things: privacy, profiling, discrimination, and the GDPR. Comput. Law Secur. Rev. 34(3), 436–449 (2018)
Government of India: DataSmart Cities: Empowering Cities through Data. Smart Cities Mission-Ministry of Housing and Urban Affairs, December 2018. https://smartnet.niua.org/data-smart-cities
Official Journal of the European Union: General Data Protection Regulation (GDPR). EU Regulation 2016/679, April 2016. http://data.europa.eu/eli/reg/2016/679/oj
The European H2020-ICT MUSA Project: Multi-cloud Secure Applications (2015–2017). http://musa-project.eu
Eclipse Foundation Inc.: OpenCert, June 2019. https://www.polarsys.org/projects/polarsys.opencert
Mai, P.X., et al.: Modeling security and privacy requirements: a use case-driven approach. Inf. Softw. Technol. 100, 165–182 (2018)
Lucic, D., Boban, M., Mileta, D.: An impact of general data protection regulation on a smart city concept. In: 41st International Convention on Information and Communication Technology, Electronics and Microelectronics, pp. 390–394, May 2018
Determann, L., Gupta, C.: Indian Personal Data Protection Act, 2018: Draft Bill and Its History, Compared to EU GDPR and California Privacy Law. UC Berkeley Public Law Research Paper, pp. 1–27 (2019)
Brazilian Federal Senate: General Data Protection Law No. 13,709/2018, August 2018. http://portaldaprivacidade.com.br/wp-content/uploads/2018/08/LGPD-english-version.pdf
Greenleaf, G.: China’s Personal Information Standard: The Long March to a Privacy Law (2018). http://www.dgcs-research.net/a/Opinion/2018/0306/122.html
China’s National Information Security Standardization Technical Committee: Personal Information Security Specification (drafted version), February 2019. https://www.tc260.org.cn/upload/2019-02-01/1549013548750042566.pdf
International Association of Privacy Professionals (IAPP): 2018 Privacy Tech Vendor Report vol 2.4e (2018). https://iapp.org/media/pdf/resource_center/2018-Privacy-Tech-Vendor-Report.pdf
Baycloud Systems Ltd.: Baycloud Consent Platform: Consent Makes the Law. http://www.baycloud.com/#CookieQ
European Commission: Proposal for an ePrivacy Regulation, June 2019. https://ec.europa.eu/digital-single-market/proposal-eprivacy-regulation
Nymity Inc.: Nymity’ GDPR Toolkit for Demonstrable GDPR Compliance. http://info.nymity.com/gdpr-compliance-toolkit
OneTrust, LLC: The Leading Privacy Management Software Platform. http://onetrust.com
Semenko, Y., Saucez, D.: Distributed privacy preserving platform for ridesharing services. In: Wang, G., Feng, J., Bhuiyan, M.Z.A., Lu, R. (eds.) SpaCCS 2019. LNCS, vol. 11611, pp. 1–14. Springer, Cham (2019). https://doi.org/10.1007/978-3-030-24907-6_1
AuraPortal GDPR: A Global Business Process Management (BPM) Software Leader. https://www.auraportal.com
The OpenGDPR Project: Open-Source Initiative to Protect Consumers’ Privacy and Data Rights (2017). https://www.opengdpr.org
Acknowledgment
This work has been partially supported by the Irish Research Council, under the government of Ireland post-doc fellowship (grant code GOIPD/2018/466); and by a post-doctoral INCIBE grant within the “Ayudas para la Excelencia de los Equipos de Investigación Avanzada en Ciberseguridad” Program, with code INCIBEI-2015-27352.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2019 Springer Nature Singapore Pte Ltd.
About this paper
Cite this paper
Huertas Celdrán, A., Gil Pérez, M., Mlakar, I., Alcaraz Calero, J.M., García Clemente, F.J., Martínez Pérez, G. (2019). A Management Platform for Citizen’s Data Protection Regulation. In: Wang, G., El Saddik, A., Lai, X., Martinez Perez, G., Choo, KK. (eds) Smart City and Informatization. iSCI 2019. Communications in Computer and Information Science, vol 1122. Springer, Singapore. https://doi.org/10.1007/978-981-15-1301-5_6
Download citation
DOI: https://doi.org/10.1007/978-981-15-1301-5_6
Published:
Publisher Name: Springer, Singapore
Print ISBN: 978-981-15-1300-8
Online ISBN: 978-981-15-1301-5
eBook Packages: Computer ScienceComputer Science (R0)