Planned intervention: On Wednesday June 26th 05:30 UTC Zenodo will be unavailable for 10-20 minutes to perform a storage cluster upgrade.
Published December 9, 2020 | Version published
Conference paper Open

A Common Semantic Model of the GDPR Register of Processing Activities

  • 1. Uniphar PLC.
  • 2. ADAPT Centre, Trinity College Dublin
  • 3. ADAPT Centre, Dublin City University

Description

The creation and maintenance of a Register of Processing Activities (ROPA) is an essential process for the demonstration of GDPR compliance. We analyse ROPA templates from six EU Data Protection Regulators and show that template scope and granularity vary widely between jurisdictions. We then propose a flexible, consolidated data model for consistent processing of ROPAs (CSM-ROPA). We analyse the extent that the Data Privacy Vocabulary (DPV) can be used to express CSM-ROPA. We find that it does not directly address modelling ROPAs, and so needs additional concept definitions. We provide a mapping of our CSM-ROPA to an extension of the Data Privacy Vocabulary.

Files

FAIA-334-FAIA200876.pdf

Files (438.1 kB)

Name Size Download all
md5:01a12caaddb29e32cb74f5d82cc07414
438.1 kB Preview Download

Additional details

Funding

ADAPT: Centre for Digital Content Platform Research 13/RC/2106
Science Foundation Ireland