Translating Data Protection into Software Requirements

Ralf Kneuper

2020

Abstract

With the growth of data processing and digitalisation in many environments, data protection is also growing more and more important. This is for example reflected by the General Data Protection Regulation (GDPR) which came into effect in May 2018 and defines what organisations need to do to protect individuals and their personal data. This paper provides a summary of the main data protection concepts, using GDPR as an example, and from these derives the resulting software requirements that apply to software systems which process private data within the European Union (and to some extent beyond). This way, the paper supports software developers as well as requirements analysts in their task of identifying and defining the data protection requirements, even though they will have to be adapted and additional detail provided for any specific case.

Paper Citation

in Harvard Style

Kneuper R. (2020). Translating Data Protection into Software Requirements. In Proceedings of the 6th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-399-5, pages 257-264. DOI: 10.5220/0008873902570264

in Bibtex Style

@conference{icissp20,
author={Ralf Kneuper},
title={Translating Data Protection into Software Requirements},
booktitle={Proceedings of the 6th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2020},
pages={257-264},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0008873902570264},
isbn={978-989-758-399-5},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 6th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - Translating Data Protection into Software Requirements
SN - 978-989-758-399-5
AU - Kneuper R.
PY - 2020
SP - 257
EP - 264
DO - 10.5220/0008873902570264