Controlling Personal Data Flow: An Ontology in the COVID-19 Outbreak using a Permissioned Blockchain

Paulo Alves, Isabella Frajhof, Fernando Correia, Clarisse de Souza, Helio Lopes

2021

Abstract

Data protection regulations emerged to set rights and duties in managing personal data. Hence, they have created a new challenge. Systems must comply with legal obligations whenever the processing of personal data takes place. From the controller’s perspective, attending to such norms can be defying, as it demands a detailed and holistic knowledge of the data processing activity. From the data subject point of view, controlling and following the data flow is also complex, as many entities can be authorized to access and use one’s personal data. To mitigate information asymmetry and comply with data protection regulations, we developed an ontology to identify the entities involved in personal data processing. The ontology aims to build relationships between them and to share a common understanding of rights and duties proposed by the Brazilian Data Protection Law under the COVID-19 pandemic context. Moreover, the permissioned blockchain technology emerged as a solution to manage privacy concerns and to allow the compliance to such Law. We also developed a conceptual model using such technology and provided a data governance approach to set a standard so that the reuse becomes more accurate.

Paper Citation

in Harvard Style

Alves P., Frajhof I., Correia F., de Souza C. and Lopes H. (2021). Controlling Personal Data Flow: An Ontology in the COVID-19 Outbreak using a Permissioned Blockchain. In Proceedings of the 23rd International Conference on Enterprise Information Systems - Volume 2: ICEIS, ISBN 978-989-758-509-8, pages 173-180. DOI: 10.5220/0010391901730180

in Bibtex Style

@conference{iceis21,
author={Paulo Alves and Isabella Frajhof and Fernando Correia and Clarisse de Souza and Helio Lopes},
title={Controlling Personal Data Flow: An Ontology in the COVID-19 Outbreak using a Permissioned Blockchain},
booktitle={Proceedings of the 23rd International Conference on Enterprise Information Systems - Volume 2: ICEIS,},
year={2021},
pages={173-180},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0010391901730180},
isbn={978-989-758-509-8},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 23rd International Conference on Enterprise Information Systems - Volume 2: ICEIS,
TI - Controlling Personal Data Flow: An Ontology in the COVID-19 Outbreak using a Permissioned Blockchain
SN - 978-989-758-509-8
AU - Alves P.
AU - Frajhof I.
AU - Correia F.
AU - de Souza C.
AU - Lopes H.
PY - 2021
SP - 173
EP - 180
DO - 10.5220/0010391901730180