Affiliation:
1. Computer Science Department, Universidad de Castilla La Mancha, Albacete, Spain
2. Santander Private Banking International, Madrid, Spain
Abstract
This article presents a tool calledGDPRValidatorthat aims to assist small and medium-sized enterprises (SMEs) that have migrated their services, or a part of them, to the cloud to be General Data Protection Regulation (GDPR) compliant when they manage and store employees’ or customers’ data in the cloud. As these companies have a limited budget to hire legal experts to guide them in complying with GDPR, the main objective of this tool is to help SMEs to be more competitive by saving a considerable amount of money. By usingGDPRValidator, these companies can learn and begin the GDPR compliance process by themselves and decide whether it will be necessary to hire GDPR legal experts in the end.GDPRValidatorimplements a process that aids companies in compliance analysis and validation and generates a series of documents with recommendations. These documents do not guarantee full GDPR compliance, but they can help the company better understand the regulation and improve its data management strategies. In order to validate the efficiency and efficacy of the tool, two SMEs have used it and provided feedback about its perceived ease of use and its perceived usefulness for understanding and complying with GDPR. The results of the validation showed that, for both companies, the degree of perceived usefulness and ease of use ofGDPRValidatoris quite good. All the scores expressed agreement.
Funder
Spanish Ministry of Science and Innovation (co-financed by European Union FEDER funds) Projects
AwESOMe Project
Junta de Comunidades de Castilla-La Mancha Project
Ramon y Cajal Program
Reference55 articles.
1. Data subject rights in the cloud: a grounded study on data protection assurance in the light of GDPR;Altorbaq,2017
2. Enabling compliance checking against safety standards from SPEM 2.0 process models;Ardila,2018
3. Evaluating the usefulness and ease of use of an experimentation definition language;Auer,2020
4. COM-PACE: compliance-aware cloud application engineering using Blockchain;Aujla;IEEE Internet Computing,2020
5. Privacy-aware cloud auditing for GDPR compliance verification in online healthcare;Barati;IEEE Transactions on Industrial Informatics,2022
Cited by
2 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献