GDPR-oriented intelligent checking method of privacy policies compliance

The implementation of the EU’s General Data Protection Regulation (GDPR) has resulted in the imposition of over 300 fines since its inception in 2018.These fines include significant penalties for prominent companies like Google, which were penalized for their failure to provide transparent and compr...

Full description

Saved in:
Bibliographic Details
Main Authors: Xin LI, Peng TANG, Xiheng ZHANG, Weidong QIU, Hong HUI
Format: Article
Language:English
Published: POSTS&TELECOM PRESS Co., LTD 2023-12-01
Series:网络与信息安全学报
Subjects:
Online Access:http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2023088
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1841529590787342336
author Xin LI
Peng TANG
Xiheng ZHANG
Weidong QIU
Hong HUI
author_facet Xin LI
Peng TANG
Xiheng ZHANG
Weidong QIU
Hong HUI
author_sort Xin LI
collection DOAJ
description The implementation of the EU’s General Data Protection Regulation (GDPR) has resulted in the imposition of over 300 fines since its inception in 2018.These fines include significant penalties for prominent companies like Google, which were penalized for their failure to provide transparent and comprehensible privacy policies.The GDPR, known as the strictest data protection laws in history, has made companies worldwide more cautious when offering cross-border services, particularly to the European Union.The regulation's territorial scope stipulates that it applies to any company providing services to EU citizens, irrespective of their location.This implies that companies worldwide, including domestic enterprises, are required to ensure compliance with GDPR in their privacy policies, especially those involved in international operations.To meet this requirement, an intelligent detection method was introduced.Machine learning and automation technologies were utilized to automatically extract privacy policies from online service companies.The policies were converted into a standardized format with a hierarchical structure.Through natural language processing, the privacy policies were classified, allowing for the identification of relevant GDPR concepts.In addition, a constructed GDPR taxonomy was used in the detection mechanism to identify any missing concepts as required by GDPR.This approach facilitated intelligent detection of GDPR-oriented privacy policy compliance, providing support to domestic enterprises while they provided cross-border services to EU users.Analysis of the corpus samples reveals the current situation that mainstream online service companies generally fail to meet GDPR compliance requirements.
format Article
id doaj-art-1eeab9e2ff1f49b6828c2350d3b9528c
institution Kabale University
issn 2096-109X
language English
publishDate 2023-12-01
publisher POSTS&TELECOM PRESS Co., LTD
record_format Article
series 网络与信息安全学报
spelling doaj-art-1eeab9e2ff1f49b6828c2350d3b9528c2025-01-15T03:16:54ZengPOSTS&TELECOM PRESS Co., LTD网络与信息安全学报2096-109X2023-12-01912713959580552GDPR-oriented intelligent checking method of privacy policies complianceXin LIPeng TANGXiheng ZHANGWeidong QIUHong HUIThe implementation of the EU’s General Data Protection Regulation (GDPR) has resulted in the imposition of over 300 fines since its inception in 2018.These fines include significant penalties for prominent companies like Google, which were penalized for their failure to provide transparent and comprehensible privacy policies.The GDPR, known as the strictest data protection laws in history, has made companies worldwide more cautious when offering cross-border services, particularly to the European Union.The regulation's territorial scope stipulates that it applies to any company providing services to EU citizens, irrespective of their location.This implies that companies worldwide, including domestic enterprises, are required to ensure compliance with GDPR in their privacy policies, especially those involved in international operations.To meet this requirement, an intelligent detection method was introduced.Machine learning and automation technologies were utilized to automatically extract privacy policies from online service companies.The policies were converted into a standardized format with a hierarchical structure.Through natural language processing, the privacy policies were classified, allowing for the identification of relevant GDPR concepts.In addition, a constructed GDPR taxonomy was used in the detection mechanism to identify any missing concepts as required by GDPR.This approach facilitated intelligent detection of GDPR-oriented privacy policy compliance, providing support to domestic enterprises while they provided cross-border services to EU users.Analysis of the corpus samples reveals the current situation that mainstream online service companies generally fail to meet GDPR compliance requirements.http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2023088GDPRprivacy policyhierarchical structurecompliance checking
spellingShingle Xin LI
Peng TANG
Xiheng ZHANG
Weidong QIU
Hong HUI
GDPR-oriented intelligent checking method of privacy policies compliance
网络与信息安全学报
GDPR
privacy policy
hierarchical structure
compliance checking
title GDPR-oriented intelligent checking method of privacy policies compliance
title_full GDPR-oriented intelligent checking method of privacy policies compliance
title_fullStr GDPR-oriented intelligent checking method of privacy policies compliance
title_full_unstemmed GDPR-oriented intelligent checking method of privacy policies compliance
title_short GDPR-oriented intelligent checking method of privacy policies compliance
title_sort gdpr oriented intelligent checking method of privacy policies compliance
topic GDPR
privacy policy
hierarchical structure
compliance checking
url http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2023088
work_keys_str_mv AT xinli gdprorientedintelligentcheckingmethodofprivacypoliciescompliance
AT pengtang gdprorientedintelligentcheckingmethodofprivacypoliciescompliance
AT xihengzhang gdprorientedintelligentcheckingmethodofprivacypoliciescompliance
AT weidongqiu gdprorientedintelligentcheckingmethodofprivacypoliciescompliance
AT honghui gdprorientedintelligentcheckingmethodofprivacypoliciescompliance