ODRL Policy Modelling and Compliance Checking

Abstract

This paper addresses the problem of constructing a policy pipeline that enables compliance checking of business processes against regulatory obligations. Towards this end, we propose an Open Digital Rights Language (ODRL) profile that can be used to capture the semantics of both business policies in the form of sets of required permissions and regulatory requirements in the form of deontic concepts, and present their translation into Answer Set Programming (via the Institutional Action Language (InstAL)) for compliance checking purposes. The result of the compliance checking is either a positive compliance result or an explanation pertaining to the aspects of the policy that are causing the noncompliance. The pipeline is illustrated using two (key) fragments of the General Data Protect Regulation, namely Articles 6 (Lawfulness of processing) and Articles 46 (Transfers subject to appropriate safeguards) and industrially-relevant use cases that involve the specification of sets of permissions that are needed to execute business processes. The core contributions of this paper are the ODRL profile, which is capable of modelling regulatory obligations and business policies, the exercise of modelling elements of GDPR in this semantic formalism, and the operationalisation of the model to demonstrate its capability to support personal data processing compliance checking, and a basis for explaining why the request is deemed compliant or not.

Governance of Autonomous Agents on the Web: Challenges and Opportunities

“…Solid 19 is an ongoing initiative, lead by Tim Berners-Lee, aimed at deploying a distributed Linked Data infrastructure for governing one's personal data, which is built on top of Linked Data Platforms. Additionally, there has been work on usage control in the form of licensing [28, 66ś68, 143], and more recently, policy languages have been used as a means to represent regulatory constraints [50,108]. The Open Digital Rights Language [64,78], although primarily designed for licensing, has been extended to cater for: access policies [133]; requests, data ofers and agreements [132]; and regulatory policies [50].…”

Unveiling the Actual Progress of Digital Building Permit: Getting Awareness through a Critical State of the Art Review

“…Belliard [154] examines the use of BIM in plan review process within building permitting to support traditional 2D approach by surveying with local architects. Strobbe et al [155], Shi and Roman [156], and De Vos et al [157] consider assistance of the design phase according to building regulations prior to the submission of the building permit application. Zdravkovic and Ostman [158] deal with presenting GEOinfo in public services.…”

The linked legal data landscape: linking legal data across different countries

“…Besides the generic legal ontologies used in this paper, many domain-specifc legal ontologies have been proposed tailored for the usage in a narrow legal domain. For instance the Open Digital Rights Language (ODRL) 95 (Steyskal and Polleres 2014;Vos et al 2019), Linked Data 93 http://www.akomantoso.org/.…”