A1 Refereed original research article in a scientific journal
Extracting LPL privacy policy purposes from annotated web service source code
Authors: Hjerppe Kalle, Ruohonen Jukka, Leppänen Ville
Publisher: SPRINGER HEIDELBERG
Publication year: 2023
Journal: Software and Systems Modeling
Journal name in source: SOFTWARE AND SYSTEMS MODELING
Journal acronym: SOFTW SYST MODEL
Number of pages: 19
ISSN: 1619-1366
eISSN: 1619-1374
DOI: https://doi.org/10.1007/s10270-022-00998-y
Web address : https://doi.org/10.1007/s10270-022-00998-y
Self-archived copy’s web address: https://research.utu.fi/converis/portal/detail/Publication/175170270
Privacy policies are a mechanism used to inform users of the World Wide Web about the processing of their personal data. Such processing has special requirements, since personal data are regulated by data protection legislation. For example, a consent or another legal basis is typically needed. Privacy policies are documents used, among other things, to inform the data subject about processing of their personal data. These are formally represented by privacy languages. In this paper, we present a technique for constructing Layered Privacy Language policy data from web service code bases. Theoretically, we model the purposes of processing within web services by extending the privacy language with composition. We also present a formal analysis method for generating privacy policy purposes from the source code of web services. Furthermore, as a practical contribution, we present a static analysis tool that implements the theoretical solution. Finally, we report a brief case study for validating the tool
Downloadable publication This is an electronic reprint of the original article. |  |
