- Information Security Research Group
Thesis topic:
GDPR compliance process assessment using the DPO tool
- Supervisor: Raimundas Matulevicius
- Organisational compliance with the General Data Protection Regulation (GDPR) is a challenging task. The GDPR model and its supporting method to manage compliance with the regulation in business processes have been proposed. Currently, the method is supported by the prototype tool, which helps to extract the As-Is compliance model and highlight non-compliance issues. However, the tool has limited functionality. The topic focuses on defining requirements and procedures for data protection impact assessment, and on addressing data breaches based on the GDPR model and business model. Potentially, the tool's method could also be extended to include an automated proposal for resolving non-compliance issues based on secure process design patterns.
<< back