%0 Conference Proceedings %T A Formal Framework for Consent Management %+ University of Oslo (UiO) %+ Department of Informatics [Oslo] %A Tokas, Shukun %A Owe, Olaf %Z Part 1: Full Papers %< avec comité de lecture %( Lecture Notes in Computer Science %B 40th International Conference on Formal Techniques for Distributed Objects, Components, and Systems (FORTE) %C Valletta, Malta %Y Alexey Gotsman %Y Ana Sokolova %I Springer International Publishing %3 Formal Techniques for Distributed Objects, Components, and Systems %V LNCS-12136 %P 169-186 %8 2020-06-15 %D 2020 %R 10.1007/978-3-030-50086-3_10 %K GDPR %K Data protection %K Privacy policies %K Policy compliance %K Tagging %K Runtime enforcement %K Consent management %Z Computer Science [cs] %Z Computer Science [cs]/Networking and Internet Architecture [cs.NI]Conference papers %X The aim of this work is to design a formal framework for consent management in line with EU’s General Data Protection Regulation (GDPR). To make a general solution, we consider a high-level modeling language for distributed service-oriented systems, building on the paradigm of active objects. Our framework provides a general solution for data subjects to observe and change their privacy settings and to be informed about all personal data stored about them. The solution consists of a set of predefined types for privacy related concepts, a formalization of policy compliance, a set of interfaces that forms the basis of interaction with external users for consent management, a set of classes that is used in interaction with the runtime system, and a runtime system enforcing the consented policies. %G English %Z TC 6 %Z WG 6.1 %2 https://inria.hal.science/hal-03283231/document %2 https://inria.hal.science/hal-03283231/file/495615_1_En_10_Chapter.pdf %L hal-03283231 %U https://inria.hal.science/hal-03283231 %~ IFIP-LNCS %~ IFIP %~ IFIP-TC %~ IFIP-WG %~ IFIP-TC6 %~ IFIP-WG6-1 %~ IFIP-FORTE %~ IFIP-LNCS-12136