Search
 
loader loading subjects...
cover
Towards a Purpose-Based Access Control Model Derived from the Purpose Limitation Principle
Milen G. Kebede, Thomas van Binsbergen, Tom van Engers, Dannis G. van Vuurden
143 - 148
10.3233/FAIA230958
Research Article
Frontiers in Artificial Intelligence and Applications
Volume 379: Legal Knowledge and Information Systems
Abstract

The purpose limitation principle is a GDPR cornerstone that aims to minimize data processing risks by limiting instances of personal data access and usage. We model purpose as an action or sequences of actions and formalize action relationships to derive purpose-based permissions. Based on these permissions, we introduce a novel purpose-based access control model with a purpose matching algorithm illustrated with a healthcare research use case.

Download
Creative Commons License