36 citations · 84 across the 11 of their papers we have counts for
11 papers
Hawk: DevOps-driven Transparency and Accountability in Cloud Native Systems
Elias Grünewald, Jannis Kiesel, Siar-Remzi Akbayin +1
Transparency is one of the most important principles of modern privacy regulations, such as the GDPR or CCPA. To be compliant with such regulatory frameworks, data controllers must…
A Human-in-the-Loop Approach for Information Extraction from Privacy Policies under Data Scarcity
Michael Gebauer, Faraz Maschhur, Nicola Leschke +2
Machine-readable representations of privacy policies are door openers for a broad variety of novel privacy-enhancing and, in particular, transparency-enhancing technologies (TETs).…
Streamlining personal data access requests: From obstructive procedures to automated web workflows
Nicola Leschke, Florian Kirsten, Frank Pallas +1
Transparency and data portability are two core principles of modern privacy legislations such as the GDPR. From the regulatory perspective, providing individuals (data subjects) wi…
Enabling Versatile Privacy Interfaces Using Machine-Readable Transparency Information
Elias Grünewald, Johannes M. Halkenhäußer, Nicola Leschke +3
Transparency regarding the processing of personal data in online services is a necessary precondition for informed decisions on whether or not to share personal data. In this paper…
Non-Disclosing Credential On-chaining for Blockchain-based Decentralized Applications
Jonathan Heiss, Robert Muth, Frank Pallas +1
Many service systems rely on verifiable identity-related information of their users. Manipulation and unwanted exposure of this privacy-relevant information, however, must at the s…
Configurable Per-Query Data Minimization for Privacy-Compliant Web APIs
Frank Pallas, David Hartmann, Paul Heinrich +2
The purpose of regulatory data minimization obligations is to limit personal data to the absolute minimum necessary for a given context. Beyond the initial data collection, storage…
RedCASTLE: Practically Applicable -Anonymity for IoT Streaming Data at the Edge in Node-RED
Frank Pallas, Julian Legler, Niklas Amslgruber +1
In this paper, we present RedCASTLE, a practically applicable solution for Edge-based -anonymization of IoT streaming data in Node-RED. RedCASTLE builds upon a pre-existing, r…
Messaging with Purpose Limitation -- Privacy-Compliant Publish-Subscribe Systems
Karl Wolf, Frank Pallas, Stefan Tai
Purpose limitation is an important privacy principle to ensure that personal data may only be used for the declared purposes it was originally collected for. Ensuring compliance wi…
TIRA: An OpenAPI Extension and Toolbox for GDPR Transparency in RESTful Architectures
Elias Grünewald, Paul Wille, Frank Pallas +2
Transparency - the provision of information about what personal data is collected for which purposes, how long it is stored, or to which parties it is transferred - is one of the c…
TILT: A GDPR-Aligned Transparency Information Language and Toolkit for Practical Privacy Engineering
Elias Grünewald, Frank Pallas
In this paper, we present TILT, a transparency information language and toolkit explicitly designed to represent and process transparency information in line with the requirements…
Fog Computing as Privacy Enabler
Frank Pallas, Philip Raschke, David Bermbach
Despite broad discussions on privacy challenges arising from fog computing, the authors argue that privacy and security requirements might actually drive the adoption of fog comput…