activity
20202026
most citedTILT: A GDPR-Aligned Transparency Information Language and Toolkit for Practical Privacy Engineering

36 citations · 77 across the 16 of their papers we have counts for

collaborators

16 papers

cs.DC2026

An Event-Driven Cloud-Native Wearable Analytics Framework for Real-Time Clinical Workloads

Elias Grünewald, Daniil Cherepko, Linus Gustafsson +7

Continuous physiological monitoring using consumer-grade wearables offers a transformative opportunity for clinical care and research, yet integration remains hindered by device he…

cs.DC2025

Prink: -Anonymization for Streaming Data in Apache Flink

Philip Groneberg, Saskia Nuñez von Voigt, Thomas Janke +4

In this paper, we present Prink, a novel and practically applicable concept and fully implemented prototype for ks-anonymizing data streams in real-world application architectures.…

cs.SE2024

Extending Business Process Management for Regulatory Transparency

Jannis Kiesel, Elias Grünewald

Ever-increasingly complex business processes are enabled by loosely coupled cloud-native systems. In such fast-paced development environments, data controllers face the challenge o…

cs.CR2024★ 1 cited

Hook-in Privacy Techniques for gRPC-based Microservice Communication

Louis Loechel, Siar-Remzi Akbayin, Elias Grünewald +4

gRPC is at the heart of modern distributed system architectures. Based on HTTP/2 and Protocol Buffers, it provides highly performant, standardized, and polyglot communication acros…

cs.CY2023

Towards Cross-Provider Analysis of Transparency Information for Data Protection

Elias Grünewald, Johannes M. Halkenhäußer, Nicola Leschke +1

Transparency and accountability are indispensable principles for modern data protection, from both, legal and technical viewpoints. Regulations such as the GDPR, therefore, require…

cs.DC2023★ 1 cited

Hawk: DevOps-driven Transparency and Accountability in Cloud Native Systems

Elias Grünewald, Jannis Kiesel, Siar-Remzi Akbayin +1

Transparency is one of the most important principles of modern privacy regulations, such as the GDPR or CCPA. To be compliant with such regulatory frameworks, data controllers must…

cs.CY2023

A Human-in-the-Loop Approach for Information Extraction from Privacy Policies under Data Scarcity

Michael Gebauer, Faraz Maschhur, Nicola Leschke +2

Machine-readable representations of privacy policies are door openers for a broad variety of novel privacy-enhancing and, in particular, transparency-enhancing technologies (TETs).…

cs.CY2023★ 1 cited

Streamlining personal data access requests: From obstructive procedures to automated web workflows

Nicola Leschke, Florian Kirsten, Frank Pallas +1

Transparency and data portability are two core principles of modern privacy legislations such as the GDPR. From the regulatory perspective, providing individuals (data subjects) wi…

cs.SE2023★ 1 cited

Enabling Versatile Privacy Interfaces Using Machine-Readable Transparency Information

Elias Grünewald, Johannes M. Halkenhäußer, Nicola Leschke +3

Transparency regarding the processing of personal data in online services is a necessary precondition for informed decisions on whether or not to share personal data. In this paper…

cs.CR2022★ 5 cited

Scalable Discovery and Continuous Inventory of Personal Data at Rest in Cloud Native Systems

Elias Grünewald, Leonard Schurbert

Cloud native systems are processing large amounts of personal data through numerous and possibly multi-paradigmatic data stores (e.g., relational and non-relational databases). Fro…

cs.CR2022★ 7 cited

Configurable Per-Query Data Minimization for Privacy-Compliant Web APIs

Frank Pallas, David Hartmann, Paul Heinrich +2

The purpose of regulatory data minimization obligations is to limit personal data to the absolute minimum necessary for a given context. Beyond the initial data collection, storage…

cs.CY2021★ 2 cited

Datensouveränität für Verbraucher:innen: Technische Ansätze durch KI-basierte Transparenz und Auskunft im Kontext der DSGVO

Elias Grünewald, Frank Pallas

A sufficient level of data sovereignty is extremely difficult for consumers in practice. The EU General Data Protection Regulation guarantees comprehensive data subject rights, whi…

cs.CR2021★ 7 cited

RedCASTLE: Practically Applicable -Anonymity for IoT Streaming Data at the Edge in Node-RED

Frank Pallas, Julian Legler, Niklas Amslgruber +1

In this paper, we present RedCASTLE, a practically applicable solution for Edge-based -anonymization of IoT streaming data in Node-RED. RedCASTLE builds upon a pre-existing, r…

cs.SE2021★ 15 cited

Cloud Native Privacy Engineering through DevPrivOps

Elias Grünewald

Cloud native information systems engineering enables scalable and resilient service infrastructures for all major online offerings. These are built following agile development prac…

cs.SE2021★ 1 cited

TIRA: An OpenAPI Extension and Toolbox for GDPR Transparency in RESTful Architectures

Elias Grünewald, Paul Wille, Frank Pallas +2

Transparency - the provision of information about what personal data is collected for which purposes, how long it is stored, or to which parties it is transferred - is one of the c…

cs.CY2020★ 36 cited

TILT: A GDPR-Aligned Transparency Information Language and Toolkit for Practical Privacy Engineering

Elias Grünewald, Frank Pallas

In this paper, we present TILT, a transparency information language and toolkit explicitly designed to represent and process transparency information in line with the requirements…