GGML-Generic GDPR Management Layer A middleware to support the development of GDPR related software requirements

João Carlos Teixeira

Key information

Authors:

João Carlos Teixeira (João Carlos Teixeira)

Supervisors:

João Nuno De Oliveira e Silva (João Nuno De Oliveira e Silva)

Published in

September 25, 2020

Abstract

The directives implemented in May 2018 at General Data Protection Regulation (GDPR) are responsible for regulating the processing and circulation of data classified as personal within the European Union. With the implementation of acrshort gdpr, the need to implement a set of modifications in the methods of processing and storing personal data by systems and web applications was created. The problem focused on this thesis is the need, created by the implementation of the GDPR, for software developers to develop functional management logic for the storage of personal data. This logic is usually common and generic among applications that have capacities for storing and processing personal data. This thesis developed one of the first systems to support the implementation of acrshort gdpr in web systems and applications, providing automatic classification and data management features. This system was developed in Python and using meta-programming and the study of trees and relational graphs. The data can be classified automatically by the personal or public system according to the rules of acrshort gdpr and through information obtained by the programmer of the application where it was applied. The system was designed in a generic way to be applicable in several programming languages, operating systems and middlewares with few adaptations to make. In the case of proof of concept of the thesis the system was demonstrated in SQLAlchemy and was it was tested in the implementation of a generic data collection application.