Privacy-Aware Cloud Ecosystems and GDPR Compliance

Barati, Masoud; Rana, Omer; Theodorakopoulos, George; Burnap, Peter

Abstract

Understanding how cloud providers support the European General Data Protection Regulation (GDPR) remains an imporant challenge for new providers emerging on the market. GDPR influences access to, storage, processing and tranmission of data, requiring these operations to be exposed to a user to seek explicit consent. A privacy-aware cloud architecture is proposed that improves transparency and enables the audit trail of providers who accessed the user data to be recorded. The architecture not only supports GDPR compliance by imposing several data protection requirements on cloud providers, but also benefits from a blockchain network that securely stores the providers' operations on the user data. A blockchainbased tracking approach based on a shared privacy agreement implemented as a smart contract is described - providers who violate GDPR rules are automatically reported through a voting mechanism.

Citation

Barati, M., Rana, O., Theodorakopoulos, G., & Burnap, P. (2019, August). Privacy-Aware Cloud Ecosystems and GDPR Compliance. Presented at 2019 7th International Conference on Future Internet of Things and Cloud (FiCloud), Istanbul, Turkey

• Presentation Conference Type: Conference Paper (published)
• Conference Name: 2019 7th International Conference on Future Internet of Things and Cloud (FiCloud)
• Start Date: Aug 26, 2019
• End Date: Aug 28, 2019
• Online Publication Date: Jan 30, 2020
• Publication Date: 2020
• Deposit Date: May 4, 2021
• Publisher: Institute of Electrical and Electronics Engineers
• Book Title: 2019 7th International Conference on Future Internet of Things and Cloud (FiCloud)
• ISBN: 978-1-7281-2889-4
• DOI: https://doi.org/10.1109/ficloud.2019.00024
• Keywords: data privacy, cloud architecture, blockchains, smart contracts, general data protection regulation
• Public URL: http://researchrepository.napier.ac.uk/Output/2767177