The EU’s Artificial Intelligence Act(AI Act)imposes requirements for the privacy compliance of AI systems.AI systems must comply with privacy laws such as the GDPR when providing services.These laws provide users wit...The EU’s Artificial Intelligence Act(AI Act)imposes requirements for the privacy compliance of AI systems.AI systems must comply with privacy laws such as the GDPR when providing services.These laws provide users with the right to issue a Data Subject Access Request(DSAR).Responding to such requests requires database administrators to identify information related to an individual accurately.However,manual compliance poses significant challenges and is error-prone.Database administrators need to write queries through time-consuming labor.The demand for large amounts of data by AI systems has driven the development of NoSQL databases.Due to the flexible schema of NoSQL databases,identifying personal information becomes even more challenging.This paper develops an automated tool to identify personal information that can help organizations respond to DSAR.Our tool employs a combination of various technologies,including schema extraction of NoSQL databases and relationship identification from query logs.We describe the algorithm used by our tool,detailing how it discovers and extracts implicit relationships from NoSQL databases and generates relationship graphs to help developers accurately identify personal data.We evaluate our tool on three datasets,covering different database designs,achieving an F1 score of 0.77 to 1.Experimental results demonstrate that our tool successfully identifies information relevant to the data subject.Our tool reduces manual effort and simplifies GDPR compliance,showing practical application value in enhancing the privacy performance of NOSQL databases and AI systems.展开更多
2012年11月,欧盟委员会制定了具有更强包容性和合作性的《通用数据保护条例》(General Data Protection Regulation,简称GDPR),2018年5月25日,GDPR法规将在欧盟28成员国强制执行。GDPR是目前最先进的隐私保护制度,可能会导致高达年收入4...2012年11月,欧盟委员会制定了具有更强包容性和合作性的《通用数据保护条例》(General Data Protection Regulation,简称GDPR),2018年5月25日,GDPR法规将在欧盟28成员国强制执行。GDPR是目前最先进的隐私保护制度,可能会导致高达年收入4%的罚款,这将对企业产生怎样的影响,企业又将如何应对?论文将从企业组织架构、业务管理、职能平台、产品活动四个方面进行分析。展开更多
基金supported by the National Natural Science Foundation of China(No.62302242)the China Postdoctoral Science Foundation(No.2023M731802).
文摘The EU’s Artificial Intelligence Act(AI Act)imposes requirements for the privacy compliance of AI systems.AI systems must comply with privacy laws such as the GDPR when providing services.These laws provide users with the right to issue a Data Subject Access Request(DSAR).Responding to such requests requires database administrators to identify information related to an individual accurately.However,manual compliance poses significant challenges and is error-prone.Database administrators need to write queries through time-consuming labor.The demand for large amounts of data by AI systems has driven the development of NoSQL databases.Due to the flexible schema of NoSQL databases,identifying personal information becomes even more challenging.This paper develops an automated tool to identify personal information that can help organizations respond to DSAR.Our tool employs a combination of various technologies,including schema extraction of NoSQL databases and relationship identification from query logs.We describe the algorithm used by our tool,detailing how it discovers and extracts implicit relationships from NoSQL databases and generates relationship graphs to help developers accurately identify personal data.We evaluate our tool on three datasets,covering different database designs,achieving an F1 score of 0.77 to 1.Experimental results demonstrate that our tool successfully identifies information relevant to the data subject.Our tool reduces manual effort and simplifies GDPR compliance,showing practical application value in enhancing the privacy performance of NOSQL databases and AI systems.
文摘2012年11月,欧盟委员会制定了具有更强包容性和合作性的《通用数据保护条例》(General Data Protection Regulation,简称GDPR),2018年5月25日,GDPR法规将在欧盟28成员国强制执行。GDPR是目前最先进的隐私保护制度,可能会导致高达年收入4%的罚款,这将对企业产生怎样的影响,企业又将如何应对?论文将从企业组织架构、业务管理、职能平台、产品活动四个方面进行分析。
