Using an enterprise architecture model for GDPR compliance principles

Gaëlle Blanco-Lainé (1) , Jean-Sébastien Sottet (2) , Sophie Dupuy-Chessa (1)

1 SIGMA - Systèmes d’Information - inGénierie et Modélisation Adaptables
2 LIST - Luxembourg Institute of Science and Technology

Nowadays, all enterprises must take into account the legal frameworks at all levels of their organization. Over the past two years, the focus has been on the GDPR. This regulation on data and their processing activities impacts on the vision of the enterprise information system. In order to identify these impacts, it is necessary to define an approach to conciliate regulatory and business points of view. Our proposal is to use an enterprise architecture modeling approach to integrate regulatory concerns. This article describes a high-level Archimate model for implementing a GDPR compliance approach.

Mots clés: GDPR; architecture enterprise; regulation and compliance; privacy; model

Domaines: Génie logiciel [cs.SE]

Gaëlle Blanco-Lainé, Jean-Sébastien Sottet, Sophie Dupuy-Chessa. Using an enterprise architecture model for GDPR compliance principles. 12th IFIP Conference on Practice of Entreprise Modeling, POEM'2019, Nov 2020, Luxembourg, Luxembourg. ⟨hal-02482761⟩