Methods and tools for GDPR compliance through Privacy and Data Protection Engineering
Coordinated by
TRIALOG
Objective
PDP4E is an innovation action that will provide software and system engineers with methods and software tools to systematically apply data protection principles in the projects they carry out, so that the products they create comply with the General Data Protection Regulation (GDPR), thus bringing the principles of Privacy and Data Protection by Design to practice.
PDP4E will integrate privacy and data protection engineering functionalities into existent, mainstream software tools that are already in use by engineers, focusing on open-source tools that will be integrated in the Eclipse ecosystem, The approach will integrate methods proposed by the privacy engineering community (e.g. LINDDUN, ISO/IEC 27550 Privacy engineering), and the industry of software and system engineering tools (e.g. MUSE, PAPYRUS or OpenCert) using a model driven engineering approach. PDP4E will introduce privacy and data protection into software and system engineering disciplines (Risk Management, Requirements Engineering, Model-Driven Design, and Assurance), which drive the everyday activities of engineers.
Results of PDP4E will be assessed by two demonstration pilots on industries where privacy and data protection are especially relevant, one on C-ITS applications and services (connected vehicle application domain) and one on big data on smart grid (smart grid application domain).
PDP4E will promote its results in engineering communities, as Eclipse (community of software developers) or IPEN (community of stakeholders with an interest on privacy engineering). An open Alliance for Privacy and Data Protection Engineering is planned as a follow-up of the project, building on that community and the synergies among partners.
PDP4E includes 8 partners and has a 36-month duration.
Other projects
MEDINA – Security framework to achieve a continuous audit-based certification in compliance with the EU-wide cloud security certification scheme
MEDINA - Security framework to achieve a continuous audit-based certification in compliance with the EU-wide cloud security certification schemeObjectiveThe MEDINA project is an EU funded-research project working in the areas of cloud security performance and audit...
SIFIS – Secure Interoperable Full-Stack Internet of Things for Smart HomeSIFIS –
SIFIS - Secure Interoperable Full-Stack Internet of Things for Smart HomeObjectiveSIFIS-Home aims at providing a secure-by-design and consistent software framework for improving resilience of Interconnected Smart Home Systems at all stack levels. To this end, the...
IoTAC – Security By Design IoT Development and Certificate Framework with Front-end Access Control
IoTAC - Security By Design IoT Development and Certificate Framework with Front-end Access ControlObjectiveIoTAC project aims to deliver a novel, secure and privacy-friendly IoT architecture that will facilitate the development and operation of more resilient IoT...
CYRENE – The Challeges of Securing Critical Infrastructures in the Digital Age
CYRENE – The Challeges of Securing Critical Infrastructures in the Digital Age Objective Global Supply Chains are a way of life for modern business, becoming more complex and integrated. The organizations that operate within the Supply Chains have become smarter...
FISHY – A COORDINATED FRAMEWORK FOR CYBER RESILIENT SUPPLY CHAIN SYSTEMS
FISHY - A COORDINATED FRAMEWORK FOR CYBER RESILIENT SUPPLY CHAIN SYSTEMS ObjectiveBuilt upon a mix of highly skilled industrial and academic partners, FISHY aims at delivering a coordinated cyber resilient platform towards establishing trusted supply chains of ICT...
ASSURED – FUTURE PROOFING OF ICT TRUST CHAINS. SUSTAINABLE OPERATIONAL ASSURANCE AND VERIFICATION REMOTE GUARDS FOR SYSTEMS-OF-SYSTEMS SECURITY AND PRIVACY.
The vision of ASSURED is to design and implement a novel policy-driven, formally verified, runtime assurance framework in the complex domain of Cyber-Physical System (CPS). ObjectiveThe design and development of a novel, highly-usable, and resilient cybersecurity,...
