A Framework for Supporting PET Selection Based on GDPR Principles

Pape, S.; Bkakria, A.; Chah, B.; Heymann, M. and Winkler, S. S.

In Proceedings of the 20th International Conference on Availability, Reliability and Security, ARES 2025, Ghent, Belgium, 11 August 2025 - 14 August 2025, pages 3-23, Springer, Cham, LNCS 15992, 2025.

Abstract

The General Data Protection Regulation (GDPR) lists seven privacy principles relating to the processing of personal data and requires the processor to implement appropriate technical and organizational measures (TOMs). In practice, TOMs are often adressed by organizational measures, but technical measures, i.e. Privacy-Enhancing Technologies (PETs), are rarely used to adress them. One reason for that might be the challenge to find an appropriate PET. The contribution of our paper is a framework to support the selection of PETs based on GDPR principles. For that purpose, we provide mappings between the trust model and GDPR principles, and between PET types and GDPR principles. Furthermore, we provide an assessment of the different maturity levels of PETs. We evaluated our framework by applying it to three different use cases in the automotive domain and it proved to be highly effective in guiding the identification and selection of candidate PETs.

PDFDOILinkLinkLinkLinkBibtexprivacypetsautomotiveautopsy

Bibtex

@InProceedings{PBCHS25ares,
  author    = {Sebastian Pape and Anis Bkakria and Badreddine Chah and Maurice Heymann and Sarah Syed Winkler},
  title     = {A Framework for Supporting PET Selection Based on GDPR Principles},
  booktitle = {Proceedings of the 20th International Conference on Availability, Reliability and Security, {ARES} 2025, Ghent, Belgium, 11 August 2025 - 14 August 2025},
  year      = {2025},
  editor    = {Dalla Preda, Mila and Schrittwieser, Sebastian and Naessens, Vincent and De Sutter, Bjorn},
  volume    = {15992},
  series    = {LNCS},
  pages     = {3-23},
  address   = {Cham},
  month     = {08},
  publisher = {Springer},
  doi       = {10.1007/978-3-032-00624-0_1},
  keywords  = {AUTOPSY, automotive, privacy, PETs},
  url       = {https://link.springer.com/chapter/10.1007/978-3-032-00624-0_1},
}

PDF