Critical Analysis of LPL according to Articles 12 - 14 of the GDPR
Armin Gerl, Dirk Pohl · 2018
On the 25th May 2018 the General Data Protection Regulation (GDPR) will enter into force implying new challenges to both legal and computer sciences. The Layered Privacy Language (LPL) is intended to model privacy policies to enforce policy-based, privacy-preserving processing. In this paper, we identify requirements for privacy policies based on Art. 12 - 14 of the GDPR, analyze LPL according to the derived requirements, and propose improvements for LPL accordingly.