Modelling the General Data Protection Regulation

The new EU General Data Protection Regulation (GDPR) will soon replace the older data protection directive. Currently, the knowledge to comply with the regulation is only available in a human-readable format. If this knowledge is translated into machine-readable rules then computer based systems can ease data protection information retrieval as well as the process of checking GDPR compliance. In this paper, we model the obligations defined in the GDPR and then translate the model into a machine readable format by extending the Open Digital Rights Language (ODRL) ontology. The model is, in turn, used for a compliance checking tool.