Smart Contracts and Smart Disclosure: Coding a GDPR Compliance Framework

TY - CHAP

T1 - Smart Contracts and Smart Disclosure

T2 - Coding a GDPR Compliance Framework

AU - Corrales Compagnucci, Marcelo

AU - Jurčys, Paulius

AU - Kousiouris, George

PY - 2019/1/30

Y1 - 2019/1/30

N2 - This chapter analyses some of the main legal requirements laid down in the new European General Data Protection Regulation (GDPR) with regard to hybrid Cloud Computing transformations. The GDPR imposes several restrictions on the storing, accessing, processing and transferring of personal data. This has generated some concerns with regard to its practicability and flexibility given the dynamic nature of the Internet. The current architecture and technical features of the Cloud do not allow adequate control for end-users. Therefore, in order for the Cloud adopters to be legally compliant, the design of Cloud Computing architectures should include additional automated capabilities and certain nudging techniques to promote better choices. This chapter explains how to fine tune and effectively embed these legal requirements at the earlier stages of the architectural design of the computer code. This automated process focuses on Smart Contracts and Service Level Agreements (SLAs) frameworks, which include selection tools that take an information schema and a pseudo-code that follows a programming logic to process information based on that schema. The pseudo-code is essentially the easiest way to write and design computer code, which can check automatically the legal compliance of the contractual framework. It contains a set of legal questions that have been specifically designed to urge Cloud providers to disclose relevant information and comply with the legal requirements established by the GDPR.

AB - This chapter analyses some of the main legal requirements laid down in the new European General Data Protection Regulation (GDPR) with regard to hybrid Cloud Computing transformations. The GDPR imposes several restrictions on the storing, accessing, processing and transferring of personal data. This has generated some concerns with regard to its practicability and flexibility given the dynamic nature of the Internet. The current architecture and technical features of the Cloud do not allow adequate control for end-users. Therefore, in order for the Cloud adopters to be legally compliant, the design of Cloud Computing architectures should include additional automated capabilities and certain nudging techniques to promote better choices. This chapter explains how to fine tune and effectively embed these legal requirements at the earlier stages of the architectural design of the computer code. This automated process focuses on Smart Contracts and Service Level Agreements (SLAs) frameworks, which include selection tools that take an information schema and a pseudo-code that follows a programming logic to process information based on that schema. The pseudo-code is essentially the easiest way to write and design computer code, which can check automatically the legal compliance of the contractual framework. It contains a set of legal questions that have been specifically designed to urge Cloud providers to disclose relevant information and comply with the legal requirements established by the GDPR.

KW - Faculty of Law

KW - Smart Contracts, GDPR, Smart Disclosures, Nudges, Service Level Agreements, Pseudo-code

UR - https://www.springer.com/gp/book/9789811360855

M3 - Book chapter

SN - 978-981-13-6085

T3 - Perspectives in Law, Business and Innovation

SP - 189

EP - 220

BT - Legal Tech, Smart Contracts and Blockchain

A2 - Corrales Compagnucci, Marcelo

A2 - Fenwick, Mark

A2 - Haapio, Helena

PB - Springer Nature Singapore

CY - Singapore

ER -