Privacy policies outline the data practices of Online Social Networks (OSN) to comply with privacy regulations such as the EU-GDPR and CCPA. Several ontologies for modeling privacy regulations, policies, and compliance have emerged in recent years. However, they are limited in various ways: (1) they specifically model what is required of privacy policies according to one specific privacy regulation such as GDPR; (2) they provide taxonomies of concepts but are not sufficiently axiomatized to afford automated reasoning with them; and (3) they do not model data practices of privacy policies in sufficient detail to allow assessing the transparency of policies. This paper presents an OWL Ontology for Privacy Policies of OSNs, OPPO, that aims to fill these gaps by formalizing detailed data practices from OSNS' privacy policies. OPPO is grounded in BFO, IAO, OMRSE, and OBI, and its design is guided by the use case of representing and reasoning over the content of OSNs' privacy policies and evaluating policies' transparency in greater detail.
翻译:隐私政策概述了在线社交网络(OSN)的数据实践,以符合欧盟GDPR和CCPA等隐私法规。近年来,出现了多种用于建模隐私法规、政策及合规性的本体。然而,这些本体在不同方面存在局限性:(1)它们仅针对特定隐私法规(如GDPR)所要求的隐私政策内容进行建模;(2)它们提供了概念分类体系,但缺乏足够的公理化支持自动化推理;(3)它们未能以足够细节建模隐私政策中的数据实践,从而无法评估政策的透明度。本文提出了一种面向OSN隐私政策的OWL本体OPPO,旨在通过形式化OSN隐私政策中的详细数据实践来填补上述空白。OPPO基于BFO、IAO、OMRSE和OBI构建,其设计以表示和推理OSN隐私政策内容以及更细粒度评估政策透明度的用例为指导。