The application and development of process mining techniques face significant challenges due to the lack of publicly available real-life event logs. One reason for companies to abstain from sharing their data are privacy and confidentiality concerns. Privacy concerns refer to personal data as specified in the GDPR and have been addressed in existing work by providing privacy-preserving techniques for event logs. However, the concept of confidentiality in event logs not pertaining to individuals remains unclear, although they might contain a multitude of sensitive business data. This work addresses confidentiality of process data based on the privacy and confidentiality engineering method (PCRE). PCRE interactively explores privacy and confidentiality requirements regarding process data with different stakeholders and defines privacy-preserving actions to address possible concerns. We co-construct and evaluate PCRE based on structured interviews with process analysts in two manufacturing companies. PCRE is generic, hence applicable in different application domains. The goal is to systematically scrutinize process data and balance the trade-off between privacy and utility loss.

翻译：由于缺乏公开可用的真实事件日志，流程挖掘技术的应用与发展面临重大挑战。企业不愿共享数据的原因之一是隐私与保密性问题。隐私问题涉及GDPR规定的个人数据，现有研究已通过提供事件日志的隐私保护技术加以应对。然而，事件日志中不涉及个人但可能包含大量敏感业务数据的保密性概念仍不明确。本研究基于隐私与保密性工程方法（PCRE）探讨流程数据的保密性问题。PCRE通过与不同利益相关者交互式探讨流程数据的隐私与保密性需求，并定义隐私保护措施以应对潜在问题。我们通过与两家制造企业的流程分析师进行结构化访谈，共同构建并评估了PCRE方法。PCRE具有通用性，可适用于不同应用领域。其目标是系统化审查流程数据，平衡隐私保护与效用损失之间的权衡关系。