Reference : Towards legal compliance by correlating Standards and Laws with a semi-automated meth...
Scientific congresses, symposiums and conference proceedings : Paper published in a book
Engineering, computing & technology : Multidisciplinary, general & others
Law / European Law
http://hdl.handle.net/10993/28957
Towards legal compliance by correlating Standards and Laws with a semi-automated methodology
English
Bartolini, Cesare[University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) >]
Lenzini, Gabriele[University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) >]
Robaldo, Livio[University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
Nov-2016
Proceedings of the 28 Benelux Conference on Artificial Intelligence (BNAIC)
Yes
No
International
28th Benelux Conference on Artificial Intelligence (BNAIC)
from 10-11-2016 to 11-11-2016
Amsterdam
The Netherlands
[en] Since legal regulations do not generally provide clear parameters to determine when their requirements are met, achieving legal compliance is not trivial. If there were a clear correspondence between the provisions of a specific standard and the regulation’s requirements, one could implement the standard to claim a presumption of compliance. However, finding those correspondences is a complex process; additionally, correlations may be overridden in time, for instance, because newer court decisions change the interpretation of certain provisions. To help solve this problem, we present a framework that supports legal experts in recognizing correlations between provisions in a standard and requirements in a given law. The framework relies on state-of-the-art Natural Language Semantics techniques to process the linguistic terms of the two documents, and maintains a knowledge base of the logic representations of the terms, together with their defeasible correlations, both formal and substantive. An application of the framework is shown by comparing a provision of the European General Data Protection Regulation against the ISO/IEC 27018:2014 standard.