NLP-based Automated Compliance Checking of Data Processing Agreements against GDPR

Understand

Processing personal data is regulated in Europe by the General Data Protection Regulation (GDPR) through data processing agreements (DPAs).

• Checking the compliance of DPAs contributes to the compliance verification of software systems as DPAs are an important source of requirements for software development involving the processing of personal data.
• However, manually checking whether a given DPA complies with GDPR is challenging as it requires significant time and effort for understanding and identifying DPA-relevant compliance requirements in GDPR and then verifying these requirements in the DPA.
• In this paper, we propose an automated solution to check the compliance of a given DPA against GDPR.