Process Modeling for Privacy - Conformant Biobanking: Case Studies on Modeling in UMLsec

摘要

The continuing progress in research on human genetics is highly increasing the demand on large surveys of voluntary donors' data and biospecimens. By this new dimension of acquiring and providing data and biospecimens, a new quality of biobanking arose. Using automated data and biospecimens handling along with modern communication channels-such as the world wide web-assigns new challenges to protection of the donor's privacy. Within current discussions on privacy and data protection an emerging result is the need of auditing privacy and data protection within biobanks. For this purpose, finding a proper way for describing biobanks in terms of a data protection audit is a vital issue. This paper presents how modeling in UMLsec can improve the description of biobanks with the objective of performing a data protection audit. It demonstrates the use of UMLsec for describing security characteristics regarding data protection issues on the basis of two case studies.