Semi-automated checking for regulatory compliance in e-Health
- URL: http://arxiv.org/abs/2110.07710v1
- Date: Thu, 14 Oct 2021 20:58:02 GMT
- Title: Semi-automated checking for regulatory compliance in e-Health
- Authors: Ilaria Angela Amantea, Livio Robaldo, Emilio Sulis, Guido Boella,
Guido Governatori
- Abstract summary: This work presents a methodology check in a semi-automated regulatory compliance of a business process.
We analyse an e-Health hospital service in particular: the Hospital at Home (HaH) service.
- Score: 0.41998444721319206
- License: http://creativecommons.org/licenses/by/4.0/
- Abstract: One of the main issues of every business process is to be compliant with
legal rules. This work presents a methodology to check in a semi-automated way
the regulatory compliance of a business process. We analyse an e-Health
hospital service in particular: the Hospital at Home (HaH) service. The paper
shows, at first, the analysis of the hospital business using the Business
Process Management and Notation (BPMN) standard language, then, the
formalization in Defeasible Deontic Logic (DDL) of some rules of the European
General Data Protection Regulation (GDPR). The aim is to show how to combine a
set of tasks of a business with a set of rules to be compliant with, using a
tool.
Related papers
- Towards a HIPAA Compliant Agentic AI System in Healthcare [3.3123773366516645]
This paper introduces a HIPAA-compliant Agentic AI framework that enforces regulatory compliance through dynamic, context-aware policy enforcement.
Our framework integrates three core mechanisms: (1) Attribute-Based Access Control (ABAC) for granular governance, (2) a hybrid PHI sanitization pipeline combining patterns and BERT-based model to minimize leakage, and (3) immutable audit trails for compliance verification.
arXiv Detail & Related papers (2025-04-24T15:38:20Z) - Lawful and Accountable Personal Data Processing with GDPR-based Access and Usage Control in Distributed Systems [0.0]
This paper proposes a case-generic method for automated normative reasoning that establishes legal arguments for the lawfulness of data processing activities.
The arguments are established on the basis of case-specific legal qualifications made by privacy experts, bringing the human in the loop.
The resulting system is designed and critically assessed in reference to requirements extracted from the GPDR.
arXiv Detail & Related papers (2025-03-10T10:49:34Z) - A Law Reasoning Benchmark for LLM with Tree-Organized Structures including Factum Probandum, Evidence and Experiences [76.73731245899454]
We propose a transparent law reasoning schema enriched with hierarchical factum probandum, evidence, and implicit experience.
Inspired by this schema, we introduce the challenging task, which takes a textual case description and outputs a hierarchical structure justifying the final decision.
This benchmark paves the way for transparent and accountable AI-assisted law reasoning in the Intelligent Court''
arXiv Detail & Related papers (2025-03-02T10:26:54Z) - RegNLP in Action: Facilitating Compliance Through Automated Information Retrieval and Answer Generation [51.998738311700095]
Regulatory documents, characterized by their length, complexity and frequent updates, are challenging to interpret.
RegNLP is a multidisciplinary subfield aimed at simplifying access to and interpretation of regulatory rules and obligations.
ObliQA dataset contains 27,869 questions derived from the Abu Dhabi Global Markets (ADGM) financial regulation document collection.
arXiv Detail & Related papers (2024-09-09T14:44:19Z) - Towards an Enforceable GDPR Specification [49.1574468325115]
Privacy by Design (PbD) is prescribed by modern privacy regulations such as the EU's.
One emerging technique to realize PbD is enforcement (RE)
We present a set of requirements and an iterative methodology for creating formal specifications of legal provisions.
arXiv Detail & Related papers (2024-02-27T09:38:51Z) - Identification of Regulatory Requirements Relevant to Business
Processes: A Comparative Study on Generative AI, Embedding-based Ranking,
Crowd and Expert-driven Methods [10.899912290518648]
This work examines how legal and domain experts can be assisted in the assessment of relevant requirements.
We compare an embedding-based NLP ranking method, a generative AI method using GPT-4, and a crowdsourced method with the purely manual method of creating labels by experts.
A gold standard is created for both BPMN2.0 processes and matched to real-world requirements from multiple regulatory documents.
arXiv Detail & Related papers (2024-01-02T12:08:31Z) - Legal Requirements Analysis [2.3349787245442966]
We explore a variety of methods for analyzing legal requirements and exemplify them on representations.
We describe possible alternatives for creating machine-analyzable representations from regulations.
arXiv Detail & Related papers (2023-11-23T09:31:57Z) - The Design and Implementation of a National AI Platform for Public
Healthcare in Italy: Implications for Semantics and Interoperability [62.997667081978825]
The Italian National Health Service is adopting Artificial Intelligence through its technical agencies.
Such a vast programme requires special care in formalising the knowledge domain.
Questions have been raised about the impact that AI could have on patients, practitioners, and health systems.
arXiv Detail & Related papers (2023-04-24T08:00:02Z) - Bridging between LegalRuleML and TPTP for Automated Normative Reasoning
(extended version) [77.34726150561087]
LegalRuleML is an XML-based representation framework for modeling and exchanging normative rules.
The TPTP input and output formats are general-purpose standards for the interaction with automated reasoning systems.
We provide a bridge between the two communities by defining a logic-pluralistic normative reasoning language based on the TPTP format.
arXiv Detail & Related papers (2022-09-12T08:42:34Z) - Automated Compliance Blueprint Optimization with Artificial Intelligence [1.90073733366566]
In banking and healthcare, one of the major hindrances to the adoption of cloud computing is compliance with regulatory standards.
This is a complex problem due to many regulatory and technical specification (techspec) documents that the companies need to comply with.
We present early results to identify the mapping between techspecs and regulation controls, and discuss challenges that must be overcome for this solution to be fully practical.
arXiv Detail & Related papers (2022-06-22T15:59:16Z) - Inverse Contextual Bandits: Learning How Behavior Evolves over Time [89.59391124399927]
We seek an approach to policy learning that provides interpretable representations of decision-making.
First, we model the behavior of learning agents in terms of contextual bandits, and formalize the problem of inverse contextual bandits (ICB)
Second, we propose two algorithms to tackle ICB, each making varying degrees of assumptions regarding the agent's learning strategy.
arXiv Detail & Related papers (2021-07-13T18:24:18Z) - CoCoMoT: Conformance Checking of Multi-Perspective Processes via SMT
(Extended Version) [62.96267257163426]
We introduce the CoCoMoT (Computing Conformance Modulo Theories) framework.
First, we show how SAT-based encodings studied in the pure control-flow setting can be lifted to our data-aware case.
Second, we introduce a novel preprocessing technique based on a notion of property-preserving clustering.
arXiv Detail & Related papers (2021-03-18T20:22:50Z) - Machine Understandable Policies and GDPR Compliance Checking [9.032680855473986]
Towards SPECIAL H2020 project aims to provide a set of tools that can be used by data controllers that automatically check if personal data sharing complies with obligations set forth with obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with regulatory obligations set forth with
arXiv Detail & Related papers (2020-01-24T09:41:47Z)
This list is automatically generated from the titles and abstracts of the papers in this site.
This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.