Towards a reference framework for legal compliance: a detailed overview

This report presents an inventory of data protection goals, which are extracted from several relevant regulations, like the European Data Protection Directive and the US Health Insurance Portability and Accountability Act (HIPAA). The legal sources are jointly analyzed in order to extract a taxonomy of protection goals. The taxonomy provides an accessible means for technical people to approach the complex field of legal compliance. Further, the taxonomy represents a useful vehicle to understand what goals are to be addressed at a technical level, rather than at the organizational level. Finally, technical goals are also annotated with additional information that can be leveraged to create a solution strategy in the system being developed.nrpages: 100status: publishe