A requirements management framework for privacy compliance

Proceedings of the 10th Workshop on Requirements Engineering, WER 2007

Volumn , Issue , 2007, Pages 149-159

  Ghanavati, Sepideh ^a   Amyot, Daniel ^a   Peyton, Liam ^a  

^a UNIVERSITY OF OTTAWA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

BUILDING INFORMATION SYSTEM; BUSINESS PROCESS; COMPLIANCE TRACKING; HEALTH INFORMATIONS; META MODEL; PRIVACY COMPLIANCE; PRIVACY LEGISLATION; REQUIREMENTS MANAGEMENT; USER REQUIREMENTS NOTATION;

HEALTH CARE; MEDICAL COMPUTING; REQUIREMENTS ENGINEERING;

DATA PRIVACY;

EID: 45849118312     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (17)

1. Amyot, D.: Introduction to the User Requirements Notation: Learning by Example. Computer Networks, 42(3), 285-301, 21 June 2003.
2. Antón, A. I.; Earp, J. B. and Reese, A.: Analyzing Website Privacy Requirements Using a Privacy Goal Taxonomy. 10th IEEE Joint International Requirements Engineering Conference, IEEE CS Press, 23-31, 2002.
3. Breaux, T. D., Vail, M. V., and Antón, A.I.: Towards Regulatory Compliance: Extracting Rights and Obligations to Align Requirements with Regulations. 14th IEEE Requirements Engineering Conference, Minneapolis, USA, 46-55, 2006. (Pubitemid 351424199)
4. Darimont, R., Lemoine, M.: Goal-oriented Analysis of Regulations, International Workshop on Regulations Modelling and their Verification & Validation (REMO2V06), Luxemburg, 2006.
5. European Union: Directive on Privacy and Electronic Communication, 2002. http://europa.eu.int/eur-lex/pri/en/oj/dat/2002/l-201/l-20120020731en00370047. pdfaccessed:March, 2007.
6. Ghanavati, S., Amyot, D., and Peyton, L.: Towards a Framework for Tracking Legal Compliance in Healthcare. 19th International Conference on Advanced Information Systems Engineering (CAiSE'07), Trondheim, Norway, 2007.
7. Government of Canada, Health Information Custodians in the Province of Ontario Exemption Order, http://canadagazette.gc.ca/partII/2005/20051214/html/ sor399-e.html, accessed March 2007.
8. Government of Ontario: Personal Health Information Protection Act, 2004, http://www.e-laws.gov.on.ca/DBLaws/Statutes/English/04p03-e.htm accessed March, 2007.
9. Government of Ontario: Personal Health Information Protection Act, 2004, ONTARIO REGULATION 329/04, Amended to O. Reg. 537/06, http://www.elaws.gov.on. ca/DBLaws/Regs/English/040329-e.htm accessed March, 2007.
10. He, Q., Otto, P., Antón, A., and Jones, L.: Ensuring Compliance between Policies, Requirements and Software Design: A Case Study. 4th IEEE International Workshop on Information Assurance (IWIA'06), Royal Holloway, UK, 2006.
11. ITU-T: User Requirements Notation (URN) - Language Requirements and Framework. ITU-T Recommendation Z.150. Geneva, Switzerland, February 2003.
12. Kealey, J., Kim, Y., Amyot, D., and Mussbacher, G.: Integrating an Eclipse-Based Scenario Modeling Environment with a Requirements Management System. 2006 IEEE Canadian Conf. on Electrical and Computer Engineering (CCECE06), Ottawa, Canada, May 2006.
13. Rifaut, A, and Feltus, C.: Improving Operational Risk Management Systems by Formalizing the Basel II Regulation with Goal Models and the ISO/IEC 15504 Approach. International Workshop on Regulations Modelling and their Verification & Validation (REMO2V06), Luxemburg, 2006.
14. Roy, J.-F., Kealey, J., and Amyot, D.: Towards Integrated Tool Support for the User Requirements Notation. SAM 2006: Fifth Workshop on System Analysis and Modelling, LNCS 4320, Springer, 198-215, 2006. http://jucmnav. softwareengineering.ca/.
15. Telelogic AB: DOORS 8.1. http://www.telelogic.com/products/doors/doors/ Accessed March 2007.
16. United States Department of Health and Human Services: Medical Privacy - National Standards to Protect the Privacy of Personal Health Information, http://www.hhs.gov/ocr/hipaa/accessed March 2007.
17. Webster, I., Ivanova, V., and Cysneiros, L.M.: Reusable Knowledge for Achieving Privacy: A Canadian Health Information Technologies Perspective. Proc. of VIII Workshop in Requirements Engineering (WER'05), Porto, Portugal, 112-122, 2005.