RSLingo4Privacy – Tools to Improve Consistency Between Privacy Policies and Current Practices

Alberto Manuel Silva  Travis Breaux  "We recognize that this project has a clear objective to put our two research groups working together in a relevant, critical and technological challenge but also that more work would be performed. That means that during this project we will look forward new research projects (e.g., in the context of the Portuguese FCT or NSF) as well as we will consider to transfer its main results to the software industry, in particular to those companies that deals with the development and operation of large-scale information systems that integrate and use multi-source data." Alberto Silva and Travis Breaux 
Portuguese PI:
Alberto Manuel Rodrigues Silva (INESC ID/IST-UL)
Travis Breaux


Research teams: INESC ID; IST-UL; CMU
Funding Reference: FCT CMUP-EPB/TIC/0053/2013
Duration: 12 months 
Keywords: Privacy; Requirements; Formal specification; Privacy compliance

The main goal of this project is to improve privacy by providing companies a set of languages and tools to align their policies with their practices, namely by introducing a privacy requirements specification into the regular software development process that allow to align multi-party expectations across multi-tier applications. To that end, and in the context of recent results from the RSLingo approach and our privacy policy analysis, we intend to research techniques that allow users to specify privacy-specific linguistics patterns (in RSL-PL) to allow automatic extraction of the relevant information from privacy policies into an equivalent intermediate (RSL-IL) format, and map or transform these specifications into equivalent Eddy specifications that, with proper tools allow checking conflicts between these privacy policies and user preferences and the developers’ privacy specifications. Moreover, the relevance of this research will be demonstrated through the analysis of real world privacy policies, namely those posted by the most popular web sites.


The Phase II of the Carnegie Mellon Portugal Program emphasizes advanced education and research that can lead to significant entrepreneurial impact. The Early Bird Projects are designed to assist small teams of researchers from Portuguese institutions, Carnegie Mellon University and industry partners, to jumpstart high-impact potential activities of strategic relevance for the Program. 

Research Opportunities more