Scholarlink

Organizations worldwide face significant challenges in translating privacy regulations into implementable technical requirements, creating a critical gap between legal privacy compliance and system development. This paper adapts KORA (Konkretisierung Rechtlicher Anforderungen - Concretization of Legal Requirements) methodology by incorporating established privacy patterns to systematically translate regulatory privacy requirements into applicable solutions. Applying this methodology, we examine Indonesia’s Personal Data Protection Law (UU-PDP) to propose technical solutions for privacy compliance. Our three-phase methodology systematically identifies regulatory requirements, maps them to established privacy objectives, including transparency, manageability, and intervenability, and connects them to implementable privacy patterns. Through rigorous analysis of the 76 articles in the UU-PDP, we extracted 183 distinct legal criteria in 59 articles, revealing that transparency, manageability, and intervenability emerge as predominant regulatory priorities. Our analysis identifies 53 applicable privacy patterns, with the implementation of just 10 key patterns addressing half of the regulatory requirements, providing an efficient pathway toward compliance for resource-constrained organizations. The research contributes a privacy-oriented regulatory engineering framework and empirical evidence that structured approaches can achieve substantial compliance coverage through targeted technical implementations.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Privacy Patterns and Objectives for Legally Compliant Software Based on the Indonesia’s PDP Law

  • 会议论文

  • 发表日期：

    2026年

查看全文
  • Guntur Budi Herwanto,
  • Arif Nurwidyantoro,
  • Annisa Maulida Ningtyas,
  • Muhammad Oriza Nurfajri,
  • Gerald Quirchmayr,
  • A Min Tjoa

摘要

Organizations worldwide face significant challenges in translating privacy regulations into implementable technical requirements, creating a critical gap between legal privacy compliance and system development. This paper adapts KORA (Konkretisierung Rechtlicher Anforderungen - Concretization of Legal Requirements) methodology by incorporating established privacy patterns to systematically translate regulatory privacy requirements into applicable solutions. Applying this methodology, we examine Indonesia’s Personal Data Protection Law (UU-PDP) to propose technical solutions for privacy compliance. Our three-phase methodology systematically identifies regulatory requirements, maps them to established privacy objectives, including transparency, manageability, and intervenability, and connects them to implementable privacy patterns. Through rigorous analysis of the 76 articles in the UU-PDP, we extracted 183 distinct legal criteria in 59 articles, revealing that transparency, manageability, and intervenability emerge as predominant regulatory priorities. Our analysis identifies 53 applicable privacy patterns, with the implementation of just 10 key patterns addressing half of the regulatory requirements, providing an efficient pathway toward compliance for resource-constrained organizations. The research contributes a privacy-oriented regulatory engineering framework and empirical evidence that structured approaches can achieve substantial compliance coverage through targeted technical implementations.