Regulatory Compliance Verification: A Privacy Preserving Approach

During the regulatory compliance verification, the verifier may need to gain access to private information that can present risks to the privacy of the entities being verified. Therefore, while ensuring that entities are compliant with the reg-ulations, such as GDPR, the regulatory compliance verification process need to safeguard the privacy of those entities. This paper proposes a privacy preserving regulatory compliance verification protocol, which has been integrated and implemented in a use case to verify the compliance with the article 32 of the GDPR. It provides a regulatory verification protocol, based on the attribute verification protocol, that reveals no private information of the entity being verified, other than the fact that it is compliant. Our results showed that the proposed protocol can efficiently verify the regulatory compliance of an entity by an external verifier.