Preventing Consent Violations Due to Self-Adaptation at Runtime in Self-Adaptive Systems that Process Personal Data

Some self-adaptive systems process the personal data of individuals in the European Union and must therefore comply with the General Data Protection Regulation (GDPR). However, ensuring GDPR compliance is challenging because these systems change themselves at runtime via self-adaptation. Specifically, self-adaptation can lead to consent violations by changing the purposes of data processing or by changing the risks to the confidentiality, integrity, and availability of personal data. In my PhD thesis, I propose CASA, an approach for preventing such consent violations caused by self-adaptation at runtime. This paper outlines the current status of my research for CASA, within the scope of my PhD thesis.