# Constructing Independently Verifiable Privacy-Compliant Type Systems for Message Passing between Black-Box Components

## TL;DR

This paper introduces a formal method for designing privacy-compliant message-passing architectures between black-box components, ensuring privacy guarantees without requiring source code access.

## Contribution

It presents algorithms that extend architectures to satisfy privacy constraints, enabling privacy-by-design in black-box component interactions.

## Key findings

- Algorithms successfully enforce privacy constraints
- Architecture extensions guarantee privacy properties
- Applicable without source code access

## Abstract

Privacy by design (PbD) is the principle that privacy should be considered at every stage of the software engineering process. It is increasingly both viewed as best practice and required by law. It is therefore desirable to have formal methods that provide guarantees that certain privacy-relevant properties hold. We propose an approach that can be used to design a privacy-compliant architecture without needing to know the source code or internal structure of any individual component. We model an architecture as a set of agents or components that pass messages to each other. We present in this paper algorithms that take as input an architecture and a set of privacy constraints, and output an extension of the original architecture that satisfies the privacy constraints.