Semi-automated checking for regulatory compliance in e-Health

TL;DR

This paper introduces a semi-automated methodology for verifying regulatory compliance in e-Health services, exemplified by the Hospital at Home case, combining BPMN modeling with formal GDPR rule analysis.

Contribution

It presents a novel approach integrating business process modeling with formal logic to check compliance with legal regulations in healthcare.

Findings

Formalization of GDPR rules in Defeasible Deontic Logic

Application to Hospital at Home service case study

Demonstration of semi-automated compliance checking tool

Abstract

One of the main issues of every business process is to be compliant with legal rules. This work presents a methodology to check in a semi-automated way the regulatory compliance of a business process. We analyse an e-Health hospital service in particular: the Hospital at Home (HaH) service. The paper shows, at first, the analysis of the hospital business using the Business Process Management and Notation (BPMN) standard language, then, the formalization in Defeasible Deontic Logic (DDL) of some rules of the European General Data Protection Regulation (GDPR). The aim is to show how to combine a set of tasks of a business with a set of rules to be compliant with, using a tool.