一句话：提出 CompAi 工具，用 AI 语义分析隐私政策对 GDPR 的完整性，自动检测缺失要求，准确率约 96%。
隐私政策是软件系统与用户之间的协议，必须完整覆盖 GDPR 对个人数据保护的要求，但人工核查其完整性困难且易错。CompAi 针对给定隐私政策，将其文本内容与一个全面的概念模型进行语义分析，该模型捕获任何政策中可能出现的所有信息类型；在此基础上结合最终用户的输入，确定输入政策中潜在的不完整性违规。评估表明，CompAi 检测不完整性违规的准确率约为 96%。该工具会生成详细报告，便于专家审查和验证，其源码已公开，并提供演示。
We introduce CompAı - a tool for checking the completeness of privacy policies against the general data protection regulation (GDPR). CompAı facilitates the analysis of privacy policies to check their compliance to GDPR requirements. Since privacy policies serve as an agreement between a software system and its prospective users, the policy must fully capture such requirements to ensure that collected personal data of individuals (or users) remains protected as specified by the GDPR. For a given privacy policy, CompAı semantically analyzes its textual content against a comprehensive conceptual model which captures all information types that might appear in any policy. Based on this analysis, alongside some input from the end user, CompAı can determine the potential incompleteness violations in the input policy with an accuracy of ≈96%. CompAı generates a detailed report that can be easily reviewed and validated by experts. The source code of CompAı is publicly available on https://figshare.com/articles/online_resource/CompAI/23676069, and a demo of the tool is available on https://youtu.be/zwa_tM3fXHU.
@inproceedings{paperbot8321,
title = {CompAi: A Tool for GDPR Completeness Checking of Privacy Policies using Artificial Intelligence},
author = {Orlando Amaral Cejas and Sallam Abualhaija and Lionel C. Briand},
booktitle = {ASE},
year = {2024},
doi = {10.1145/3691620.3695353}
}