简化个人数据访问请求：从阻碍性流程到自动化Web工作流
Streamlining personal data access requests: From obstructive procedures to automated web workflows
AI总结：
针对当前数据主体访问请求（DSARs）需手动执行、难以充分发挥数据访问权价值的问题，研究提出含通用工作流模型、形式化语言、可扩展存储库及浏览器执行引擎的自动化方案，实现一键DSARs并验证了其可行性。
摘要：
透明度与数据可携性是GDPR等现代隐私立法的两大核心原则。从监管角度看，为个人（数据主体）提供其数据访问权是落实这些原则的核心基石。然而，与其他隐私原则及相应监管规定不同，这项数据访问权迄今仅得到了极少的技术层面体现。因此，与执行数据主体访问请求（DSARs）相关的流程仍需手动完成，阻碍了数据访问概念充分发挥其潜力。\n 为解决这一问题，我们提出了一种执行DSARs的自动化方法，该方法采用了现代Web自动化技术。具体而言，我们提出了一个通用DSAR工作流模型、一种用于表示不同服务提供商（控制者）特定工作流的对应形式化语言、一个可公开访问且可扩展的工作流存储库，以及一个基于浏览器的执行引擎，共同实现“一键式”DSARs。为验证我们的方法和技术概念，我们对15家广泛使用的服务提供商的DSAR工作流进行了研究、形式化处理并公开发布，同时在一款公开可用的浏览器扩展中实现了该执行引擎。总体而言，我们由此为自动化数据主体访问请求铺平了道路，并为各类后续技术手段奠定了基础，帮助Web用户更好地了解自己在不同服务提供商处的隐私相关暴露情况。
英文摘要：
Transparency and data portability are two core principles of modern privacy legislations such as the GDPR. From the regulatory perspective, providing individuals (data subjects) with access to their data is a main building block for implementing these. Different from other privacy principles and respective regulatory provisions, however, this right to data access has so far only seen marginal technical reflection. Processes related to performing data subject access requests (DSARs) are thus still to be executed manually, hindering the concept of data access from unfolding its full potential. To tackle this problem, we present an automated approach to the execution of DSARs, employing modern techniques of web automation. In particular, we propose a generic DSAR workflow model, a corresponding formal language for representing the particular workflows of different service providers (controllers), a publicly accessible and extendable workflow repository, and a browser-based execution engine, altogether providing ``one-click'' DSARs. To validate our approach and technical concepts, we examine, formalize and make publicly available the DSAR workflows of 15 widely used service providers and implement the execution engine in a publicly available browser extension. Altogether, we thereby pave the way for automated data subject access requests and lay the groundwork for a broad variety of subsequent technical means helping web users to better understand their privacy-related exposure to different service providers.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
