We Know What You Did Last Session: Policy-Based Query Classification for Data-Privacy Compliance With the DataEconomist

Abstract

This paper explains the demonstration of the DataEconomist, a framework for policy-based SQL query classification according to data-privacy directives. Our framework automatically derives query meta-information based on query-log analysis and provides user-friendly, graphical interfaces for browsing and filtering queries based on this meta-information. We aim to complement existing data-privacy approaches and enable privacy officers to define domain-specific compliance policy rules based on the graphical filter mechanisms. Policies automatically classify queries as compliant or non-compliant regarding their processing of personal data. During our demonstration, conference attendees assess our system in several scenarios. They filter queries based on various query meta-information, learn how to define compliance policies for automatic query classification without profound technical knowledge, and test this classification by formulating non-compliant queries.