Declarative access control for aggregations of multiple ownership data

Abstract

Data aggregation operations are popular in domains like data analytics, machine learning and artificial intelligence. However, despite the availability of information, situations like fragmented ownership and legal frameworks hinder data processing, requiring companies to design complex human-driven processes in order to gather, aggregate, and process data in a compliant way. Our proposal addresses this lack of automation with an access control mechanism extending XACML, an access control standard with language and implementation, to regulate operations with multiple data policies.