Towards a Model-based Regulatory Compliance Checking of Customer Agreements: A Case Study

Abstract

Services in cloud computing are used under the legal terms defined in their customer agreements. Providers have to specify their terms considering applicable regulations. However, varying terminologies make checking regulatory compliance and other analysis operations difficult to generalize and automate. In this paper, we present a case study for checking the compliance of the Google Maps customer agreement with the European General Data Protection Regulation (GDPR). To do so, we use a reference model to obtain the models for both documents, and check their regulatory compliance. Finally, we also discuss the challenges for automation found in this case study.