Analysing Privacy Aspects of Business Processes using Augmented Process Mining Results

Data protection requirements must be complied with when designing and executing business processes. Since organizations usually execute several processes with a large number of instances, systematic verification of compliance is difficult. Process mining offers a solution to this problem. However, existing process mining methods do not take into account information about the types of personal data processed and their reasons (permissions). For this problem, the augmentation of process mining results offers a promising approach. Process models generated by process mining are subsequently augmented to Information Confidentiality and Privacy Nets. These can then be used as a basis for compliance checking.