Processamento de consulta orientado a propósitos: uma extensão da Linguagem SQL

Abstract

With the global population increasingly connected to the internet and the growing use of information systems in services and processes, there has never been so much data available to be processed, analyzed and researched, which enabled an information revolution. However, the real-time collection and processing of users’ personal data and consumer custom by giant advertising and software companies raises doubts about the legitimacy and legality of how individuals’ personal data has been handled. Because of this, it is natural that governments turn their attention to approving new legislation that defines and reinforces their citizens rights. The GDPR’s implementation was a milestone for data security legislation, that defined more strict rules and inspired other governments to do the same, such as the Brazilian government, which approved the LGPD. GDPR defined, in particular, that users have the right to determine for what purposes their personal data may be processed. In this work, we investigate the implication of this right in DBMSs’ access control, and we propose the extension of SQL to allow purpose management in DBMSs.