{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,12]],"date-time":"2025-11-12T14:22:00Z","timestamp":1762957320997,"version":"3.40.5"},"reference-count":0,"publisher":"IOS Press","isbn-type":[{"type":"print","value":"9781643684727"},{"type":"electronic","value":"9781643684734"}],"license":[{"start":{"date-parts":[[2023,12,7]],"date-time":"2023-12-07T00:00:00Z","timestamp":1701907200000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,12,7]]},"abstract":"<jats:p>The purpose limitation principle is a GDPR cornerstone that aims to minimize data processing risks by limiting instances of personal data access and usage. We model purpose as an action or sequences of actions and formalize action relationships to derive purpose-based permissions. Based on these permissions, we introduce a novel purpose-based access control model with a purpose matching algorithm illustrated with a healthcare research use case.<\/jats:p>","DOI":"10.3233\/faia230958","type":"book-chapter","created":{"date-parts":[[2023,12,11]],"date-time":"2023-12-11T09:37:02Z","timestamp":1702287422000},"source":"Crossref","is-referenced-by-count":1,"title":["Towards a Purpose-Based Access Control Model Derived from the Purpose Limitation Principle"],"prefix":"10.3233","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4790-7024","authenticated-orcid":false,"given":"Milen G.","family":"Kebede","sequence":"first","affiliation":[{"name":"University of Amsterdam"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8113-2221","authenticated-orcid":false,"given":"Thomas","family":"van Binsbergen","sequence":"additional","affiliation":[{"name":"University of Amsterdam, TNO, Princess Maxima Center for Pediatric Oncology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3699-8303","authenticated-orcid":false,"given":"Tom","family":"van Engers","sequence":"additional","affiliation":[{"name":"University of Amsterdam, TNO, Princess Maxima Center for Pediatric Oncology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1364-9007","authenticated-orcid":false,"given":"Dannis G.","family":"van Vuurden","sequence":"additional","affiliation":[{"name":"University of Amsterdam, TNO, Princess Maxima Center for Pediatric Oncology"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"7437","container-title":["Frontiers in Artificial Intelligence and Applications","Legal Knowledge and Information Systems"],"original-title":[],"link":[{"URL":"https:\/\/ebooks.iospress.nl\/pdf\/doi\/10.3233\/FAIA230958","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,12,11]],"date-time":"2023-12-11T09:37:04Z","timestamp":1702287424000},"score":1,"resource":{"primary":{"URL":"https:\/\/ebooks.iospress.nl\/doi\/10.3233\/FAIA230958"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12,7]]},"ISBN":["9781643684727","9781643684734"],"references-count":0,"URL":"https:\/\/doi.org\/10.3233\/faia230958","relation":{},"ISSN":["0922-6389","1879-8314"],"issn-type":[{"type":"print","value":"0922-6389"},{"type":"electronic","value":"1879-8314"}],"subject":[],"published":{"date-parts":[[2023,12,7]]}}}