Developing a framework for semantic consent management

The rapid development of information and communication technologies enables the sharing and distribution of personal data more easily. As a result of this sharing, personal data is becoming accessible, regardless of location and time. In addition to this ease of access, privacy and security risks arise and private life abuse is occurred. In order to prevent this abuse and to protect the personal fundamental rights and freedoms, legal regulations are made in national and international areas to ensure the privacy of personal data. In Turkey, the Personal Data Protection Law - PDPL No. 6698 was adopted in 2016 in order to protect people's fundamental rights and freedoms and to determine the principles and procedures that persons should comply with. In addition, the Global Data Protection Regulation - GDPR, a regulation in EU law on data protection and privacy in the European Union (EU) and the European Economic Area (EEA) was issued in April 2016 and entered into force in May 2018. According to both PDPL and GDPR, personal consent is required in order to process personal data. According to the consent of the person, consent management becomes an important and necessary process in the management of the process of processing personal data. Within the scope of this thesis, a semantic consent management framework has been developed to protect the privacy of personal data. It is necessary to re-use the domain information and to make inferences in order to perform an effective consent management. Therefore, a semantic solution is proposed instead of an electronic consent management. In this regard, the text of the law is taken as a supporting document for the proposed solution. For this purpose, the system elements are determined by analyzing the law. Consent Ontology using this system elements and a framework that performs consent management have been developed. Within the developed framework, case studies were conducted in two different domains.