Wout Slabbinck, Julián Andrés Rojas, Beatriz Esteves, Pieter Colpaert, Ruben Verborgh
Extended Semantic Web Conference (ESWC) 2025 Conference
This paper proposes a systematic approach to evaluating ODRL policies to enable meaningful negotiation over privacy preferences on the Web, introducing a Compliance Report Model, a test suite, and an ODRL Evaluator to support accurate, interoperable, and enforceable policy interpretations in line with regulatory requirements.
[Proceedings] [Open-Access] [Compliance Report Model] [Test Suite] [ODRL Evaluator] [Demo]
Wout Slabbinck, Julián Andrés Rojas, Beatriz Esteves, Pieter Colpaert, Ruben Verborgh
Extended Semantic Web Conference (ESWC) 2025 Conference
This paper proposes a systematic approach to evaluating ODRL policies to enable meaningful negotiation over privacy preferences on the Web, introducing a Compliance Report Model, a test suite, and an ODRL Evaluator to support accurate, interoperable, and enforceable policy interpretations in line with regulatory requirements.
[Proceedings] [Open-Access] [Compliance Report Model] [Test Suite] [ODRL Evaluator] [Demo]
Wout Slabbinck, Ruben Dedecker, Wouter Termont, Beatriz Esteves, Pieter Colpaert, Ruben Verborgh
3rd Privacy & Personal Data Management Session (Privacy) co-located with the 3rd Solid Symposium (SoSy) 2025 Workshop
This work presents an open-source prototype integrating User-Managed Access (UMA) into Solid servers via the Community Solid Server, featuring a Credential Verifier, an ODRL-based Policy Engine, and a Negotiator Component to facilitate policy-driven, user-controlled data access.
Wout Slabbinck, Ruben Dedecker, Wouter Termont, Beatriz Esteves, Pieter Colpaert, Ruben Verborgh
3rd Privacy & Personal Data Management Session (Privacy) co-located with the 3rd Solid Symposium (SoSy) 2025 Workshop
This work presents an open-source prototype integrating User-Managed Access (UMA) into Solid servers via the Community Solid Server, featuring a Credential Verifier, an ODRL-based Policy Engine, and a Negotiator Component to facilitate policy-driven, user-controlled data access.
Tanguy Coenen, Michiel Fierens, Beatriz Esteves, Esther De Loof
Submitted to Data in Brief 2025 Journal (Under review)
This article analyzes the EU Data Act's requirements for multiparty data access in connected products, proposes a conceptual model supported by technologies like identity and consent management to deal with these requirements, and illustrates its application through an “agentic home” use case that combines personal data stores with generative AI to promote ethical innovation and EU competitiveness.
Tanguy Coenen, Michiel Fierens, Beatriz Esteves, Esther De Loof
Submitted to Data in Brief 2025 Journal (Under review)
This article analyzes the EU Data Act's requirements for multiparty data access in connected products, proposes a conceptual model supported by technologies like identity and consent management to deal with these requirements, and illustrates its application through an “agentic home” use case that combines personal data stores with generative AI to promote ethical innovation and EU competitiveness.
Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan
Legal Knowledge and Information Systems (JURIX) 2024 Conference
This article proposes a semantic web-based specification using the Data Privacy Vocabulary (DPV) to standardize and automate the exercise and management of GDPR rights, addressing current gaps in rights implementation and enabling scalable data reuse and governance.
Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan
Legal Knowledge and Information Systems (JURIX) 2024 Conference
This article proposes a semantic web-based specification using the Data Privacy Vocabulary (DPV) to standardize and automate the exercise and management of GDPR rights, addressing current gaps in rights implementation and enabling scalable data reuse and governance.
Beatriz Esteves
Dissertation for the Doctoral Degree in Artificial Intelligence Ph.D. Thesis
Advisers: Prof. Dr. Víctor Rodríguez Doncel; Prof. Dr. David Lewis
Beatriz Esteves
Dissertation for the Doctoral Degree in Artificial Intelligence Ph.D. Thesis
Advisers: Prof. Dr. Víctor Rodríguez Doncel; Prof. Dr. David Lewis
Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan, Delaram Golpayegani, Julian Flake
International Semantic Web Conference (ISWC) 2024 Conference
This article presents version 2.0 of the Data Privacy Vocabulary (DPV), highlighting its role in enabling interoperable, standards-based descriptions of personal data processing and its adaptability for supporting global regulatory and community initiatives.
Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan, Delaram Golpayegani, Julian Flake
International Semantic Web Conference (ISWC) 2024 Conference
This article presents version 2.0 of the Data Privacy Vocabulary (DPV), highlighting its role in enabling interoperable, standards-based descriptions of personal data processing and its adaptability for supporting global regulatory and community initiatives.
Wouter Termont, Ruben Dedecker, Wout Slabbinck, Beatriz Esteves, Ben De Meester, Ruben Verborgh
2024 White Paper
The User-Managed Access (UMA) extension to OAuth 2.0 is a promising candidate for increasing Digital Trust in personal data ecosystems like Solid. With minor modifications, it can achieve many requirements regarding usage control and transaction contextualization, even though additional specification is needed to address delegation of control and retraction of usage policies.
Wouter Termont, Ruben Dedecker, Wout Slabbinck, Beatriz Esteves, Ben De Meester, Ruben Verborgh
2024 White Paper
The User-Managed Access (UMA) extension to OAuth 2.0 is a promising candidate for increasing Digital Trust in personal data ecosystems like Solid. With minor modifications, it can achieve many requirements regarding usage control and transaction contextualization, even though additional specification is needed to address delegation of control and retraction of usage policies.
Delaram Golpayegani, Beatriz Esteves, Harshvardhan J. Pandit, Dave Lewis
International Conference on Semantic Systems (SEMANTiCS) 2024 Poster
This paper presents the AI Use Policy (AIUP) profile, an extension of ODRL designed to help providers of high-risk AI systems comply with the EU AI Act by explicitly and transparently expressing intended and prohibited uses of AI systems.
Delaram Golpayegani, Beatriz Esteves, Harshvardhan J. Pandit, Dave Lewis
International Conference on Semantic Systems (SEMANTiCS) 2024 Poster
This paper presents the AI Use Policy (AIUP) profile, an extension of ODRL designed to help providers of high-risk AI systems comply with the EU AI Act by explicitly and transparently expressing intended and prohibited uses of AI systems.
Jesse Wright, Beatriz Esteves, Rui Zhao
1st NeXt-generation Data Governance Workshop (NXDG) co-located with the 20th International Conference on Semantic Systems (SEMANTiCS) 2024 Workshop
This paper proposes a vision for semi-automated, policy-based personal data governance in Web browsers, using policy languages to manage cookies and laying the groundwork for broader Web-scale data control.
Jesse Wright, Beatriz Esteves, Rui Zhao
1st NeXt-generation Data Governance Workshop (NXDG) co-located with the 20th International Conference on Semantic Systems (SEMANTiCS) 2024 Workshop
This paper proposes a vision for semi-automated, policy-based personal data governance in Web browsers, using policy languages to manage cookies and laying the groundwork for broader Web-scale data control.
Jonas Steinbach, Gertjan De Mulder, Ben De Meester, Beatriz Esteves, Ruben Verborgh
2nd International Workshop on Semantics in Dataspaces (SDS) co-located with the 21st Extended Semantic Web Conference (ESWC) 2024 Workshop
This paper presents an interoperable Verifiable Credential (VC) exchange protocol for Solid Pods, using DIDComm for structured messaging and LDN inboxes for explicit delivery targets, addressing the current lack of standardization that hinders secure and interoperable VC transfer within the Solid ecosystem.
Jonas Steinbach, Gertjan De Mulder, Ben De Meester, Beatriz Esteves, Ruben Verborgh
2nd International Workshop on Semantics in Dataspaces (SDS) co-located with the 21st Extended Semantic Web Conference (ESWC) 2024 Workshop
This paper presents an interoperable Verifiable Credential (VC) exchange protocol for Solid Pods, using DIDComm for structured messaging and LDN inboxes for explicit delivery targets, addressing the current lack of standardization that hinders secure and interoperable VC transfer within the Solid ecosystem.
Wout Slabbinck, Julián Andrés Rojas, Beatriz Esteves, Ruben Verborgh, Pieter Colpaert
2nd Privacy & Personal Data Management Session (Privacy) co-located with the 2nd Solid Symposium (SoSy) 2024 Workshop
This paper proposes a Web agent-based approach to enforce expressive ODRL policies, including temporal constraints, within the Solid ecosystem to enable dynamic, automated usage control over data resources.
Wout Slabbinck, Julián Andrés Rojas, Beatriz Esteves, Ruben Verborgh, Pieter Colpaert
2nd Privacy & Personal Data Management Session (Privacy) co-located with the 2nd Solid Symposium (SoSy) 2024 Workshop
This paper proposes a Web agent-based approach to enforce expressive ODRL policies, including temporal constraints, within the Solid ecosystem to enable dynamic, automated usage control over data resources.
Harshvardhan J. Pandit*, Beatriz Esteves* (* equal contribution)
Semantic Web 15(4) 2024 Journal
This paper explores how ODRL and DPV can enhance the Data Use Ontology (DUO) by explicitly representing data use conditions and legal concepts, enabling automated policy matching for responsible genomic data sharing.
Harshvardhan J. Pandit*, Beatriz Esteves* (* equal contribution)
Semantic Web 15(4) 2024 Journal
This paper explores how ODRL and DPV can enhance the Data Use Ontology (DUO) by explicitly representing data use conditions and legal concepts, enabling automated policy matching for responsible genomic data sharing.
Beatriz Esteves
International Semantic Web Conference (ISWC) 2023 Demo
This demo presents SoDA, a Solid-based application that enables data altruism as a service by using ODRL to model DGA-compliant policies and manage privacy-respecting access to personal data for altruistic purposes.
Beatriz Esteves
International Semantic Web Conference (ISWC) 2023 Demo
This demo presents SoDA, a Solid-based application that enables data altruism as a service by using ODRL to model DGA-compliant policies and manage privacy-respecting access to personal data for altruistic purposes.
Marcu Florea*, Beatriz Esteves* (* equal contribution)
Information 14(12) 2023 Journal
This paper explores how Solid can comply with GDPR requirements by analyzing the introduction of a policy layer for obtaining consent to process EU citizens' personal data, and whether such consent can be considered freely given, specific, informed and unambiguous.
Marcu Florea*, Beatriz Esteves* (* equal contribution)
Information 14(12) 2023 Journal
This paper explores how Solid can comply with GDPR requirements by analyzing the introduction of a policy layer for obtaining consent to process EU citizens' personal data, and whether such consent can be considered freely given, specific, informed and unambiguous.
Beatriz Esteves, Harshvardhan J. Pandit
14th Workshop on Ontology Design and Patterns (WOP 2023) co-located with the 22nd International Semantic Web Conference (ISWC 2023) Workshop
This paper introduces PLASMA, a metadata language designed to enhance transparency, accountability, and data governance in the Solid ecosystem by providing a structured vocabulary and framework for managing entities, infrastructure, legal roles, policies, notices, and records.
Beatriz Esteves, Harshvardhan J. Pandit
14th Workshop on Ontology Design and Patterns (WOP 2023) co-located with the 22nd International Semantic Web Conference (ISWC 2023) Workshop
This paper introduces PLASMA, a metadata language designed to enhance transparency, accountability, and data governance in the Solid ecosystem by providing a structured vocabulary and framework for managing entities, infrastructure, legal roles, policies, notices, and records.
Beatriz Esteves, Víctor Rodríguez-Doncel, Harshvardhan J. Pandit, Dave Lewis
International Conference on Semantic Systems (SEMANTiCS) 2023 Conference
This study explores how Semantic Web vocabularies can support the Data Governance Act by enabling machine-readable data-sharing policies, altruism consent terms, and public registers of data intermediaries and altruism organisations.
Beatriz Esteves, Víctor Rodríguez-Doncel, Harshvardhan J. Pandit, Dave Lewis
International Conference on Semantic Systems (SEMANTiCS) 2023 Conference
This study explores how Semantic Web vocabularies can support the Data Governance Act by enabling machine-readable data-sharing policies, altruism consent terms, and public registers of data intermediaries and altruism organisations.
Haleh Asgarinia*, Andres Chomczyk Penedo*, Beatriz Esteves*, Dave Lewis (* equal contribution)
Information 14(7) 2023 Journal
This paper examines the shortcomings of current data management practices in protecting data subjects and explores the use of standardized, machine-readable policies to enhance transparency and accountability in decentralized personal data stores.
Haleh Asgarinia*, Andres Chomczyk Penedo*, Beatriz Esteves*, Dave Lewis (* equal contribution)
Information 14(7) 2023 Journal
This paper examines the shortcomings of current data management practices in protecting data subjects and explores the use of standardized, machine-readable policies to enhance transparency and accountability in decentralized personal data stores.
Beatriz Esteves, Víctor Rodríguez-Doncel, Ricardo Longares
Legal Knowledge and Information Systems (JURIX) 2022 Conference
This paper presents an API designed to automate responses to GDPR Right of Access requests, reducing manual effort for data controllers, and demonstrates its use in a Solid application that helps users access their personal data stored in Solid Pods.
[Proceedings] [Open-Access] [API] [App] [Ricardo's thesis] [Slides]
Beatriz Esteves, Víctor Rodríguez-Doncel, Ricardo Longares
Legal Knowledge and Information Systems (JURIX) 2022 Conference
This paper presents an API designed to automate responses to GDPR Right of Access requests, reducing manual effort for data controllers, and demonstrates its use in a Solid application that helps users access their personal data stored in Solid Pods.
[Proceedings] [Open-Access] [API] [App] [Ricardo's thesis] [Slides]
Beatriz Esteves, Haleh Asgarinia, Andres Chomczyk Penedo, Blessing Mutiro, Dave Lewis
1st International Workshop on Data Economy (DE 2022) co-located with the 18th International Conference on emerging Networking EXperiments and Technologies (CoNEXT 2022) Workshop
This article highlights that building user trust in online services requires transparency in data processing, which current privacy notices fail to provide effectively, and proposes the Privacy Paradigm ODRL Profile (PPOP) as a technical solution to specify clear data processing requirements for personal datastores, demonstrated through policy examples and a prototype generator.
Beatriz Esteves, Haleh Asgarinia, Andres Chomczyk Penedo, Blessing Mutiro, Dave Lewis
1st International Workshop on Data Economy (DE 2022) co-located with the 18th International Conference on emerging Networking EXperiments and Technologies (CoNEXT 2022) Workshop
This article highlights that building user trust in online services requires transparency in data processing, which current privacy notices fail to provide effectively, and proposes the Privacy Paradigm ODRL Profile (PPOP) as a technical solution to specify clear data processing requirements for personal datastores, demonstrated through policy examples and a prototype generator.
Beatriz Esteves, Kieran Fraser, Shridhar Kulkarni, Owen Conlan, Víctor Rodríguez-Doncel
Advances in Mobile Computing and Multimedia Intelligence (MoMM) 2022 Conference
This work defines urgency in push-notifications, proposes an ontology for annotation of urgency, and evaluates a variety of classification models tasked with distinguishing urgency levels in notification text to help subscribers prioritize messages and assist marketers in timing campaigns effectively.
Beatriz Esteves, Kieran Fraser, Shridhar Kulkarni, Owen Conlan, Víctor Rodríguez-Doncel
Advances in Mobile Computing and Multimedia Intelligence (MoMM) 2022 Conference
This work defines urgency in push-notifications, proposes an ontology for annotation of urgency, and evaluates a variety of classification models tasked with distinguishing urgency levels in notification text to help subscribers prioritize messages and assist marketers in timing campaigns effectively.
Beatriz Esteves, Víctor Rodríguez-Doncel
International Conference on Semantic Systems (SEMANTiCS) 2022 Poster
This paper outlines how the EU’s Data Governance Act introduces requirements for data protection and regulation of data intermediaries, and explores how Semantic Web technologies can support stakeholders in meeting these obligations.
Beatriz Esteves, Víctor Rodríguez-Doncel
International Conference on Semantic Systems (SEMANTiCS) 2022 Poster
This paper outlines how the EU’s Data Governance Act introduces requirements for data protection and regulation of data intermediaries, and explores how Semantic Web technologies can support stakeholders in meeting these obligations.
Beatriz Esteves, Víctor Rodríguez-Doncel, Harshvardhan J. Pandit, Nicolas Mondada, Pat McBennett
Extended Semantic Web Conference (ESWC) 2022 Demo
This demo presents SOPE, an ODRL editor for defining fine-grained, GDPR-aligned access control policies on Solid Pods using the OAC profile, along with a second demonstrator simulating data requests.
Beatriz Esteves, Víctor Rodríguez-Doncel, Harshvardhan J. Pandit, Nicolas Mondada, Pat McBennett
Extended Semantic Web Conference (ESWC) 2022 Demo
This demo presents SOPE, an ODRL editor for defining fine-grained, GDPR-aligned access control policies on Solid Pods using the OAC profile, along with a second demonstrator simulating data requests.
Beatriz Esteves, Kieran Fraser, Shridhar Kulkarni, Owen Conlan, Víctor Rodríguez-Doncel
Natural Language Processing and Information Systems (NLDB) 2022 Conference
This paper analyses the content of push-notifications from popular apps over 463 days, introduces a new ontology for labeling their call-to-action (CTA) messages, and presents the results of a CTA text classification task.
Beatriz Esteves, Kieran Fraser, Shridhar Kulkarni, Owen Conlan, Víctor Rodríguez-Doncel
Natural Language Processing and Information Systems (NLDB) 2022 Conference
This paper analyses the content of push-notifications from popular apps over 463 days, introduces a new ontology for labeling their call-to-action (CTA) messages, and presents the results of a CTA text classification task.
Beatriz Esteves, Víctor Rodríguez-Doncel
Semantic Web 15(3) 2022 Journal
This article surveys ontologies and policy languages for modeling 57 GDPR-referenced informational items, identifying the ODRL and LegalRuleML languages, as well as DPV and GDPRtEXT ontologies, as the most comprehensive solutions.
Beatriz Esteves, Víctor Rodríguez-Doncel
Semantic Web 15(3) 2022 Journal
This article surveys ontologies and policy languages for modeling 57 GDPR-referenced informational items, identifying the ODRL and LegalRuleML languages, as well as DPV and GDPRtEXT ontologies, as the most comprehensive solutions.
Beatriz Esteves, Harshvardhan J. Pandit, Víctor Rodríguez-Doncel
IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) 2021 Workshop
This paper proposes an extension to Solid's Web Access Control (WAC) mechanism using ODRL and DPV to enable more complex, regulation-aware data access rules.
Beatriz Esteves, Harshvardhan J. Pandit, Víctor Rodríguez-Doncel
IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) 2021 Workshop
This paper proposes an extension to Solid's Web Access Control (WAC) mechanism using ODRL and DPV to enable more complex, regulation-aware data access rules.
Beatriz Esteves
International Workshop on AI Approaches to the Complexity of Legal Systems (AICOL) 2020 Workshop
This paper presents a research project that uses decentralised Web and Semantic Web technologies to create services that enable better communication and negotiation of privacy terms between data subjects and controllers under the GDPR, with a case study in healthcare and genomics.
Beatriz Esteves
International Workshop on AI Approaches to the Complexity of Legal Systems (AICOL) 2020 Workshop
This paper presents a research project that uses decentralised Web and Semantic Web technologies to create services that enable better communication and negotiation of privacy terms between data subjects and controllers under the GDPR, with a case study in healthcare and genomics.
Beatriz Esteves
Dissertation for the degree of Master of Science in Biomedical Engineering M.Sc. Thesis
This thesis investigates the relationship between biosignals and personality traits by recording participants' physiological responses during the Iowa Gambling Task (IGT) and using machine learning to predict traits based on extracted features. Results show that combining features from multiple biosignals yields better predictive performance, with specific signals (e.g., ECG, EDA, BVP) effectively predicting traits like Openness to Experience, Agreeableness, and Extraversion. Notably, personality indicators were most prominent in the early stages of the task, suggesting stronger trait expression at the beginning of decision-making processes.
Advisers: Prof. Dr. Hugo Gamboa; Prof. Dr. Marcus Cheetham
Beatriz Esteves
Dissertation for the degree of Master of Science in Biomedical Engineering M.Sc. Thesis
This thesis investigates the relationship between biosignals and personality traits by recording participants' physiological responses during the Iowa Gambling Task (IGT) and using machine learning to predict traits based on extracted features. Results show that combining features from multiple biosignals yields better predictive performance, with specific signals (e.g., ECG, EDA, BVP) effectively predicting traits like Openness to Experience, Agreeableness, and Extraversion. Notably, personality indicators were most prominent in the early stages of the task, suggesting stronger trait expression at the beginning of decision-making processes.
Advisers: Prof. Dr. Hugo Gamboa; Prof. Dr. Marcus Cheetham