Fri 28 Jun 2024 11:45 - 12:15 at M104 - Legal Compliance Chair(s): Chetan Arora

As software-intensive systems face growing pressure to comply with laws and regulations, providing automated support for compliance analysis has become paramount. Despite advances in the Requirements Engineering (RE) community on legal compliance analysis, important obstacles remain in developing accurate and generalizable compliance automation solutions. This paper highlights some observed limitations of current approaches and examines how adopting new automation strategies that leverage Large Language Models (LLMs) can help address these shortcomings and open up fresh opportunities. Specifically, we argue that the examination of (textual) legal artifacts should, first, employ a broader context than sentences, which have widely been used as the units of analysis in past research. Second, the mode of analysis with legal artifacts needs to shift from classification and information extraction to more end-to-end strategies that are not only accurate but also capable of providing explanation and justification. We present a compliance analysis approach designed to address these limitations. We further outline our evaluation plan for the approach and provide preliminary evaluation results based on data processing agreements (DPAs) that must comply with the General Data Protection Regulation (GDPR). Our initial findings suggest that our approach yields substantial accuracy improvements and, at the same time, provides justification for compliance decisions.

Fri 28 Jun

Displayed time zone: (UTC) Coordinated Universal Time change

10:45 - 12:15
Legal ComplianceRE@Next! Papers / Research Papers at M104
Chair(s): Chetan Arora Monash University
10:45
30m
Paper
AI-enabled Regulatory Change Analysis of Legal Requirements
Research Papers
Sallam Abualhaija University of Luxembourg, Marcello Ceci University of Luxembourg, Nicolas Sannier University of Luxembourg, SnT, Domenico Bianculli University of Luxembourg, Lionel Briand University of Ottawa, Canada; Lero centre, University of Limerick, Ireland, Dirk Zetzsche University of Luxembourg, Marco Bodellini University of Luxembourg
Pre-print
11:15
30m
Paper
Defining a Model for Content Requirements from the Law: an Experience Report
Research Papers
Marcello Ceci University of Luxembourg, Domenico Bianculli University of Luxembourg, Lionel Briand University of Ottawa, Canada; Lero centre, University of Limerick, Ireland
11:45
30m
Paper
Rethinking Legal Compliance Automation: Opportunities with Large Language Models
RE@Next! Papers
Shabnam Hassani University of Ottawa, Mehrdad Sabetzadeh University of Ottawa, Daniel Amyot University of Ottawa, Jian Liao
Pre-print