Modeling Medical Data Access with Prova

We present a medical data access use case compliant to GDPR legal rules and its implementation in the rule language Prova. The use case demonstrates a typical scenario of a patient consenting to medical data sharing for specified purposes such as treatment, as well as cases where the typical rules are overridden, modifying the access rights. This requires a representation capable of expressing the interaction between parties, and state transitions caused by this interaction. We discuss the Prova implementation which utilizes non-monotonic state transitions and reactive messaging to model the interaction between the parties, which are represented as agents.