@inproceedings{NNL_ER08, author = {Nadzeya Kiyavitskaya and Nicola Zeni and Travis D. Breaux and Annie I. Anton and Jim Cordy and Luisa Mich and John Mylopoulos}, affiliation = {University of Trento and North Carolina State University and Queens University}, title = {Automating the Extraction of Rights and Obligations for Regulatory Compliance}, year = {2008}, month = {October}, booktitle = {ER'08: Proceedings of the 27th International Conference on Conceptual Modeling (ER'08)}, publisher = {Springer-Verlag}, isbn = {}, address = {Berlin, Germany}, pages = {}, location = {Barcelona, Spain}, abstract = {Government regulations are increasingly affecting the security, privacy and governance of information systems in the United States, Europe and elsewhere. Consequently, companies and software developers are required to ensure that their software systems comply with relevant regulations, either through design or re-engineering. We previously proposed a methodology for extracting stakeholder requirements, called rights and obligations, from regulations. In this paper, we examine the challenges to developing tool support for this methodology using the Cerno framework for textual semantic annotation. We present the results from two empirical evaluations of a tool called ``Gaius T'' that is implemented using the Cerno framework and that extracts a conceptual model from regulatory texts. The evaluation, carried out on the U.S. HIPAA Privacy Rule and the Italian accessibility law, measures the quality of the produced models and the tool's effectiveness in reducing the human effort to derive requirements from regulations.}, }