The presence of service policies, and privacy and repository policies in particular, is increasingly expected by end-users, mandated by regulators and assessors and required for service certification. They also define a set of rules and practices that the organisational management, repository administrators and the technical staff need to establish and enforce. Here, practical guidance on the use of RePol, an open-source web tool developed within NI4OS-Europe, will be provided. RePol helps the user to create and maintain a comprehensive and clear repository policy or privacy policy for a web-based service. Through a step-by-step wizard and self-explanatory forms, the user shapes a customised policy document formulated in line with the current best practice. With such a policy, the resource owner can more easily align the service with GDPR requirements as well as those for onboarding and participation in open-science infrastructures. The resulting document may be downloaded as an XML file, additionally customized or manually edited before it is integrated into the service or repository. Individual policy elements are provided in a machine-readable format, allowing for an automated interpretation of created policies and metadata extraction.

Σύντομο βιογραφικό:

Branko Marović received BS, MS and PhD degrees in computer engineering and computer science from the University of Belgrade (UoB), where he is currently the deputy director of the UoB Computer Centre. He also worked at the UCLA Radiology Science Department and taught postgraduate courses at the UoB School of Electrical Engineering. Branko participated in many FP and Horizon projects and was a project manager of the EU funded IPA project that implemented hospital information systems in Serbian 19 hospitals and developed a cross-institutional EHR platform. In NI4OS-Europe, he leads the work package on ORDM standards, processes, tools and certification. In GÉANT, he works on software maturity model and review processes and in Trust and Identity Incubator. His interests include health informatics, IT and research infrastructures, seamless data use and visualization, software and service governance, and privacy protection.