Business process compliance is one of the prevalent challenges for companies. Despite an abundance of research proposals, companies still struggle with manual compliance checks and the understanding of compliance violations in the light of missing root-cause explanations. Moreover, approaches have merely focused on the control flow perspective in compliance checking, neglecting other aspects such as the data perspective. This paper aims at analyzing the gap between existing academic work and compliance demands from practice with a focus on the data aspects. The latter emerges from a small set of regulatory documents from different domains. Patterns are assumed as the right level of abstraction for compliance specification due to their independence of (technical) implementation in (process-aware) information systems, potential for reuse, and understandability. A systematic literature review collects and assesses existing compliance patterns. A first analysis of ten regulatory documents from different domains specifically reveals data-oriented compliance constraints that are not yet reflected by existing compliance patterns. Accordingly, data-related compliance patterns are specified.

中文翻译：

---

以数据方面为重点的业务流程合规模式的收集和提取

业务流程合规性是公司面临的普遍挑战之一。尽管有大量的研究建议，但由于缺少根本原因解释，公司仍然在人工合规检查和对合规违规的理解方面苦苦挣扎。此外，方法仅关注合规性检查中的控制流角度，而忽略了其他方面，例如数据角度。本文旨在分析现有学术工作与实践合规需求之间的差距，重点关注数据方面。后者来自一小组来自不同领域的监管文件。模式被假定为合规规范的正确抽象级别，因为它们独立于（过程感知）信息系统中的（技术）实现，具有重用的潜力，和可理解性。系统的文献综述收集和评估现有的合规模式。对来自不同领域的十份监管文件的首次分析特别揭示了现有合规模式尚未反映的面向数据的合规约束。因此，指定了与数据相关的合规模式。