Modelling and Verification in GDPR’s Data Protection Impact Assessment

Schulz, Wolfgang; Wittner, Florian; Bavendiek, Kai; Schupp, Sibylle

doi:10.5040/9781509932771.ch-006

Cited by 1 publication

(2 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Lastly, DPIA is not a one-time activity; instead, it has to continue as long as the life-cycle of the data processing, which the authors of [1] have not considered. In [32], authors have introduced a tool supported by a formal method to verify whether privacy properties are met or not. The authors believe that using such a tool makes the validity of the DPIA more understandable and manageable; also, it verifies whether the DPIA performed by the controller has captured the risks raised from excessive data collection and unauthorized purpose.…”

Section: Related Workmentioning

confidence: 99%

“…The GDPR is unclear how to implement it [3,13,38,18,7,39]. Different legal bodies and academics, e.g., [12,25,4,7,13,1,32,2], started to introduce guidelines and tools to help controllers conduct the DPIA. These works are short in either providing assistance (they work more like a checklist), including all steps of the DPIA (e.g., monitoring), or applying to all domains.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Tool-Assisted Risk Analysis for Data Protection Impact Assessment

Dashti

Ranise

2020

IFIP Advances in Information and Communication Technology

View full text Add to dashboard Cite

Unlike the classical risk analysis that protects the assets of the company in question, the GDPR protects data subject's rights and freedoms, that is, the right to data protection and the right to have full control and knowledge about data processing concerning them. The GDPR articulates Data Protection Impact Assessment (DPIA) in article 35. DPIA is a risk-based process to enhance and demonstrate compliance with these requirements. We propose a methodology to conduct the DPIA in three steps and provide a supporting tool. In this paper, we particularly elaborate on risk analysis as a step of this methodology. The provided tool assists controllers to facilitate data subject's rights and freedoms. The assistance that our tool provides differentiates our work from the existing ones.

show abstract

Section: Related Workmentioning

confidence: 99%