DPIA and PIA Guidelines

From IPEN Wiki
Revision as of 09:47, 18 October 2016 by PeterKraus (talk | contribs) (Created page with "There are various projects to create Guidelines for Data Protection Impact Assessments and Privacy Impact Assessments.<span style="color: rgb(44, 44, 40); font-family: Arial,...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

There are various projects to create Guidelines for Data Protection Impact Assessments and Privacy Impact Assessments.

CNIL PIA Guide

The CNIL is the French Data Protection Authority (DPA).

In June 2012, the CNIL published a guide on privacy risk management, applicable to complex processings or high risks scenarios. It helped data controllers to get an objective understanding of the risks arising from their processings, in order to select the necessary and sufficient security controls.

This guide was updated in July 2015 to remain in line with the European Data Protection Regulation project and the WP29’s work on the risk based approach. It also considers feedbacks and improvements proposed by different interested parties on privacy impact assessments guidelines. Three documents are available. (UPDATE October 2016: 2 of the links are dead right now)

Good Practices