Wiki for Privacy Standards and Privacy Projects

Objective of WIKI

During the IPEN workshop held in Leuven on June 5th 2015 (https://secure.edps.europa.eu/EDPSWEB/edps/site/mySite/lang/en/IPEN_Workshop_2015), it was agreed that the IPEN community would benefit from the creation of a repository of information on activities related to privacy engineering initiatives and standards

The objective of this wiki is to be a tool allowing stakeholders interested in privacy engineering and standardisation to find resources and to identify and seek harmonisation and convergence opportunities.

IPEN members can register to this wiki

• as observers (i.e. getting information)
• as contributors (i.e. providing information and comments on privacy standards activities).

Contact Antonio Kung (antonio.kung@trialog.com) or Olivier Maridat (olivier.maridat@trialog.com) with topic [IPEN privacy standards] to request access, and indicate whether you want to be an observer or a contributor

If you wish to contribute please read the Rules for Contribution

Content

Privacy Standards

Click expand to find links to information regarding various standardisation organizations and their work on privacy and data protection standards

The ISO, International Organization for Standardisation, has standards on e.g. Privacy Engineering or BigData

The OpenID Foundation is a non-profit international standardization organization and has Workingroups regarding e.g. privacy and health related data

The OASIS, Organization for the Advancement of Structured Information Standards, is e.g. working on Standards for Privacy Management Reference Model and Methodology.

The W3C Activities, World Wide Web Consortium, has a privacy group working e.g. on Tracking Protection.

The IETF Activities, Internet Engineering Taskforce, is working on the RFC 6973 "Privacy Considerations for Internet Protocols"

There exist diverse National Level Standards regarding privacy, some with which IPEN members are invovled, can be found here.

The European commission has issued a mandate to European Standardisation Organisations, ESOs, to work on standards relating to privacy management of security products and related services.

Privacy Engineering Projects

Find in the following information on different projects that follow Privacy Engineering ideas such as privacy and data protection by design and by default.

With its APP Pets project the Datenschutzzentrum (ULD) is working on privacy enhancing technologies for smart device apps

The goal of AN.ON-Next by the Datenschutzzentrum (ULD) is to integrate processes for anonymization into the internet infrastructure.

The CREDENTIAL project's goal is to enable end-to-end security and improved privacy in cloud identity management services for managing secure access control.

The DNT Guide aims at helping website owners to implement the Do Not Track (DNT) standard.

With the PARIS project sets out to define and demonstrate a methodological approach for the development of a surveillance infrastructure which enforces the right of citizens for privacy, justice and freedom.

The mission of PRIPARE is to facilitate the application of a privacy and security-by-design methodology and to foster a risk management culture through educational material.

The PRISMACLOUD produces tools to enable end-to-end security and thus allowing users to protect their privacy by cryptographic means.

The Privacypatterns project provides building blocks for developers to advance privacy and data protection by design.

Signatu provides a service for companies to MAP their data processing activities, to create privacy policies and to track their users consent or consent withdrawal.

Other Privacy projects

Find in the following

Privacy related Events: see past and upcoming events in Europe

The Business Process Cookbook is an open repository to integrate Privacy and DP by design into business processes.

Multiple institutions have worked on Guidelines for Privacy and Data Protection Impact Assessments.

You can find various Studies on Privacy and DP here.

The OWASP Top 10 Project lists the current top 10 privacy risks.

The wiki will contain the following dedicated pages

ISO activities

Link to the page	http://ipen.trialog.com/wiki/ISO
Contributors	Antonio Kung, Irene Kamara

OASIS activities

Link to the page	http://ipen.trialog.com/wiki/OASIS
Contributors	John Sabo?, Dawn Jutla?

W3C activities

Link to the page	http://ipen.trialog.com/wiki/W3C_Activities
Contributors	Ninja Marnau?

IETF activities

Link to the page	http://ipen.trialog.com/wiki/IETF_Activities
Contributors	Steven Farrell?

CEN-CENELEC-ETSI activities

Link to the page	http://ipen.trialog.com/wiki/CEN-CENELEC-ETSI_Activities
Contributors	Antonio Kung (CEN-CENELEC JWG8), Claude Tételin (CEN TC225), Irene Kamara, Carmine Rizzo (ETSI)

OpenID Foundation activities

Link to the page	http://ipen.trialog.com/wiki/OpenId_Foundation_Activities
Contributors	Nat Sakimura (OpenID Foundation)

National level activities

Link to the page	http://ipen.trialog.com/wiki/National_Level_Activities
Contributors	Alan Shipman (BSI)

Other activities

Link to the page	http://ipen.trialog.com/wiki/Other_Activities
Contributors	Antonio Kung (Smart grid DPIA template, CNIL PIA methodology, ENISA landscape document, NIST privacy risk management framework), Florian Stahl (OWASP Top 10 Privacy Risks Project) Matthieu Grall (CNIL PIA analysis)

On IPEN - Internet Privacy Engineering Network

The purpose of IPEN (www.engineeringprivacy.eu) is to bring together developers and data protection experts with a technical background from different areas in order to launch and support projects that build privacy into everyday tools and develop new tools which can effectively protect and enhance our privacy.

Sponsors and Support

This wiki is sponsored by Trialog and supported by the PRIPARE project