Analysis of privacy impact assessments within major jurisdictions

PST 2010: 2010 8th International Conference on Privacy, Security and Trust

Volumn , Issue , 2010, Pages 118-125

  Tancock, David ^a   Pearson, Siani ^a   Charlesworth, Andrew ^b  

^a HEWLETT PACKARD LABORATORIES   (United Kingdom)

^b UNIVERSITY OF BRISTOL   (United Kingdom)

Author keywords

Privacy; Privacy impact assessments

Indexed keywords

CURRENT TRENDS; FUTURE ASSESSMENT; IMPACT ASSESSMENTS; PRIVACY;

EID: 78549283802     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PST.2010.5593260     Document Type: Conference Paper

References (37)

1. E. Brown, T. Kosa. "Incorporating Privacy Outcomes: Teaching an Old Dog New Tricks." Sixth Annual Conference on Privacy, Security and Trust, 2008 [Online]. pst, pp. 232-239. Available: http://www.computer.org/portal/web/ csdl/doi/10.1109/PST.2008.27, Oct, 2008 [June. 02, 2010].
2. P. Croll. "Privacy Impact Assessments - the organisational versus the individual's viewpoints [Online]. 19 (14). pp. 1-5. Available: http://www.hisa.org.au/system/files/u2233/19-Chapter14.pdf, Aug, 2008 [June. 2, 2010].
3. R. Clarke, "Privacy Impact Assessments." Internet: http://www.rogerclarke.com/DV/PIA.html, May. 26, 2003 [Oct. 28, 2009].
4. C. Bennett., R. Bayley, A. Charlesworth and R. Clarke, "Privacy Impact Assessments: International study of their application and effects." Internet: http://www.ico.gov.uk/upload/documents/library/corporate/research-and- reports/privacy-impact-assessment-international-study.011007.pdf#1 3,Oct. 2007 [Oct. 27, 2009].
5. R. Clarke. (2009, Apr). "Privacy impact assessment: its origins and development." Computer Law & Security Review [Online]. 25(2), pp. 123-135. Available: http://www.sciencedirect.com/science?-ob=ArticleURL&- udi=B6VB3-4W04B2D- 4&-user=121739&-coverDate=12%2F31%2F2009&-rdoc= 1&-fmt=high&-orig=search&-sort=d&-docanchor=&view= c&-searchStrId=1187574478&-rerunOrigin=scholar.google&-acct= C000010018&-version=1&-urlVersion=0&-userid=121739&md5= 95d751f134a0fcd2c1c9abbfff93f0b, [Oct. 4, 2009].
6. Information Commissioners Office. "Privacy Impact Assessment Handbook." Internet: http://www.ico.gov.uk/handbook/, June. 2009 [Oct. 29, 2009].
7. Office of the Privacy Commissioner of Canada. "Privacy Impact Assessments." Internet: http://www.priv.gc.ca/fs-fi/02-05-d-33-e.cfm, February 2007 [Nov. 5, 2009].
8. The Office of the Privacy Commissioner New Zealand. "Privacy Impact Assessment Handbook." Internet: http://www.privacy.org.nz/privacy-impact- assessment-handbook/?highlight=privacy impact assessment handbook, March 2007 [Nov. 3, 2009].
9. Australian Government: Office of the Privacy Commissioner. "Privacy Impact Assessment Guide." Internet: http://www.privacy.gov.au/materials/ types/download/9349/6590, August 2006 [Oct. 30, 2009].
10. United States of America Department of Homeland Security. "Privacy Impact Assessments: Official Guidance." Internet: http://www.dhs.gov/ xlibrary/assets/privacy/privacy-pia-guidance-may2 007.pdf,May 2007 [Nov. 6, 2009].
11. Office of the Chief Information and Privacy Officer: Ontario. "Privacy Impact Assessment Guidelines: Part One." Internet: http://www.accessandprivacy.gov.on.ca/english/pia/pia1.html#part1, April 2010 [June. 2, 2010].
12. P. Myers. (2007, September). "Bring back the OTA." Internet: http://scienceblogs.com/pharyngula/2007/09/bring-back-the-ota.php, [Nov. 30, 2009].
13. European Parliamentary Technology Assessment. (2009, March) "What is a Technology Assessment." [Online]. http://www.eptanetwork.org/EPTA/what. php, [Nov. 30, 2009].
14. M. Barrett. (2003, June). "Environmental impact statement." Omega [Online]. 7 (5), pp. 431-439. Available: http://www.sciencedirect.com/ science/article/B6VC4-48TTM96-5J/2/773df09b6a1d2455faeca8d67d622776, [Nov. 28, 2009].
15. M. Deangelis. M. Vincent. Environmental impact statements: a study of context requirements and several assessment methods. 1974[Online Abstract]. Available: https://circle.ubc.ca/handle/2429/18697, [June. 4, 2010].
16. N. Lee. R. Colley. (1992) "Reviewing the quality of Environmental Statements." [Online]. Available: http://www.sed.manchester.ac.uk/planning/ research/publications/wp/eia/documents/OP24PARTA.pdf, [Dec. 15, 2009].
17. International Association for Impact Assessment. "Principles of Environmental Impact Assessment Best Practice." Internet: http://www.iaia.org/publicdocuments/specialpublications/Principles%20of%20IA- web.pdf, Jan. 1999 [Dec. 1, 2009].
18. S. Jay. C. Jones. P. Slinn. C. Wood. (2007, May)."Environmental impact assessment: Retrospect and prospect." Environmental Impact Assessment Review. [Online]. 27 (4), pp. 287-300 Available: http://www. sciencedirect.com/science?-ob=ArticleURL&-udi=B6V9G- 4MV1NS9-1&-user= 121739&-coverDate=05%2F31%2F2007&-rdoc=1&-fmt=high&-orig= search&-sort=d&-docanchor=&view=c&-searchStrId= 1360461579&-rerunOrigin=scholar.google&-acct=C000010018&-version= 1&-urlVersion=0&-userid=121739&md5=a280c7b093e125c7f460049c040982c6, [June. 4, 2010].
19. D. Tancock. S. Pearson. A. Charlesworth. (2010, May). "The Emergence of Privacy Impact Assessments." Internet: http://www.hpl.hp.com/ techreports/2010/HPL-2010-63.pdf, [May. 21, 2010].
20. C. Bennett and C. Raab. The governance of privacy: policy instruments in global perspective. Cambridge, MA: Massachusetts Institute of Technology, 2006, pp. 3-22.
21. Health, Education and Welfare, "Records, Computers and the Rights of Citizens." Internet: http://aspe.os.dhhs.gov/datacncl/1973privacy/ tocprefacemembers.htm, July. 1973 [Oct. 31, 2009].
22. R. Clarke, "A History of Privacy impact Assessments." Internet: http://www,rogerclarke.com/DV/PIAHist.html, February, 2004. [Oct. 28, 2009].
23. D. H. Flaherty. "Protecting privacy in surveillance societies: the Federal Republic of Germany, Sweden, France, Canada, and the United States." Chapel Hill; London: University of North Carolina Press, 1989.
24. B. Stewart. (1996, June). "PIAs - an early warning system." Privacy Law & Policy Reporter. [Online]. 3(7), pp. 45-49 Available: http://www.austlii.edu.au/au/journals/PLPR/1996/65.html, [Oct. 26, 2009].
25. B. Stewart. (1996, July). "Privacy Impact Assessments." Privacy Law & Policy Reporter. [Online]. 3(4), pp. 61-64 Available:http://www. austlii.edu.au/au/journals/PLPR/1996/65.html, [Oct. 26, 2009].
26. Inland Revenue Service. "Privacy Impact Assessments." Internet: http://www.irs.gov/privacy/article/0,,id=122989,00.html, Jan. 28, 2010 [Jan. 29, 2010].
27. A. Charlesworth. (2007, Oct). "Jurisdictional Report for Canada." Privacy Impact Assessments: International study of their application and effects. [Online]. Appendix C, pp.5-6. Available: http://www.ico.gov.uk/upload/documents/library/corporate/research-and-reports/ lbrouni-piastudy-appc-can-2910071.pdf, [Oct. 30, 2009].
28. eHealth Ontario. "Privacy Impact Assessment Policy." Internet: http://www.ehealthontario.on.ca/pdfs/Privacy/PrivacyImpactAssessment Policy.pdf, Sept. 23, 2008 [June. 4, 2010].
29. Cabinet Office. "Protection Information in Government." Internet: http://www.cabinetoffice.gov.uk/media/328380/protectinginformation. pdf, Jan. 10,2010 [Feb. 25, 2010].
30. Department of Homeland Security. (July, 2007). "Privacy Threshold Analysis."[Online]. http://www.dhs.gov/xlibrary/assets/privacy/DHS-PTA- Template.pdf, [Nov. 3, 2009].
31. A. Warren, R. Bayley, A. Charlesworth, C. Bennett, R. Clarke and C. Oppenheim,(2008, March). "Privacy Impact Assessments: International experience as a basis for UK guidance." Computer Law and Security Report. [Online]. 24 (3), pp. 233-242. Available: http://hdl.handle.net/2134/4481,[Nov. 3, 2009].
32. R. Woo. "Impact of Technology on Data Privacy." Internet: http://www.pcpd.org.hk/English/files/infocentre/speech-20080926.pdf, Sept. 26, 2008 [Oct. 30, 2009].
33. R. Harbird. M. Ahmed. A. Finkelstein. E. McKinney. A. Burroughs. "Privacy Impact Assessment with PRAIS." Internet: http://www.cs.ucl. ac.uk/staff/A.Finkelstein/papers/hotpets.pdf, February 2007 [Nov. 15, 2009].
34. Liberty Alliance Project. "ID governance - identify privacy and access policy, marketing requirements document." Internet: http://www.projectliberty.org/, 2007 [Nov. 16, 2009].
35. S. Pearson, T. Sander and R. Sharma, "Privacy Management for Global Organisations." Data Privacy Management and Autonomous Spontaneous Security, J. Garcia-Alfaro et al. (Eds.), LNCS 5939, pp. 9-17, Springer-Verlag Berlin Heidelburg, 2010.Internet: http://www.springerlink.com/content/ a13142g81255p453/fulltext.pdf?pa ge=1,March 2010 [March. 28, 2010].
36. S. Pearson, P. Rao, T. Sander, A. Parry, A. Paull, S. Patruni, V. Dandamudi-Ratnakar and P. Sharma, "Scalable, Accountable Privacy Management for Large Organizations", INSPEC 2009: 2nd International Workshop on Security and Privacy Distributed Computing, Enterprise Distributed Object Conference Workshops (EDOCW 2009), IEEE, pp. 168-175, September 2009.
37. T. Karol. (June, 2001) "Cross-Border Privacy Impact Assessments: An Introduction." Information Systems Control Journal. [Online]. Volume 3. Available: http://www.isaca.org/Template.cfm?Section=Home&CONTENTID=17 226&TEMPLATE=/ContentManagementDisplay.cfm, [Nov. 6, 2009].