An evaluation of privacy impact assessment guidance documents

International Data Privacy Law

Volumn 1, Issue 2, 2011, Pages 111-120

  Clarke, Roger ^a,b  

^a AUSTRALIAN NATIONAL UNIVERSITY   (Australia)

^b UNIVERSITY OF NEW SOUTH WALES   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84864061144     PISSN: 20443994     EISSN: 20444001     Source Type: Journal    
DOI: 10.1093/idpl/ipr002     Document Type: Article

References (30)

1. Roger Clarke, 'Privacy Impact Assessment: Its Origins and Development' (2009) 25, 2 Computer Law & Security Review 123-35, PrePrint at,http://www.rogerclarke.com/DV/PIAHist-08.html. (accessed 2 January 2011).
2. Information Commissioner's Office, Privacy Impact Assessments: International Study of their Application and Effects Wilmslow, IK, December 2007, body of the Report at,http://www.ico.gov.uk/upload/ documents/library/corporate/research_and_reports/ privacy_impact_assessment_international_study.011007.pdf. (accessed 2 January 2011) and Appendices as follows:
3. A Warren, R Bayley, C Bennett, AJ Charlesworth, R Clarke and C Oppenheim 'Privacy Impact Assessments: International experience as a basis for UK Guidance' (2008) 24, 3 Computer Law & Security Report 233-42.
4. A template can be found in Roger Clarke, 'Privacy Statement Template' Xamax Consultancy Pty Ltd, December 2005, at,http://www. rogerclarke.com/DV/PST.html. (accessed 2 January 2011).
5. Roger Clarke, 'What's 'Privacy'?' Xamax Consultancy Pty Ltd, August 2006, at,http://www.rogerclarke.com/DV/Privacy.html. (accessed 2 January 2011).
6. Roger Clarke, 'Privacy Impact Assessments', Xamax Consultancy Pty Ltd, February 1998, at,http://www.xamax.com. au/DV/PIA.html. (accessed 2 January 2011);
7. TJ Karol, 'Cross-Border Privacy Impact Assessments: An Introduction' (2001) 3 Information Systems Control Journal at,http://www.isaca.org/Journal/Past-Issues/ 2001/Volume-3/Pages/Cross-Border-Privacy-Impact-Assessments.aspx. (accessed 2 January 2011);
8. AJ Marcella and C Stucki, Privacy Handbook: Guidelines, Exposures, Policy Implementation, and International Issues (Wiley, 2003).
9. Office of Management and Budget, OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002 M-03-22, Washington DC, September 2003, at,http://www.whitehouse.gov/omb/memoranda/ m03-22.html. (accessed 2 January 2011).
10. Department of Justice, Privacy Impact Assessment for Justice Information Systems Working Paper, August 2000, at,http://www.ojp.usdoj.gov/ archive/topics/integratedjustice/piajis.htm. [Link active in 2004, but broken from 2008];
11. Department of the Interior, Privacy Impact Assessment and Guide July 2002, at,http://www.doi.gov/ocio/privacy/ Privacy_Impact_Assessment_9_16_02.doc. (accessed 2 January 2011).
12. Department of Human Services, Privacy Impact Assessments: Official Guidance, Washington DC, May 2007, at,http://www.dhs.gov/xlibrary/ assets/privacy/privacy_pia_guidance_may2007.pdf. (accessed 2 January 2011).
13. Department of Justice, Privacy Impact Assessments-Official Guidance, August 2010, at,http://www.justice.gov/opcl/pia_manual.pdf. (accessed 2 January 2011).
14. Treasury Board of Canada Secretariat, Directive on Privacy Impact Assessment Ottawa, April 2010, at,http://www.tbs-sct.gc.ca/pol/doc-eng. aspx?id=18308§ion=text. (accessed 2 January 2011).
15. Office of the CIO of British Columbia, Privacy Impact Assessment Process (PIA) January 2009, at,http://www.cio.gov.bc.ca/cio/priv_leg/foippa/pia/pia_index.page?. (accessed 2 January 2011).
16. Treasury Board of Canada Secretariat, Privacy Impact Assessment Policy, 2002, at ,http://www.tbs-sct.gc.ca/pubs_pol/ciopubs/pia-pefr/paip-pefr_e.asp. (accessed 2 January 2011);
17. Treasury Board of Canada Secretariat, Privacy Impact Assessment Guidelines: A Framework to Manage Privacy Risks 2002, at ,http://www.tbs-sct.gc.ca/pubs_pol/ciopubs/pia-pefr/paipg-pefrld_e.asp. (accessed 2 January 2011);
18. Treasury Board of Canada Secretariat, Privacy Impact Assessment (PIA) e-learning tool Ottawa, October 2003, at ,http://www.tbs-sct.gc.ca/pgol-pged/piatp-pfefvp/index_e.asp. (accessed 2 January 2011).
19. Office of the New Zealand Privacy Commissioner, Privacy Impact Assessment Handbook, March 2002, reprinted June 2007, at,http://www. privacy.org.nz/privacy-impact-assessment-handbook/. (accessed 2 January 2011).
20. Office of the Australian Privacy Commissioner, Privacy Impact Assessment Guide, August 2006, rev. May 2010, at,http://www.privacy.gov.au/ materials/types/download/9509/6590. (accessed 2 January 2011).
21. Office of the Privacy Commissioner for Personal Data, Information Leaflet: Privacy Impact Assessments (PIA) Hong Kong, July 2010, at,http://www.pcpd.org.hk/english/publications/files/PIAleaflet_e.pdf. (accessed 2 January 2011).
22. Management Board Secretariat, Privacy Impact Assessment Guidelines 1999, revised 2001, Government of Ontario, at,http://www. accessandprivacy.gov.on.ca/english/pia/index.html. (accessed 2 January 2011). The document is now administered by the Ministry of Government Services.
23. Information and Privacy Commissioner of Ontario, Privacy Impact Assessment Guidelines for the Ontario Personal Health Information Protection Act, October 2005, at,http://www.ipc.on.ca/images/Resources/ up-phipa_pia_e.pdf. (accessed 2 January 2011); see also ICO (n 2), Appendix C, pp. 22-39.
24. Service Alberta, Privacy Compliance: Privacy Impact Assessments Chapter 9.3 (pp. 328-33) of 'Guidelines and Practices', 2005, rev. 2009, pp. 328, 330, at,http://www.servicealberta.ca/foip/resources/chapter-9.cfm. (accessed 2 January 2011).
25. Information Commissioner's Office, Privacy Impact Assessment Handbook, Wilmslow, I.K., December 2007, at,http://www.ico.gov.uk/upload/ documents/pia_handbook_html_v2/files/PIAhandbookV2.pdf. (accessed 2 January 2011).
26. Cabinet Office, Data Handling Procedures in Government: Final Report, London, June 2008, available from,http://www.cesg.gov.uk/ products_services/iatp/documents/data_handling_review.pdf. (accessed 2 January 2011).
27. UK Ministry of Justice, Undertaking Privacy Impact Assessments: The Data Protection Act 1998, August 2010, at,http://www.justice.gov.uk/ guidance/docs/pia-guidance-08-10.pdf. (accessed 2 January 2011).
28. Office of the Victorian Privacy Commissioner, Privacy Impact Assessments-A Guide, August 2004, rev. May 2009, at,http://www. privacy.vic.gov.au/privacy/web.nsf/download/ B595F5F2FDFD2135CA2575AC0012BC0E/$FILE/OVPC%20Privacy% 20Impact%20Assessment%20Guide%20Edition%202%20May%202009. pdf. (accessed 2 January 2011).
29. Office of the Victorian Privacy Commissioner, Privacy Impact Assessments Report Template, May 2009, at,http://www.privacy.vic.gov.au/privacy/ web.nsf/download/61A2754F019EDA57CA2575AC001346F3/$FILE/ OVPC%20PIA%20Template%20Report%20May%202009.doc. (accessed 2 January 2011).
30. Office of the Victorian Privacy Commissioner, Privacy Impact Assessments-Accompanying Guide, May 2009, at,http://www.privacy. vic.gov.au/privacy/web.nsf/download/ 27FC495F3F506D49CA2575AC001305BE/$FILE/Accompanying% 20Guide%20to%20OVPC%20PIA%20Template%20Report%20May% 202009.pdf. (accessed 2 January 2011).