Evaluating privacy impact assessments

Innovation: The European Journal of Social Science Research

Volumn 26, Issue 1-2, 2013, Pages 161-180

  Wadhwa, Kush ^a   Rodrigues, Rowena ^a  

^a Trilateral Research and Consulting LLP: Trilateral Research Ltd   (United Kingdom)

Author keywords

PIA evaluation; PIAF; PIAs; privacy impact assessments

Indexed keywords

EUROPEAN UNION; MANAGEMENT; PRIVATE SECTOR; PUBLIC SECTOR; STAKEHOLDER;

EID: 84876962761     PISSN: 13511610     EISSN: 14698412     Source Type: Journal    
DOI: 10.1080/13511610.2013.761748     Document Type: Article

References (35)

1. AICPA/CICA. 2010. AICPA/CICA Privacy Risk Assessment Tool User Guide. 4. http://www.aicpa.org/interestareas/informationtechnology/resources/privacy/privacyservices/downloadabledocuments/10684-378_privacy%20risk%20assessment%20tool.pdf
2. ALRC (Australian Law Reform Commission) 2008. For Your Information: Australian Privacy Law and Practice. ALRC Report 108. Recommendation 57-4. Accessed on November 21, 2012. http://www.alrc.gov.au/publications/57.%20Use%20and%20Disclosure%20of%20Credit%20Reporting%20Information/use-and-disclosure
3. Bisset, R. 2001. " Developments in EIA Methods ". In Environmental Impact Assessment: Theory and Practice, Edited by: Wathern, P. 47-61. London: Routledge.
4. European Commission. 2011. Privacy and Data Protection Impact Assessment Framework for Radio Frequency Identification (RFID) Applications of 12 January 2011. http://ec.europa.eu/information_society/policy/rfid/pia/index_en.htm
5. European Parliament. 2011. Resolution on a Comprehensive Approach on Personal Data Protection in the European Union, 2011/2025(INI). Strasbourg: European Parliament.
6. European Parliament and the Council. 1995. " Directive 95/46/EC of 24 October 1995 on the Protection of Individuals with Regard to the Processing of Personal Data on the Free Movement of Such Data." Official JournalL281: 31 - 50.
7. Flaherty, David H. 2000. Privacy Impact Assessments: An Essential Tool for Data Protection. A Presentation to a Plenary Session on New Technologies, Security and Freedom. 22nd Annual Meeting of Privacy and Data Protection Officials. Venice. 27-30. http://aspe.hhs.gov/datacncl/flaherty.htm
8. Google Inc. 2011. Google Street View New Zealand Privacy Impact Assessment. Accessed November 21, 2012. http://google-au.blogspot.in/2011/05/privacy-impact-assessment-for-street.html
9. Google Inc. 2012. Using Street View. Accessed November 21, 2012. http://maps.google.co.nz/intl/en/help/maps/streetview/learn/using-street-view.html
10. GS1 2012. GS1 EPC/RFID. Privacy Impact AssessmentTool, http://www.gs1.org/epcglobal/pia
11. Health Information and Quality Authority. 2010. Guidance on Privacy Impact Assessmentin Health and Social Care. Dublin. http://www.hiqa.ie/resource-centre/professionals
12. ICO (Information Commissioner's Office) 2009. Privacy Impact AssessmentHandbook. Version 2.0. Cheshire. http://www.ico.gov.uk/for_organisations/topic_specific_guides/pia_handbook.aspx
13. IIS (Information Integrity Solutions Pty Ltd) 2009. Privacy Impact AssessmentReport, Electronically Verifying Identity Under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 Using Credit Reporting Information. For the Attorney General's Department. http://www.ag.gov.au/www/agd/rwpattach.nsf/VAP/(8AB0BDE05570AAD0EF9C283AA8F533E3)~Privacy+Impact+Assessment+Report+-+Electronically+verifying+identity+under+the+AML+CTF+Act+using+credit+reporting+information.pdf
14. Institute for Management Information Systems. 2012. Intelligent PIA User Manual. Vienna University. Accessed November 21, 2012. http://www.wu.ac.at/ec/research/user_manual.pdf
15. Kemm, John, Jayne Parry, and Stephen Palmer. 2004. Health impact assessment: Concepts, Theory, Techniques and Applications. Oxford: OUP.
16. Marx, Gary T. 2012. " Foreword: Privacy is Not Quite Like the Weather ". In Privacy Impact Assessment, Edited by: Wright, David and de Hert, Paul. v-xiv. Springer: Dordrecht.
17. Morgan, Richard K. 1999. Environmental Impact Assessment: A Methodological Approach, United Kingdom: Chapman and Hall.
18. New Zealand Privacy Commissioner. 2010a. Google and Wi-Fi Information Collection. http://privacy.org.nz/media-release-google-and-wi-fi-information-collection/
19. New Zealand Privacy Commissioner. 2010b. Google's Collection of WiFi Information During Street View Filming. Executive Summary. http://privacy.org.nz/google-s-collection-of-wifi-information-during-street-view-filming/.
20. OCIPO (Office of the Chief Information and Privacy Officer). 2010. Privacy Impact AssessmentGuide for the Ontario Public Service. Canada: Queen's Printer for Ontario.
21. Office of Management and Budget. 2003. OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002. Washington, DC. http://www.whitehouse.gov/omb/memoranda/m03-22.html
22. Office of the Privacy Commissioner. 2006. Privacy Impact AssessmentGuide. Sydney, NSW. http://www.privacy.gov.au.
23. Office of the Privacy Commissioner. 2007. Privacy Impact AssessmentHandbook. Auckland: Office of the Privacy Commissioner.
24. Office of the Privacy Commissioner. 2010. Privacy Impact AssessmentGuide. Sydney, NSW. http://www.oaic.gov.au/publications/guidelines.html#privacy_guidelines
25. OIPC (Office of the Information and Privacy Commissioner of Alberta). 2013. PIA Registry. http://www.oipc.ab.ca/pages/PIAs/Registry.aspx
26. Radaelli, Claudio and Francesco, Fabrizio de. 2010. " Regulatory Impact Assessment ". In The Oxford Handbook of Regulation, Edited by: Baldwin, R., Cave, M. and Lodge, M. 279-301. Oxford: OUP.
27. Scriven, Michael. 2007. The Logic and Methodology of Checklists. http://www.wmich.edu/evalctr/archive_checklists/papers/logic&methodology_dec07.pdf.
28. Tancock, David, Siani Pearson, and, Andrew Charlesworth. 2010. " A Privacy Impact AssessmentToolfor Cloud Computing." Second IEEE International Conference on Cloud Computing. Indiana University: USA, 667 - 676.
29. Treasury Board of Canada Secretariat. 2002. Privacy Impact AssessmentGuidelines: A Framework to Manage Privacy Risks. Ottawa. http://www.tbs-sct.gc.ca/pubs_pol/ciopubs/pia-pefr/paipg-pefrld1-eng.asp.
30. University of Pennsylvania. 2007. Introduction to the SPIA Program. http://www.upenn.edu/computing/security/spia/spia_step_by_step.pdf
31. Wright, David. 2011. " Should Privacy Impact Assessments be Mandatory? " Communications of the ACM54 (8). http://cacm.acm.org/magazines/2011/8 doi: 10.1145/1978542.1978568
32. Wright, David. 2012. The State of the Art in Privacy Impact Assessment. Computer Law & Security Review, 28 (1): 54-61. doi: 10.1016/j.clsr.2011.11.007.
33. Wright, David and De Hert, Paul. 2012a. " Introduction to Privacy Impact Assessment". In Privacy Impact Assessment, Edited by: Wright, David and De Hert, Paul. 3-32. Springer: Dordrecht.
34. Wright, David and De Hert, Paul. 2012b. " Findings and Recommendations ". In Privacy Impact Assessment, Edited by: Wright, David and De Hert, Paul. 445-481. Dordrecht Springer.
35. Wright, David, Kush Wadhwa, Paul De Hert, and Dariusz Kloza, 21 September 2011. PIAF: A Privacy Impact AssessmentFramework for data protection and privacy rights, Deliverable D1, Prepared for the European Commission Directorate General Justice, JLS/2009-2010/DAP/AG. First deliverable (D1) prepared for the European Commission's Directorate-General Justice under Grant Agreement Number JUST/2010/FRAC/AG/1137- 30-CE-0377117/00-70.