15
Fine Balance Jeremy Hilton 1

Integrated Privacy Impact Assessment

Embed Size (px)

DESCRIPTION

Presentation given at The Fine Balance Event 27 Nov 2008

Citation preview

Page 1: Integrated Privacy Impact Assessment

Fine Balance

Jeremy Hilton

1

Page 2: Integrated Privacy Impact Assessment

Process that enables organisations to anticipate and address likely impacts

of new initiatives Foresee problems Negotiate solutions

Manage risks Design systems to avoid

unnecessary privacy intrusion2

Page 3: Integrated Privacy Impact Assessment

Requirement by law Requirement of government

organisational policy Appreciation that project has

significant implications that should be subject of investigation

Existing public concerns

3

Page 4: Integrated Privacy Impact Assessment

4

Page 5: Integrated Privacy Impact Assessment

ASSETS THREATS VULNERABILITIES

RISKS

COUNTERMEASURES

ANALYSIS

MANAGEMENT

5

Page 6: Integrated Privacy Impact Assessment

6

Page 7: Integrated Privacy Impact Assessment

7

Page 8: Integrated Privacy Impact Assessment

8

Page 9: Integrated Privacy Impact Assessment

9

Page 10: Integrated Privacy Impact Assessment

10

Page 11: Integrated Privacy Impact Assessment

11

Page 12: Integrated Privacy Impact Assessment

People generally do what they want to do, even at work. Hopefully this aligns with the

organisation’s needs

incentivising ; or applying suitable sanctions.

May achieve short term benefit, but the change is short-lived unless

fundamental change is achieved staff have a belief in the desired result

12

Page 13: Integrated Privacy Impact Assessment

13

Page 14: Integrated Privacy Impact Assessment

Staff need to be involved, trained and supported.

Tools will be required in order to enable the desired controls on information and analysis/audit of use

Accountability and responsibility of staff must be clearly defined and agreed. Tell me and I’ll forget

Show me and I’ll rememberInvolve me and I’ll understand

Old Chinese saying14

Page 15: Integrated Privacy Impact Assessment

““Others inspire us, Others inspire us, information feeds us, information feeds us, practice improves our practice improves our performance, but we need performance, but we need quiet time to figure things quiet time to figure things out, to emerge with new out, to emerge with new discoveries, to unearth discoveries, to unearth original answers.”original answers.”

- Esther Buchholz- Esther Buchholz

15