Quick introduction with some examples
https://www.gmv.com/blog_gmv/regulation-of-mobile-apps-part-1-regulation-in-the-usa/
[hackapp] Mobile application security scanner
I can’t vouch for the comprehensiveness or correctness of their results.
European Commission: GDPR portal
UK/NHS: Data protection and information governance
WP29 Opinion 01/2017 on the Proposed Regulation for the ePrivacy Regulation (2002/58/EC) – wp247
WP29 has issued Opinion 01/2017 on the Proposed Regulation for the ePrivacy Regulation (2002/58/EC) – wp247
http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=610140
WP29: [Open] Guidelines on the accreditation of certification bodies
Deadline:
The Article 29 Working Party welcomes comments on the Guidelines on the accreditation of certification bodies (wp261). Such comments should be sent to the following address by 30 March 2018 at the latest.
http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=614486
CNIL: DPIA tools (templates and knowledge bases)
This is one of my favorite documents that I refer to on a day to day basis.
Nice list of privacy risks and severity examples.
https://www.cnil.fr/sites/default/files/typo/document/CNIL-PIA-2-Tools.pdf
ENISA on European Data Protection Certifications
incl. an analysis of the following certifications:
- ePrivacyseal EU
- EuroPrise
- CNIL Labels
- ICO Privacy Seal (under development)
- Certification based ON ISO/IEC 27001
- Certification based on ISO/IEC 27018 – PrivacyMark system
- Privacy by Design by Ryerson University and Deloitte Canada
https://www.enisa.europa.eu/publications/recommendations-on-european-data-protection-certification
Obviously, I am a bit partial to EuroPriSe – which does very well in the comparison.
Germany: Kurzpapiere der Datenschutzkonferenz (in German)
Germany/Hessen: Data Protection in Science and Research
In German – has some interesting passages on anonymisation.
https://www.datenschutz.hessen.de/download.php?download_ID=147