stefan – Page 99 – Privacy Design®

February 25, 2018February 25, 2018

MobFS – Mobile Security Framework

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing. https://opensecurity.in

https://github.com/MobSF/Mobile-Security-Framework-MobSF

also

https://androidtamer.com/tamer4-release

https://blackarch.org/mobile.html

February 25, 2018

[Book] “Security Engineering” by Ross Anderson

http://www.cl.cam.ac.uk/~rja14/book.html

February 25, 2018

[EFF] Panopticlick (Browser fingerprinting)

Try Panopticlick, EFF’s tool for analyzing how uniquely identifiable and trackable you are as you browse the Web. https://panopticlick.eff.org/

February 25, 2018

[ENISA] PETs control matrix: A systematic approach for assessing online privacy tools (2016)

Privacy-enhancing technologies

https://www.enisa.europa.eu/news/enisa-news/enisas-pets-control-matrix-a-tool-to-evaluate-online-and-mobile-privacy-tools

February 25, 2018

[datenrecht.ch] Leitlinien des Beratenden Ausschusses der Europarats-Konvention 108 zu “Big Data”

http://datenrecht.ch/leitlinien-des-beratenden-ausschusses-der-europarats-konvention-108-zu-big-data/

February 25, 2018

[Peep peep!] CJEU Advocate General Opines on the ‘Legitimate Interest’ Concept

from early 2017

https://peepbeep.wordpress.com/2017/01/28/cjeu-advocate-general-opines-on-the-legitimate-interest-concept/

February 25, 2018

[Switzerland] D. Rosenthal on DSG Vorentwurf (outdated now)

http://datenrecht.ch/rosenthal-der-vorentwurf-fuer-ein-neues-datenschutzgesetz-was-er-bedeutet-jusletter-v-20-2-2017/

February 25, 2018

[Germany, Bavaria] DPA Annual Report 2015/2016

https://www.datenschutz-bayern.de/tbs/tb27/tb27.pdf

February 25, 2018

[UK/India] – Health Company Fined by UK’s ICO

Subcontractor based in India to process sensitive personal data without adequate data processing / data transfer grounds
Lack of contractual definition of adequate technical and organisational measures in India
Sensitive personal data (with high severity) sent via unencrypted email
Sensitive personal data on FTP server without restricted access controls
Patient found his/her data via Internet search

https://www.hldataprotection.com/2017/03/articles/international-eu-privacy/health-company-fined-by-uks-information-commissioner-office/

February 25, 2018

[Germany] Standard Datenschutzmodell

https://www.datenschutzzentrum.de/sdm/