Best Practices – Page 4 – Privacy Design®

November 18, 2019November 19, 2019

Automated decision-making on the basis of personal data that has been transferred from the EU to companies certified under the EU-U.S. Privacy Shield

EU commission 2018 report
https://ec.europa.eu/info/sites/info/files/independent_study_on_automated_decision-making.pdf

November 18, 2019November 19, 2019

AEPD/EDPS: Introduction to the hash function as a personal data pseudonymisation technique

Joint paper on the use of hash techniques in data processing activities as a safeguard for personal data
https://edps.europa.eu/sites/edp/files/publication/19-10-30_aepd-edps_paper_hash_final_en.pdf

November 18, 2019November 19, 2019

IAPP Guide on de-identification (fall 2019)

https://iapp.org/resources/topics/de-identification/

Good example of data breach notification after a data breach

https://www.wien.gv.at/info/datenschutz/verletzung-buechereien.html

France: TOM by ANSSI

Technical and organisational measures

https://www.ssi.gouv.fr/administration/reglementation/rgpd-renforcer-la-securite-des-donnees-a-caractere-personnel/

Ireland: DPA releases some guidance with TOMs for cloud-based environments

https://www.dataprotection.ie/sites/default/files/uploads/2019-06/190606%20Five%20Steps%20to%20Secure%20Cloud-based%20Environments.pdf

July 11, 2019July 11, 2019

German court on use of Google Analytics without anonymizeIP (= need to anonymize)

https://www.datenschutzbeauftragter-info.de/urteil-einsatz-von-google-analytics-ohne-ip-anonymisierung/

ICO: Report on Adtech and Realtime Bidding

https://ico.org.uk/media/about-the-ico/documents/2615156/adtech-real-time-bidding-report-201906.pdf

ICO: Guidance on the use of cookies and similar technologies

https://ico.org.uk/for-organisations/guide-to-pecr/guidance-on-the-use-of-cookies-and-similar-technologies/