Erosion by Standardisation-Reference-Cited by-同舟云学术

Erosion by Standardisation

Published:2020 Issue: Volume: Page:140-167
ISSN:1948-9730
Container-title:Personal Data Protection and Legal Developments in the European Union
language:
Short-container-title:

Author:

Christofi Athena¹^ORCID,Dewitte Pierre¹^ORCID,Ducuing Charlotte¹^ORCID,Valcke Peggy¹^ORCID

Affiliation:

1. KU Leuven, Belgium

Abstract

This chapter examines the interplay between the GDPR and parallel private regulation in the form of privacy-related standards adopted by the International Organisation for Standardisation (ISO). Focusing on the understanding of ‘risks' in the GDPR and ISO respective ecosystems, it compares the GDPR requirement for Data Protection Impact Assessments (DPIAs) with ISO/IEC 29134:2017, a private standard on Privacy Impact Assessment explicitly referred to by EU Data Protection Authorities as relevant in the context of DPIA methods. The resulting gap analysis identifies and maps misalignments, critically reflecting on whether the parallel form of ISO regulation, in the context of DPIAs, could support or rather blurs GDPR's objective to protect fundamental rights by embracing a risks-based approach.

Publisher

IGI Global

Reference48 articles.

1. Rules- or Principles-Based Regulation—Factors for Choosing the Best Language Strategy.;J. P.Allen;Canadian Business Law Journal,2014

2. Article 29 Working Party. (2009). Joint contribution to the Consultation of the European Commission on the legal framework for the fundamental right to protection of personal data. https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2009/wp168_en.pdf

3. Article 29 Working Party. (2013). Statement of the Working Party on current discussions regarding the data protection reform package. https://ec.europa.eu/justice/article-29/documentation/other-document/files/2013/20130227_statement_dp_reform_package_en.pdf

4. Article 29 Working Party. (2014). Statement on the role of a risk-based approach in data protection legal frameworks, 14/EN WP 218.

5. Article 29 Working Party. (2017). Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/679—17/EN WP 248 rev.01.

Cited by 2 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Normative Challenges of Risk Regulation of Artificial Intelligence;NanoEthics;2024-08

2. Modeling ecosystems of reference frameworks for assurance: a case on privacy impact assessment regulation and guidelines;Software and Systems Modeling;2022-11-07