integrated privacy impact assessment
DESCRIPTION
Presentation given at The Fine Balance Event 27 Nov 2008TRANSCRIPT
![Page 1: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/1.jpg)
Fine Balance
Jeremy Hilton
1
![Page 2: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/2.jpg)
Process that enables organisations to anticipate and address likely impacts
of new initiatives Foresee problems Negotiate solutions
Manage risks Design systems to avoid
unnecessary privacy intrusion2
![Page 3: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/3.jpg)
Requirement by law Requirement of government
organisational policy Appreciation that project has
significant implications that should be subject of investigation
Existing public concerns
3
![Page 4: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/4.jpg)
4
![Page 5: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/5.jpg)
ASSETS THREATS VULNERABILITIES
RISKS
COUNTERMEASURES
ANALYSIS
MANAGEMENT
5
![Page 6: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/6.jpg)
6
![Page 7: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/7.jpg)
7
![Page 8: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/8.jpg)
8
![Page 9: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/9.jpg)
9
![Page 10: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/10.jpg)
10
![Page 11: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/11.jpg)
11
![Page 12: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/12.jpg)
People generally do what they want to do, even at work. Hopefully this aligns with the
organisation’s needs
incentivising ; or applying suitable sanctions.
May achieve short term benefit, but the change is short-lived unless
fundamental change is achieved staff have a belief in the desired result
12
![Page 13: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/13.jpg)
13
![Page 14: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/14.jpg)
Staff need to be involved, trained and supported.
Tools will be required in order to enable the desired controls on information and analysis/audit of use
Accountability and responsibility of staff must be clearly defined and agreed. Tell me and I’ll forget
Show me and I’ll rememberInvolve me and I’ll understand
Old Chinese saying14
![Page 15: Integrated Privacy Impact Assessment](https://reader035.vdocuments.us/reader035/viewer/2022081602/54d5f71b4a7959b6538b4651/html5/thumbnails/15.jpg)
““Others inspire us, Others inspire us, information feeds us, information feeds us, practice improves our practice improves our performance, but we need performance, but we need quiet time to figure things quiet time to figure things out, to emerge with new out, to emerge with new discoveries, to unearth discoveries, to unearth original answers.”original answers.”
- Esther Buchholz- Esther Buchholz
15