Privacy and data protection constitute core values of individuals and of democratic societies. There have been decades of debate on how those values -and legal obligations- can be embedded into systems, preferably from the very beginning of the design process. One important element in this endeavour are technical mechanisms, known as privacy-enhancing technologies (PETs). Their effectiveness has been demonstrated by researchers and in pilot implementations. However, apart from a few exceptions, e.g., encryption became widely used, PETs have not become a standard and widely used component in system design. Furthermore, for unfolding their full benefit for privacy and data protection, PETs need to be rooted in a data governance strategy to be applied in practice. This report contributes to bridging the gap between the legal framework and the available technological implementation measures by providing an inventory of existing approaches, privacy design strategies, and technical building blocks of various degrees of maturity from research and development. Starting from the privacy principles of the legislation, important elements are presented as a first step towards a design process for privacy-friendly systems and services. The report sketches a method to map legal obligations to design strategies, which allow the system designer to select appropriate techniques for implementing the identified privacy requirements. Furthermore, the report reflects limitations of the approach. It concludes with recommendations on how to overcome and mitigate these limits.

Privacy and Data Protection by Design - from policy to engineering

The Fourth Edition of Ethics and Technology introduces students to issues and controversies that comprise the relatively new field of cyberethics. This textbook examines a wide range of cyberethics issues--from specific issues of moral responsibility to broader social and ethical concerns that affect each of us in our day-to-day lives. Recent developments in machine ethics should also cause students to consider questions about conventional conceptions of autonomy and trust. Such topics and many other engaging ethical controversies--both hypothetical and actual cases--are discussed in this widely used and respected text. Updates to the 4th Edition includeNew or updated scenarios in each chapter New sample arguments in many chapters, which enable students to apply the tools for argument analysis covered in Chapter 3 Newly designed set of study/exercise questions call Unalyzed Scenarios in each chapter, which can be used for either in-class group projects or outside class assignments Additional review, discussion, and essay/presentation questions at the end of many chapters New Issues Examined and Analyzed includeEthical and social aspects of Cloud Computing, including concerns about the privacy and security of users' data that is increasingly being stored in \"the Cloud\" Concerns about the increasing \"personalization\" of search results based on queries entered by users on search engines such as Google Controversies surrounding Wikileaks and the tension it creates between free speech and responsible journalism Concerns affecting \"net neutrality\" and whether Internet regulation may be required to ensure that service providers on the Internet do not also unduly control the content delivered via their services Recent controversies affecting \"machine ethics\" and the development of \"moral machines\" or autonomous systems that will be embedded with software designed for making moral decisions Questions about our conventional notions of autonomy and trust--can machines be autonomous? Can we trust machines to act in ways that will always be in the best interest of humans?

Ethics and technology : controversies, questions, and strategies for ethical computing

Privacy and data protection constitute core values of individuals and of democratic societies. There have been decades of debate on how those values -and legal obligations- can be embedded into systems, preferably from the very beginning of the design process. 
One important element in this endeavour are technical mechanisms, known as privacy-enhancing technologies (PETs). Their effectiveness has been demonstrated by researchers and in pilot implementations. However, apart from a few exceptions, e.g., encryption became widely used, PETs have not become a standard and widely used component in system design. Furthermore, for unfolding their full benefit for privacy and data protection, PETs need to be rooted in a data governance strategy to be applied in practice. 
This report contributes to bridging the gap between the legal framework and the available technological implementation measures by providing an inventory of existing approaches, privacy design strategies, and technical building blocks of various degrees of maturity from research and development. Starting from the privacy principles of the legislation, important elements are presented as a first step towards a design process for privacy-friendly systems and services. The report sketches a method to map legal obligations to design strategies, which allow the system designer to select appropriate techniques for implementing the identified privacy requirements. Furthermore, the report reflects limitations of the approach. It concludes with recommendations on how to overcome and mitigate these limits.

With the General Data Protection Regulation there will be a legal obligation for controllers to conduct a Data Protection Impact Assessment for the first time. This paper examines the new provisions in detail and examines ways for their successful implementation. It proposes a process which operationalizes established requirements ensuring the appropriate attention to fundamental rights as warranted by the GDPR, incorporates the legislation’s new requirements and can be adapted to suit the controller’s needs.

A Process for Data Protection Impact Assessment Under the European General Data Protection Regulation

Privacy Impact Assessments (PIA) are recognized as a key step to enhance privacy protection in new information systems and services. They will be required in Europe when the new General Data Protection Regulation becomes effective. From a technical perspective, the core of a PIA is a Privacy Risk Analysis (PRA), which has received relatively less attention than organizational and legal aspects of PIAs. In this work, we propose a rigorous and systematic PRA methodology. We illustrate it with a quantified self use-case in the extended paper [9].

https://hal.inria.fr/hal-01302541/document

PRIAM: A Privacy Risk Analysis Methodology

This paper provides a systematic literature review, analysis and discussion of methods that are proposed to practise ethics in research and innovation (R&I). Ethical considerations concerning the impacts of R&I are increasingly important, due to the quickening pace of technological innovation and the ubiquitous use of the outcomes of R&I processes in society. For this reason, several methods for practising ethics have been developed in different fields of R&I. The paper first of all presents a systematic search of academic sources that present and discuss such methods. Secondly, it provides a categorisation of these methods according to three main kinds: (1) ex ante methods, dealing with emerging technologies, (2) intra methods, dealing with technology design, and (3) ex post methods, dealing with ethical analysis of existing technologies. Thirdly, it discusses the methods by considering problems in the way they deal with the uncertainty of technological change, ethical technology design, the identification, analysis and resolving of ethical impacts of technologies and stakeholder participation. The results and discussion of our literature review are valuable for gaining an overview of the state of the art and serve as an outline of a future research agenda of methods for practising ethics in R&I.

Methods for Practising Ethics in Research and Innovation: A Literature Review, Critical Analysis and Recommendations

The European Commission is revising the EU’s data protection framework. One of the changes concerns privacy impact assessment (PIA). This paper argues that the European Commission and the EU Member States should draw on the experience of other countries that have adopted PIA policies and methodologies to construct its own framework. There are similarities and differences in the approaches of Australia, Canada, Ireland, New Zealand, the UK and US, the countries with the most experience in PIA. Each has its strong points, but also shortcomings. Audits have identified some of the latter in the instance of Canada. This paper provides a comparative analysis of the six countries to identify some of the best elements that could be used to improve Article 33 in European Commission’s proposed Data Protection Regulation.

/pdf/a-comparative-analysis-of-privacy-impact-assessment-in-six-5esj1vy749.pdf

A Comparative Analysis of Privacy Impact Assessment in Six Countries

Developing a privacy seal scheme (that works)

Privacy impact assessments (PIAs) are emerging as an important privacy management tool for public and private sector organizations. However, a key concern of PIA policy and practice is the lack of follow-up and means to evaluate its conduct at different levels, particularly so that different stakeholders can make sense of PIA practice as evidenced in PIA reports. This article first outlines the evaluation criteria established under the EU Privacy Impact Assessment Framework project and attempts to find the best means of extending their application to help assess PIAs, based on good practice.

Rowena Rodrigues

Papers

Methods for Practising Ethics in Research and Innovation: A Literature Review, Critical Analysis and Recommendations

A Comparative Analysis of Privacy Impact Assessment in Six Countries

Developing a privacy seal scheme (that works)

Evaluating privacy impact assessments

The Ethical Assessment of Research and Innovation : A reflection on the state of the art