Skip to main content

Tool-supporting Data Protection Impact Assessments with CAIRIS.

Coles, J., Faily, S. and Ki-Aries, D., 2018. Tool-supporting Data Protection Impact Assessments with CAIRIS. In: 5th International Workshop on Evolving Security & Privacy Requirements Engineering, 20 August 2018, Banff, Canada.

Full text available as:

manuscript.pdf - Accepted Version
Available under License Creative Commons Attribution Non-commercial No Derivatives.



The General Data Protection Regulation (GDPR) encourages the use of Data Protection Impact Assessments (DPIAs) to integrate privacy into organisations’ activities and practices from early design onwards. To date, however, there has been little prescription about how Security & Privacy Requirements Engineering processes map to the necessary activities of a DPIA, and how these activities can be tool-supported. To address this problem, we present a tool-supported process for undertaking DPIAs using existing Requirements Engineering approaches and the CAIRIS platform. We illustrate this process using a real-world case study example where it was used to elicit privacy risks for a prototype medical application to support chemotherapy treatment.

Item Type:Conference or Workshop Item (Paper)
Uncontrolled Keywords:GDPR; Privacy; Risk; Requirements Engineering; CAIRIS
Group:Faculty of Science & Technology
ID Code:30989
Deposited By: Symplectic RT2
Deposited On:17 Jul 2018 10:29
Last Modified:14 Mar 2022 14:11


Downloads per month over past year

More statistics for this item...
Repository Staff Only -