Tool-supporting Data Protection Impact Assessments with CAIRIS.

Coles, J., Faily, S. and Ki-Aries, D., 2018. Tool-supporting Data Protection Impact Assessments with CAIRIS. In: 5th International Workshop on Evolving Security & Privacy Requirements Engineering, 20 August 2018, Banff, Canada.

Full text available as:

[img]
Preview
PDF
manuscript.pdf - Accepted Version
Available under License Creative Commons Attribution Non-commercial No Derivatives.

505kB

Abstract

The General Data Protection Regulation (GDPR) encourages the use of Data Protection Impact Assessments (DPIAs) to integrate privacy into organisations’ activities and practices from early design onwards. To date, however, there has been little prescription about how Security & Privacy Requirements Engineering processes map to the necessary activities of a DPIA, and how these activities can be tool-supported. To address this problem, we present a tool-supported process for undertaking DPIAs using existing Requirements Engineering approaches and the CAIRIS platform. We illustrate this process using a real-world case study example where it was used to elicit privacy risks for a prototype medical application to support chemotherapy treatment.

Item Type:Conference or Workshop Item (Paper)
Uncontrolled Keywords:GDPR; Privacy; Risk; Requirements Engineering; CAIRIS
Group:Faculty of Science & Technology
ID Code:30989
Deposited By: Unnamed user with email symplectic@symplectic
Deposited On:17 Jul 2018 10:29
Last Modified:19 Sep 2018 15:19

Downloads

Downloads per month over past year

More statistics for this item...
Repository Staff Only -