Tools
ToolsColes, J., Faily, S. and Ki-Aries, D., 2018. Tool-supporting Data Protection Impact Assessments with CAIRIS. In: 5th International Workshop on Evolving Security & Privacy Requirements Engineering, 20 August 2018, Banff, Canada.
Full text available as:
|
PDF
manuscript.pdf - Accepted Version Available under License Creative Commons Attribution Non-commercial No Derivatives. 505kB | |
|
Copyright to original material in this document is with the original owner(s). Access to this content through BURO is granted on condition that you use it only for research, scholarly or other non-commercial purposes. If you wish to use it for any other purposes, you must contact BU via BURO@bournemouth.ac.uk. Any third party copyright material in this document remains the property of its respective owner(s). BU grants no licence for further use of that third party material. |
Abstract
The General Data Protection Regulation (GDPR) encourages the use of Data Protection Impact Assessments (DPIAs) to integrate privacy into organisations’ activities and practices from early design onwards. To date, however, there has been little prescription about how Security & Privacy Requirements Engineering processes map to the necessary activities of a DPIA, and how these activities can be tool-supported. To address this problem, we present a tool-supported process for undertaking DPIAs using existing Requirements Engineering approaches and the CAIRIS platform. We illustrate this process using a real-world case study example where it was used to elicit privacy risks for a prototype medical application to support chemotherapy treatment.
| Item Type: | Conference or Workshop Item (Paper) |
|---|---|
| Uncontrolled Keywords: | GDPR; Privacy; Risk; Requirements Engineering; CAIRIS |
| Group: | Faculty of Science & Technology |
| ID Code: | 30989 |
| Deposited By: | Symplectic RT2 |
| Deposited On: | 17 Jul 2018 10:29 |
| Last Modified: | 14 Mar 2022 14:11 |
Downloads
Downloads per month over past year
| Repository Staff Only - |