DPIA methodologies

DPIA methodologies

Belgian Privacy Commission: DPIA GL(NL - https://www.privacycommission.be/sites/privacycommission/files/documents/aanbeveling_01_2018.pdf)

Denmark Datatilsynet – Konsekvensanalyse (March 2018 DN - https://www.datatilsynet.dk/media/6563/konsekvensanalyse.pdf)

Germany(Datenschutzkonferenz): Standard Data Protection Model, V.1.0 –Trial version, Unanimously and affirmatively acknowledged (under abstention of Bavaria) by the 92. Conference of the Independent Data Protection Authorities of the Bund and the Länder in Kühlungsborn on 9-10 November 2016 (DE - https://www.datenschutzzentrum.de/uploads/SDM-Methode_V_1_0.pdf)

Spanish Data Protection Agency -Guía práctica de Evaluaciones de impacto (2018 ES - https://www.aepd.es/media/guias/guia-evaluaciones-de-impacto-rgpd.pdf)

French CNIL

- DPIA software tool(updated 2018 - https://www.cnil.fr/en/open-source-pia-software-helps-carry-out-data-protection-impact-assesment)

- CNIL Privacy Impact Assessment Manuals 1 (Methodology), 2 (Tools: templates & knowledge bases) & 3 (Good Practices) of July 2015 - https://www.cnil.fr/en/cnil-publishes-update-its-pia-guides

Slovenian DPA: Smernice ocene učinkov na varstvo osebnih podatkov (2018 - https://www.ip-rs.si/fileadmin/user_upload/Pdf/Ocene_ucinkov/Smernice_o_ocenah_ucinka__DPIA__julij2018.pdf)

UK Information Commissioner Data Protection Impact Assessments (May 2018 - https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/data-protection-impact-assessments-dpias/)

Research reports and academic literature

Bieker F., Friedewald M., HansenM., Obersteller H., Rost M. (2016): A Process for Data Protection Impact Assessment under the European General Data Protection Regulation,in: K. Rannenberg, D. Ikonomou (eds.): Privacy Technologies and Policy. Fourth Annual Privacy Forum, APF 2016 Frankfurt. Heidelberg, New York, Dordrecht, London (http://friedewald.website/wp-content/uploads/2016/06/apf2016.pdf)

Hansen M. (2016): Datenschutz-Folgenabschätzung –gerüstet für Datenschutzvorsorge?, DuD 9/2016, S. 587 (https://link.springer.com/article/10.1007/s11623-016-0663-1)

Wright D., Finn R., Rodrigues R. (2013): A Comparative Analysis of Privacy Impact Assessment in Six Countries, Journal of Contemporary European Research (JCER), 9 (1), p. 160 (http://www.jcer.net/index.php/jcer/article/view/513/393)