Data protection impact assessment system in the mode of risk management

网络与信息安全学报

Ying CHENG¹ 

[1] Institute for Human Rights,China University of Political Science and Law,Beijing 100088,China;

关键词: data protection impact assessment;    personal information security impact assessment;    gdpr;    risk management;    privacy impact assessment;    personal information protection;   

DOI  :  10.11959/j.issn.2096-109x.2018064

来源: DOAJ

【 摘 要 】

In the era of big data,the risk management approach has been broadly applied in the field of personal information protection.Data protection impact assessment has become an important system to promote data protection.It takes the provisions of the data protection impact assessment of the European General Data Protection Regulation (GDPR) 2016 as the sample.By using the literature research and empirical analysis method,it analyzes in depth the theoretical background,rise and evolution,meaning and scope of data protection impact assessment to establish a standardized and specific impact assessment system as well as promote personal information protection.Assessment content includes not only privacy risk assessment,but also data security,data quality and non-discrimination.Data protection impact assessment should be set as a mandatory obligation for data processing activities that are likely to result in high risks.The evaluation process shall take the advices from stakeholders to reflect their benefits.The external supervision should be strengthened and the assessment report shall be published properly.

【 授权许可】

Unknown