Contents
-
Using this handbook
-
Part 1 – Background information
-
-
Chapter I – Overview
-
Chapter II – Privacy, risks and solutions
- What is privacy?
- How is privacy protected?
- Why is privacy important?
- Privacy risks
- What do we mean by privacy risks?
- Recognising privacy risks
- Broad personal information issues
- Issues around identification of the individual
- Function creep
- Registration and authentication processes
- Surveillance
- Location and tracking
- Intrusions into the privacy of the person
- Persons at risk, and vulnerable populations
- Issues around the exercise of rights by individuals
- Future economic and social developments
- Relevant legal considerations
- Identifying privacy solutions
-
-
-
Part 2 – The PIA process
-
-
Process Maps
-
Chapter III – Initial assessment
-
Chapter IV – Full-scale privacy impact assessment
-
Chapter V – Small-scale privacy impact assessment
-
Chapter VI – Privacy law and other legal compliance checking
-
Chapter VII – Data Protection Act compliance check (including PECR)
-
Chapter VIII – Other ICO guidance
-
-
-
Appendix 1 – The PIA screening questions
-
Appendix 2 – Data protection compliance checklist template
-
Appendix 3 – PECR compliance checklist template
-
Appendix 4 – Privacy strategies
Why is privacy important?
The general public have shown a growing awareness of privacy issues over the last few years. High-profile losses of personal information and growing concerns about the nature and extent of personal information collected by organisations has led to a growing debate about the impact on privacy.
The media have the capacity to turn a minor issue into a public furore within hours. As a result, privacy is a risk factor for many organisations. Misjudging what the media and the public will accept has resulted in negative impacts on business enterprises and government agencies alike. With the growth in data-intensity and increasing use of privacy intrusive technologies, the risks of a project or scheme being rejected by the public are increasing.