Contents
-
Using this handbook
-
Part 1 – Background information
-
-
Chapter I – Overview
-
Chapter II – Privacy, risks and solutions
- What is privacy?
- How is privacy protected?
- Why is privacy important?
- Privacy risks
- What do we mean by privacy risks?
- Recognising privacy risks
- Broad personal information issues
- Issues around identification of the individual
- Function creep
- Registration and authentication processes
- Surveillance
- Location and tracking
- Intrusions into the privacy of the person
- Persons at risk, and vulnerable populations
- Issues around the exercise of rights by individuals
- Future economic and social developments
- Relevant legal considerations
- Identifying privacy solutions
-
-
-
Part 2 – The PIA process
-
-
Process Maps
-
Chapter III – Initial assessment
-
Chapter IV – Full-scale privacy impact assessment
-
Chapter V – Small-scale privacy impact assessment
-
Chapter VI – Privacy law and other legal compliance checking
-
Chapter VII – Data Protection Act compliance check (including PECR)
-
Chapter VIII – Other ICO guidance
-
-
-
Appendix 1 – The PIA screening questions
-
Appendix 2 – Data protection compliance checklist template
-
Appendix 3 – PECR compliance checklist template
-
Appendix 4 – Privacy strategies
Responsibilities
The organisation proposing the project is responsible for undertaking a survey of the law relevant to the project and to the data processing and business processes it gives rise to. All participating organisations should do the same in connection with their involvement in the project.
Professionals with relevant expertise should be consulted as part of checking compliance with privacy law and other legal obligations. If your organisation has an in-house compliance unit or established compliance process, it might be useful to ensure that the compliance checking process takes full account of privacy law obligations and adds to the compliance checking process if necessary.