For a better user experience please update your browser or use Chrome or Firefox browser.
Nástroje
Publication detail
HomeRecommendations on shaping technology according to GDPR provisions
Exploring the notion of data protection by default
Metadata o publikaci
The choice of defaults in software engineering is not a new concept, as developers have to deal with the question of appropriate pre-settings of information and communication technology all the time. However, the principle of “data protection first”, as demanded by the General Data Protection Regulation (GDPR) when it comes to data protection by default, has neither been the standard behaviour of products, services and applications nor a regular principle in software design methods. Indeed, GDPR in its Article 25(2) asks for data-protection-friendly pre-settings in a way that only the minimum amount of personal data are processed, the extent of the processing is minimal, the shortest period of storage is chosen, and the possibilities for accessing the personal data are minimised as well. Thus, the objective of data protection by default is to ensure the fundamental principles of data minimisation and storage limitation in the IT systems – at least in the beginning when the user has not changed the pre-installed settings -, taking always into consideration the specific purpose and the overall context of the processing of personal data. This contributes to the GDPR’s goal of fairness of processing personal data. It can also contribute to other important GDPR provisions, such as the security of personal data processing. This report aims to shed some light on what the data-protection-by-default principle means in information technology design, what is the situation today, as well as how the new GDPR obligation could support controllers in selecting data-protection-friendly defaults. Still, several aspects of the data protection by default will have to be discussed more thoroughly in the future, and appropriate best practice solutions should be made more visible. Analysing the interplay between data protection and security defaults is also essential to this end, taking into consideration relevant usability aspects.
- Zveřejněno:
- Instituce, která je autorem: European Union Agency for Cybersecurity (Orgán nebo agentura EU)
- Upravoval: Bourka, Athena ; Drogkaris, Prokopios ;
- Témata: Informační technologie a telekomunikace
- Téma: digitální technologie , informační technologie , internet , mobilní telefon , ochrana soukromí , ochrana údajů , poskytovatel internetových služeb , počítačová síť , regulace telekomunikací , software , ukládání dat , zpráva
|
PDF
|
|||
| ISSN | ISBN 978-92-9204-285-1 | DOI 10.2824/518496 | Katalogové číslo TP-03-18-573-EN-N |
- Released on EU publications website:
Prohlížeč dokumentů
Note:
Publikaci nelze zobrazit v daném prohlížeči dokumentu. Otevřít internetovou verzi
Přístup je k dispozici zde: Stáhnout zvolenou jazykovou verzi