Privacy Engineering: Closing the Gap between Privacy by Design and Implementation

No ratings

Presented at IAPPEuDPC 2014 by

Tomi Mikkonen

Antti Vähä-sipilä

The Privacy by Design (PbD) principles are useful for setting the high-level targets of privacy-aware systems design. However, these principles are often seen as abstract and vague, and leave many open questions as to exactly how they ought to be applied in practical software development work. We present a framework of privacy engineering that bridges the gap between the PbD principles and the developers through a process, tools and dialogue, and that is compatible with the modern, agile software development processes. We will also show how the corporate privacy function can have continuous visibility on the state of privacy in software projects. What you’ll take away: · How to implement PbD in modern software development · What privacy engineering means in practice · Understanding and leveraging the relationship of privacy engineering and existing software security initiatives · An understanding of continuous privacy assurance