Persona-oriented data protection impact assessment for small businesses
Loading...
Author (Corporation)
Publication date
2023
Typ of student thesis
Course of study
Collections
Type
04B - Conference paper
Editors
Editor (Corporation)
Supervisor
Parent work
Proceedings of Society 5.0 Conference 2023
Special issue
DOI of the original publication
Link
Series
EPiC Series in Computing
Series number
93
Volume
Issue / Number
Pages / Duration
152-163
Patent number
Publisher / Publishing institution
Place of publication / Event location
Pretoria
Edition
Version
Programming language
Assignee
Practice partner / Client
Abstract
The European (EU) General Data Protection Regulation (GDPR) is applicable since May 2018 and has since posed major challenges for small businesses with limited knowledge and resources. According to Art. 35 of the GDPR, a so-called ‘Data Protection Impact Assessment’ (DPIA) is mandatory if a processing of personal data is likely to result in a high risk to the rights and freedoms of natural persons. There is a demand for low-threshold, practical instruments that support the required DPIA. The objective of this research was to develop a new DPIA instrument that meets the needs – as unit of analysis – of non-technology small businesses and complies with the requirements of the EU GDPR. Design Science Research was used as the methodological framework and identified personas were drivers in the development. The result is two variants of instruments that have been carefully evaluated and proven to be valuable.
Keywords
Subject (DDC)
Event
Society 5.0 - 2023. Human centeredness in a cyber-physical society
Exhibition start date
Exhibition end date
Conference start date
05.06.2023
Conference end date
06.06.2023
Date of the last check
ISBN
ISSN
Language
English
Created during FHNW affiliation
Yes
Strategic action fields FHNW
Publication status
Published
Review
Peer review of the complete publication
Open access category
Gold
License
Citation
Schneider, B., Asprion, P., Misyura, I., Jonkers, N., & Zaugg, E. (2023). Persona-oriented data protection impact assessment for small businesses. Proceedings of Society 5.0 Conference 2023, 152–163. https://doi.org/10.29007/5lfs