Privacy Risk Management

About the Project

CIPL has been engaged in a project to explore the “risk-based approach to privacy” and privacy risk management. This work arises from and is closely related to CIPL’s pioneering work on accountability.
 
As the pace of technological change highlights the limitations of conventional thinking, a risk-based approach will improve the ability of privacy officers and businesses to take a structured and pragmatic approach to information management and privacy protection. By fully understanding both the benefits and the potential risks of harm associated with new products and services, organizations are better positioned to devise appropriate mitigations and controls that both reduce the risk to an acceptable level and retain the desired benefits of the intended data processing as much as possible.

The project will examine the following questions:
  • What is meant by a “Risk-based Approach”?
  • How should the different types of harm which may impact on individuals best be articulated?
  • What are the main threats arising from the use of personal information which may lead to harm?
  • How can the likelihood of serious harm best be measured and mitigated?
  • What tools can be developed for businesses to turn this approach into concrete action?
  • What is the scope for regulators to adopt a more Risk-based Approach to Privacy?
  • What are the implications for the underlying objectives of privacy/data protection regulation?

​Download the project summary document.

Project Workshops and Webinars

  • January 2014 – Formation of steering committee and official launch of the project
  • February 2014 – Completion of initial discussion paper
  • March 20, 2014 – Workshop I in Paris with key stakeholders
  • April 29, 2014 – Pre-conference Seminar at IAPP Data Protection Intensive, London
  • June 19, 2014 – Publication of Phase I White Paper
  • November 18, 2014 – Workshop II in Brussels
  • March 3, 2015 – Workshop III in Washington, DC 
  • November 23, 2015 - Publication of Phase II White Paper