Tool-supporting Data Protection Impact Assessments with CAIRIS

Authors: Coles, J., Faily, S. and Ki-Aries, D.

Start date: 20 August 2018

This data was imported from Scopus:

Authors: Coles, J., Faily, S. and Ki-Aries, D.

Journal: Proceedings - 2018 5th International Workshop on Evolving Security and Privacy Requirements Engineering, ESPRE 2018

Pages: 21-27

ISBN: 9781538684207

DOI: 10.1109/ESPRE.2018.00010

©2018 IEEE. The General Data Protection Regulation (GDPR) encourages the use of Data Protection Impact Assessments (DPIAs) to integrate privacy into organisations' activities and practices from early design onwards. To date, however, there has been little prescription about how Security & Privacy Requirements Engineering processes map to the necessary activities of a DPIA, and how these activities can be tool-supported. To address this problem, we present a tool-supported process for undertaking DPIAs using existing Requirements Engineering approaches and the CAIRIS platform. We illustrate this process using a real-world case study example where it was used to elicit privacy risks for a prototype medical application to support chemotherapy treatment.

The data on this page was last updated at 05:01 on July 17, 2019.