“Appropriate technical and organizational measures”: Identifying privacy engineering approaches to meet GDPR requirements

Dominik Huth, Florian Matthes

Research output: Contribution to conferencePaperpeer-review

12 Scopus citations

Abstract

The General Data Protection Regulation requires, inter alia, the establishment of technical and organizational measures to ensure privacy properties. Software developers face the challenge of identifying these properties and suitable privacy enhancing techniques (PET). We conduct a literature study and identify eight privacy engineering approaches, which we analyze for their coverage of the GDPR privacy properties and for their support in software development phases. We conclude that recent privacy engineering approaches have the conceptual background to cover the GDPR, but advocate research on the integration of privacy concerns in software development processes.

Original languageEnglish
StatePublished - 2019
Event25th Americas Conference on Information Systems, AMCIS 2019 - Cancun, Mexico
Duration: 15 Aug 201917 Aug 2019

Conference

Conference25th Americas Conference on Information Systems, AMCIS 2019
Country/TerritoryMexico
CityCancun
Period15/08/1917/08/19

Keywords

  • GDPR
  • Literature review
  • Privacy Engineering
  • Privacy properties

Fingerprint

Dive into the research topics of '“Appropriate technical and organizational measures”: Identifying privacy engineering approaches to meet GDPR requirements'. Together they form a unique fingerprint.

Cite this