Suchergebnisse

When reflecting upon the role of law as an instrument influencing urban planning and shaping urban environments, the most immediate link is to environmental and urban legislation. Nevertheless, data protection law is increasingly expected to affect the future development of urban realities in the European Union (EU). Being actual "data cities", current smart cities have been significantly affected by the entry into force of the General Data Protection Regulation (GDPR). In particular, the Data Protection Impact Assessment (DPIA) is increasingly portraited as a solution to address the countless fundamental rights challenges arising from the personal data processing operations occurring in the context of smart cities, inter alia due to its participatory element. However, is DPIA a suitable approach to making smart cities more inclusive, and specifically to empower women of diverse races, backgrounds, sexual orientations and abilities? Enquiry into the ways in which smart cities, where urban and data protection challenges merge, might exacerbate dynamics of oppression against women, and how European data protection law could address these challenges, is still lacking. The objective of this article is to begin such a discussion. ; The paper is published by the European Journal of Spatial Development (EJSD). The previous version of the journal was host by Nordregio.

The purpose of this Chapter is to provide sufficiently detailed explanations to enable the completion of the Template for reporting the integrated impact assessment process (Annex 1). The assessors consult this Chapter's instructions in conjunction with Annex 1, whose structure firmly corresponds to the structure herein. The Template for reporting the integrated impact assessment process in Annex 1 is organised into tables and matrices. Following the 11-step method, consecutive steps are marked in brown and the ongoing steps in orange, as presented in the diagram below. The assessors are to fill in only the fields coloured in light brown or light orange. A field for any further remarks or comments, if necessary, is provided at the end of each step. The assessors fill in, in an easily understandable language, the empty rows in the tables and/or other fields assigned to each step. To the greatest extent possible, each answer is exhaustive and sufficiently motivated (described, explained, justified, etc.), as is equally the case for the criteria/explanations 'fulfilled' and 'not fulfilled'. Further rows can be added in each table, should there be a need, or, should the space be insufficient, each element can be moved to attachments. Alternatively, any of the tables and/or fields may be removed, and the same information presented in some other format if the assessors deem it appropriate. Provision of an explanation is required whether the box is ticked or not. After the receipt of the filled-in report, the sponsoring organisation, in turn, fills in the light green fields only, facilitating the final decision (of whether or not to proceed with the envisaged initiative). The Template assumes the team of assessors is familiar with the legal framework for personal data protection and privacy in the European Union, as well as the principles of ethics and social acceptance. (References to legal provisions without any further specification pertain to the General Data Protection Regulation [GDPR].) It also assumes mini-mum ...

This Policy Brief proposes a template for a report from a process of data protection impact assessment (DPIA) in the European Union (EU). Grounded in the previously elaborated framework (cf. Policy Brief No. 1/2017) and method for impact assessment (cf. Policy Brief No. 1/2019), the proposed template conforms to the requirements of Articles 35–36 of the General Data Protection Regulation (GDPR) and reflects best practices for impact assessment, offering at the same time five novel aspects. First, it aims at comprehensiveness to arrive at the most robust advice for decision making. Second, it aims at efficiency, that is, to produce effects with the least use of resources. Third, it aims at exploring and accommodating the perspectives of various stakeholders, although the perspective of individuals dominates; it, therefore, fosters fundamental rights thinking by, for example, requiring justification for each choice, hence going beyond a mere 'tick-box' exercise. Fourth, it aims at adhering to the legal design approach to guide the assessors in a practical, easy and intuitive manner throughout the 11-step assessment process, providing necessary explanations for each step, while being structured in expandable and modifiable tables and fields to fill in. Fifth, it assumes its lack of finality as it will need to be revised as experience with its use grows. The template is addressed predominantly to assessors entrusted by data controllers to perform the assessment process, yet it may also assist data protection authorities (DPA) in the EU to develop (tailored down) templates for DPIA for their own jurisdictions.

This Policy Brief proposes a template for a report from a process of data protection impact assessment (DPIA) in the European Union (EU). Grounded in the previously elaborated framework (cf. Policy Brief No. 1/2017) and method for impact assessment (cf. Policy Brief No. 1/2019), the proposed template conforms to the requirements of Articles 35–36 of the General Data Protection Regulation (GDPR) and reflects best practices for impact assessment, offering at the same time five novel aspects. First, it aims at comprehensiveness to arrive at the most robust advice for decision making. Second, it aims at efficiency, that is, to produce effects with the least use of resources. Third, it aims at exploring and accommodating the perspectives of various stakeholders, although the perspective of individuals dominates; it, therefore, fosters fundamental rights thinking by, for example, requiring justification for each choice, hence going beyond a mere 'tick-box' exercise. Fourth, it aims at adhering to the legal design approach to guide the assessors in a practical, easy and intuitive manner throughout the 11-step assessment process, providing necessary explanations for each step, while being structured in expandable and modifiable tables and fields to fill in. Fifth, it assumes its lack of finality as it will need to be revised as experience with its use grows. The template is addressed predominantly to assessors entrusted by data controllers to perform the assessment process, yet it may also assist data protection authorities (DPA) in the EU to develop (tailored down) templates for DPIA for their own jurisdictions.

La présente Note de Politique propose un modèle de rapport du processus d'analyse d'impact relative à la protection des données (AIPD) dans l'Union européenne (UE). Basé sur le cadre et la méthode pour l'analyse d'impact précédemment élaborés (voir respectivement la Note de Politique N° 1/2017 et la Note de Politique N° 1/2019), le modèle proposé est conforme aux exigences des Articles 35–36 du Règlement Général sur la Protection des Données (RGPD) et reflète les meilleures pratiques relatives à l'analyse d'impact. Il présente en outre cinq nouveaux aspects. Premièrement, il vise l'exhaustivité afin de fournir les conseils les plus avisés et robustes possibles pour la prise de décision. Deuxièmement, il vise l'efficacité, dans le sens où il veut produire des effets tout en utilisant le moins de ressources possible. Troisièmement, il vise à examiner et accommoder les points de vue des différentes parties prenantes, même si le point de vue des particuliers sera prédominant. Pour cette raison, il favorise la réflexion sur les droits fondamentaux, notamment en exigeant une justification pour chaque choix à réaliser, ce qui va au-delà d'une simple opération consistant à « cocher une case ». Quatrièmement, il vise à adopter l'approche de « legal design » afin de guider les évaluateurs d'une manière pratique, aisée et intuitive à travers les 11 étapes du processus d'analyse en fournissant les explications nécessaires à chaque étape, tout en offrant une structure composée de champs à compléter et de tableaux extensibles et modifiables. Cinquièmement, il accepte de ne pas être définitif du fait qu'il devra être révisé au fur et à mesure de l'expérience acquise lors de son utilisation. Le modèle est principalement destiné aux évaluateurs auxquels les responsables du traitement de données ont confié la réalisation du processus d'analyse, mais il peut également aider les autorités de protection des données (APD) au sein de l'UE à développer (adapter) des modèles pour les AIPD se rapportant au champ de leurs propres ...