ABSTRACT
In today’s digital world as data analytics (BDA) gains increasing significance it is vital to have robust strategies for safeguarding privacy and data protection. This paper focuses on improving the impact assessment of data protection (DPIA) in the realm of BDA and aligning it with the principles of the General Data Protection Regulation (GDPR). By conducting a study that combines a Delphi study with individual expert interviews we have identified and validated nine crucial privacy touch points (PTPs) for adapting the DPIA methodology to BDA environments. These PTPs address issues related to privacy and data protection in BDA covering aspects like consent nuances definitions of data control and challenges such as re-identification and discrimination. The outcome is a framework tailored to suit the landscape of BDA technologies. This research distinguishes itself by thoroughly analysing and validating the nine PTPs and providing actionable recommendation on how to enhance or improve the existing DPIA framework. Given the anticipated growth in artificial intelligence and large language models, BDA will continue to attract attention. Our research therefore contributes both academically and practically by supporting the evolution of thorough DPIA practices while offering guidance, for policymakers, businesses, and privacy advocates.
Georgiadis, Georgios and Poels, Geert, Establishing a Comprehensive Privacy Impact Assessment Methodology for Big Data Analytics in Compliance with the General Data Protection Regulation.
Leave a Reply