Agencja Unii Europejskiej ds. Cyberbezpieczeństwa, Inżynieria ochrony danych

JANUARY 2022

DATA PROTECTION ENGINEERING

From Theory to Practice

EXECUTIVE SUMMARY

The evolution of technology has brought forward new techniques to share, process and store data. This has generated new models of data (including personal data) processing, but also introduced new threats and challenges. Some of the evolving privacy and data protection challenges associated with emerging technologies and applications include: lack of control and transparency, possible reusability of data, data inference and re-identification, profiling and automated decision making

The implementation of the GDPR data protection principles in such contexts is challenging as they cannot be implemented in the traditional, „intuitive” way. Processing operations must be rethought, sometimes radically (similar to how radical the threats are), possibly with the definition of new actors and responsibilities, and with a prominent role for technology as an element of guarantee. Safeguards must be integrated into the...