Privacyrecht is code
Einde inhoudsopgave
Privacyrecht is code (R&P nr. ICT1) 2010/7.10.2:7.10.2. PET-toepassing
Privacyrecht is code (R&P nr. ICT1) 2010/7.10.2
7.10.2. PET-toepassing
Documentgegevens:
drs. J.J.F.M. Borking, datum 26-05-2010
- Datum
26-05-2010
- Auteur
drs. J.J.F.M. Borking
- JCDI
JCDI:ADS575272:1
- Vakgebied(en)
Civiel recht algemeen (V)
Deze functie is alleen te gebruiken als je bent ingelogd.
De algemene opvatting in de workshops was dat vanuit de informatiebeveiliging de middelen worden ontwikkeld om (persoonlijke) informatie te beschermen. Tijdens een workshop in Nederland deelde een `chief privacy officer' mee dat: "The tools that are in use are security driven. The IT dept identifies risks and how to mitigate it. Where there is a privacy/security risk there is special software to protect it. (...) There will be security tools whether that is a PET tool, or something else. (...) there are going to be more security tools, not primarily to protect privacy."1
In het algemeen gebruikt dit bedrijf geen PET, behalve de standaardbeveiliging door middel van encryptie:
"We took the decision to encrypt all hard discs of our computers and laptops mandatory, because we don't want to be forced to identify that we fulfill all US security requirements for personal data later. We took the decision to do it everywhere not for the sake of privacy but to avoid to give information about what security we use later.2
Het bankbedrijf ABC gebruikt geen PET, hoewel ABC in termen van beveiligings- en IAM-architectuur zich op het hoogste niveau van maturiteit bevindt.3 Tijdens de workshop in Zurich gaven de vertegenwoordigers uit de bancaire sector aan:
"PET should enable us to do some kind of business. Of course it is interesting, it would remove the need for registration processes, it could be used in business relationship processes. But it is a long way, it is not just a technical issue, it is also a legal issue, regulatory issue. It is also a project feasibility issue, whether it can be made user friendly for the customer. (...) The privacy enhancing features should also be easy to use and it's benefits well understood. If you introduce too complicated features on Internet banking, such as hardware tokens, it is questionable how much the customer understands these features, so you would expect some customers to leave rather than be pleased."4