Accountable organizations deserve benefits from regulators.
summary
Proposal tests whether regulators give benefits to organizations that voluntarily submit to onsite inspections by demonstrating an effective privacy management program using operational documentation aligned to statutory provisions. Evidence includes hundreds of privacy impact assessments (one large company reports ~100 PIAs), Binding Corporate Rules approvals, employee training counts (13 countries mandate training), and breach protocols; benefits proposed are enforcement leniency, eased cross‑border transfers and notification exemptions. Regulators keep spot checks to prevent fraud; falsified evidence triggers heavier penalties.
AI-written summary · about
chapters (4)
- 0:00Start
- 18:02Why accountability: the regulator's perspective Most (non) compliance is invisible regulators only see the tip of the iceberg . Most controllers prefer to comply, if they can Permits exercise of regulatory discretion - Proactive data protection, can deal most effectively with cloud computing, data breaches, international transfers Case law. Google Spain, DRI
- 21:17Why accountability: the controller's perspective - Heightened public concem, lack of trust Reduces risks Respects existing rules, ready for the future Reduces potential for sanctions and for
- 23:38Appropriate Measures A non-exhaustive list of tools linked to accountability (subject to threshold): Documentation (art 28 Implement security requirements (art 30) DPIA impact assessment art 33) Designation of a DPO (art 35.1) Data protection by Design/Default (art 23) Question what is the difference between such compliance and accountability?
related talks
01h 14mRegulatory choices and privacy consequences
01h 22mAccountability in Practice
29mDeveloping Responsive Privacy Programs and Driving Impact
01h 01mAcademic sessions on data protection law and privacy
28mThe Strategic CPO: Managing Risk and the Board
21mBuilding Privacy Aware Infrastructure
05mPrivacy Practices on Trial
01h 12mThe Role of Technology in Fostering the Power of Personal Data: Privacy, Trust & Innovation
