Keynote: Building in Privacy and Data Protection -- what is demanded by the GDPR?
summary
Overview of GDPR plus concrete obligations and gaps: Data Protection by Design and Default is legally required but described in one abstract paragraph, so controllers must implement data minimization, storage limitation, accountability and run Data Protection Impact Assessments for risky processing; breaches require notification within 72 hours; fines reach up to €20 million or 4% of turnover. Practical tools mentioned include a protection‑goals model (unlinkability, transparency, interveneability), privacy patterns and repositories of code; many small organizations lack ready libraries so engineering work and demonstrable implementations are urgently needed.
AI-written summary · about
chapters (7)
- 0:00GDPR basics
- 10:05GDPR legal foundations
- 20:01Data subject rights
- 30:03Privacy by design
- 40:50Privacy design patterns
- 50:15Small org challenges
- 57:00Q&A
related talks
01h 00mPrivacy and GDPR: What all developers should know
49mPractical privacy: GDPR explained
46mDeveloping for Privacy
44mEmbedding GDPR into the SDLC
01h 16mSecurity meets data protection: risk assessment, standards and certification
52mDeveloping privacy
16mThe Importance of Data Protection Compliance and Cyber Security
01h 15mDATA PROTECTION ENGINEERING: WHAT IS THE ROAD AHEAD?