Premium
Challenges in assessing privacy impact: Tales from the front lines
Author(s) -
Ferra Fenia,
Wagner Isabel,
Boiten Eerke,
Hadlington Lee,
Psychoula Ismini,
Snape Richard
Publication year - 2019
Publication title -
security and privacy
Language(s) - English
Resource type - Journals
ISSN - 2475-6725
DOI - 10.1002/spy2.101
Subject(s) - internet privacy , thematic analysis , information privacy , privacy policy , focus group , privacy by design , business , risk assessment , public relations , computer science , computer security , political science , sociology , qualitative research , marketing , social science
Data protection impact assessments (DPIAs) aim to identify, rank, and mitigate privacy risks. Even though DPIAs are legally mandated in some cases and privacy professionals perform DPIAs on a daily basis, facilitating the systematic measurement of privacy risks is an open problem. Research on privacy risk measurement often does not take into account the practical needs and requirements for DPIAs in real organizations. In this article, we fill this gap by reporting on focus groups we held with a diverse group of privacy professionals. Through thematic analysis, we identify three themes that emerged from the focus groups: (a) how privacy in the contemporary society affects privacy risk assessment; (b) current practices and procedures in privacy risk assessment; and (c) common issues and challenges. Based on these themes, we identify future research directions for privacy risk measurement. Our article can help to ground research on privacy risk measurement in practical challenges faced by privacy professionals.