'The Science' of Privacy Impact Assessment (PIA) - Part 1

The challenges organisations face in managing privacy risks are numerous and inherently diverse. Traditionally, organisations had focused on addressing business and security requirements of a project, but most recently, privacy impact assessment has become an essential part of the risk management regime for most projects. Hence significant efforts are now directed toward providing appropriate guidance on how to conduct privacy impact assessments.

Appropriate assessments of privacy invasive technologies, justification for project, collection and handling of personally identifiable data (PID) and compliance to privacy legislations possess enormous challenges to carrying out appropriate privacy impact assessments.

In series of articles, I hope to provide practical and demonstrable guidance on how to assess privacy risks of both new and in-service projects. Further, lessons learned from managing privacy risks of new and in-service projects resulting from aggregation, collection, sharing, handling and transportation of personally identifiable information will be shared and discussed.