Abstract
The smart grid promises to enable novel energy services, supporting a greater integration of renewable energy sources. Major issues in this context are data protection and privacy risks, wherein malicious actors or organizations misuse personal data that is collected, processed and stored to enable these services. To address this problem, the European Commission has proposed a risk-driven process to data protection impact assessment. In this article, we introduce this process and present a tool that can support its implementation.
Zusammenfassung
Smart Grids versprechen neuartige Energie-Services, welche eine größere Integration von erneuerbaren Energiequellen ermöglichen. Große Probleme in diesem Kontext sind Datensicherheit und Privacy-Risiken, wenn böswillige Akteure oder Organisationen persönliche Daten missbrauchen, welche gesammelt, verarbeitet und gespeichert werden, um diese Services anzubieten. Um dieses Problem zu adressieren, startete die Europäische Kommission einen risikobasierten Prozess zum Data Protection Assessment. In diesem Artikel führen die Autoren diesen Prozess ein und präsentieren ein Tool, das diese Implementierung unterstützt.
This is a preview of subscription content, log in via an institution to check access.
Similar content being viewed by others
Notes
The Article 29 Working Party consists of a representative from the data protection authority of each EU Member State, the European Data Protection Supervisor, and the European Commission.
In discussions with sources involved in the development of the DPIA template, we have learned the overall structure of the process will remain the same in the final version. However, some details about how individual steps should be implemented will change.
Django is a Python framework that supports the rapid development of web-based applications: https://www.djangoproject.com/.
The Nobel Grid Project: http://nobelgrid.eu/.
References
Article 29: Data protection working party (2011): Opinion 9/2011 on the revised industry proposal for a privacy and data protection impact assessment framework for RFID applications. http://ec.europa.eu/justice/data-protection/article-29/documentation/opinion-recommendation/files/2011/wp180_en.pdf.
European Commission Commission Privacy and data protection impact assessment framework for RFID applications (2011): http://cordis.europa.eu/fp7/ict/enet/documents/rfid-pia-framework-final.pdf.
Information Commissioner’s Office (2009): Privacy impact assessment handbook. Version 2(0). Wilmslow: ICO.
Information Commissioner’s Office (2014): Conducting privacy impact assessments, code of practice. Wilmslow: ICO. https://ico.org.uk/media/for-organisations/documents/1595/pia-code-of-practice.pdf.
Kloza, D., Dijk, N. V., Hert, P. D. (2015): Assessing the European approach to privacy and data protection in smart grids: lessons for emerging technologies (pp. 11–47). Waltham: Elsevier (Syngress).
Smart Grid Task Force 2012–14 Expert Group 2 (2014): Data protection impact assessment template for smart grid and smart metering systems. https://ec.europa.eu/energy/sites/ener/files/documents/DPIA%20template_incl%20line%20numbers.pdf.
Wright, D. (2012): The state of the art in privacy impact assessment. Comput. Law Secur. Rev., 28(1), 54–61.
Acknowledgements
This research has been conducted within the Nobel Grid Project, funded from the European Union’s Horizon 2020 research and innovation programme under the grant agreement No 646184.
Author information
Authors and Affiliations
Corresponding author
Rights and permissions
About this article
Cite this article
Piatkowska, E., Bajraktari, A., Chhajed, D. et al. Tool support for data protection impact assessment in the smart grid. Elektrotech. Inftech. 134, 26–29 (2017). https://doi.org/10.1007/s00502-017-0484-4
Received:
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s00502-017-0484-4