ENISA celebrates the European Data Protection Day

This date marks the anniversary of the Council of Europe Convention 108 on the protection of personal information, the landmark international law in the field of personal data protection.

Privacy by design and security of personal data processing

On this occasion, ENISA takes the opportunity to share some of its work in the fields of privacy by design and security of personal data processing.

With its latest report on ’Privacy and data protection in mobile apps‘, the Agency analyses the features of the app development environment that affect privacy and security. Additionally, this report discusses the promise that implementing privacy by design holds for data controllers and data subjects alike.

To this end, this report explicitly highlights the need for scalable methodologies and best practices that can help integrate privacy requirements into contemporary app design practices, while enhancing usability and addressing all parties of the complex app ecosystem.

Moreover, ENISA with its ’Handbook on security of personal data processing’ complements its previously published guidelines on risk assessment and security measures for SMEs by providing specific use cases on pragmatic processing operations that are common for all SMEs.

For each use case, the handbook provides guidelines on the application of ENISA’s approach in order to assess in practice the risks that affect the rights and freedoms of data subjects and to facilitate the adoption of the technical and organisational measures that are commensurate with the risk presented.

ENISA report on privacy and data protection in mobile apps: https://www.enisa.europa.eu/publications/privacy-and-data-protection-in-mobile-applications/ 

 ENISA handbook on security of personal data processing: https://www.enisa.europa.eu/publications/handbook-on-security-of-personal-data-processing/