Privacy Impact Assessments

Abstract

Privacy is a concept in disarray. Nobody can articulate what it means (Solove, 2006). The concept of privacy is increasingly less self-evident in a world where digital innovations surround us and literally starts getting under our skin (Hoepman, 2020). Two unique publications, 12 years apart signaling the same sentiment. In order to participate in society, one must constantly submit personally identifiable information. In a study conducted by the Pew Research Center (2023), Just 9% of adults say they always read a company’s privacy policy before agreeing to the terms and conditions, while an additional 13% say they do this often. And additionally, 38% of Americans say they sometimes read these policies. There is also a segment of the population who forgo reading these policies altogether: More than a third of adults (36%) say they never read a privacy policy before agreeing to it (Para. 4). Understanding the difference between impact and risk assessments and when to use them are vital to establishing a strong privacy foundation. Acquiring proficiency in the methodologies for conducting these assessments contributes to the development of privacy maturity.

Keywords: Privacy, Impact Assessment, Data Management