Toby Stevens will address the ESRC conference on industry experiences of assessing privacy impact.

A series of regulatory and legislative requirements have to be met by business and government departments, with initiatives such as the Government’s 2008 Data Handling Review mandating the conduct of privacy impact assessments.  Whilst guidance from the information Commissioner has been a good starting point on how to assess privacy impact and on how to meet the requirements of legislation, a range of questions still remain for businesses, large and small, whether data holders or vendors who consult on security and privacy or supply privacy enhancing technologies.  These questions are not simply ones of clarity but also ones of practice, both in terms of establishing cost-effective standardisation and objectivity.   
 
The situation is made more complicated because consumer views about privacy are mixed.  Some view privacy as a luxury good which can be exchanged in the short term for quick financial gain, others are anxious about the aggregation over time of tradable personal information. For many there isn’t a problem.
 
The aim of this seminar will be to bring forward ideas that can help inform best practice and explore the evidence base on which processes and technologies can be developed and deployed.  Please find attached the provisional seminar agenda for your information.