Fwd: Question

Greetings,
Antonio shared with me and now I to you an excellent example of a significantly more rigorous Privacy Impact Assessment Guideline for  RFID  Applications.
It aligns itself much more closely to the OASIS  PMRM  and  PbD  works and provides for a Risk Assessment process that aligns itself with the various known privacy risks that map back to privacy requirements.
It creates controls that are more comprehensive and implies the need for a much more disciplined implementation of detailed controls into services and mechanisms.
It also provides three models that are rather comprehensive for various types of  RFID  scenarios (retail, public transport and automotive) and it integrates various IT standard modeling techniques to display the outcome of various steps or phases.
This Assessment Guideline is in a two year trial period.
Perhaps, when we finish our commentary to  NIST , we might want to consider making commentaries on those initiatives that closely align themselves with the OASIS  PMRM  and  PbD  works, including the one that Antonio has shared with us. With minor changes to this initiative and others they may achieve significant results.
While I can certainly demonstrate my application of the  PMRM  beginning in 2000 and describe the benefits i accrued, they are not what is needed now. I applied the PMRM at a macro level to guide entities and privacy offices in setting high level controls.
Now it is time to develop much more detailed controls and apply these OASIS models and methodologies at a more granular level.
It might be beneficial to acknowledge and examine the more recent works that are applying successfully the elements of the OASIS works and to help formulate the standards for the 'Privacy Engineer'.
Just a thought.
Best, Gail

----------

Forwarded message

----------
From:  Antonio  kung
< antonio . kung @ trialog .com>
Date: Tue, Jun 16, 2015 at 11:21 AM
Subject: Re: Question
To: Gail  Magnuson  < gail . magnuson @ gmail.com
>
Gail,
See  https:// ec . europa . eu /energy/en/test-phase-data-protection- im pact-assessment- dpia -template-smart-grid-and-smart-metering-systems
cheers
Antonio
Le 16/06/2015 17:20, Gail  Magnuson  a  écrit  :
Antonio,
Thanks so much for your observations!
During the call you mentioned a trial process going on in the EU. Do you have a link to this process that is in English?
Best, Gail

--
Gail Ann Magnuson
Mobile:  1.704.232.5648

Residence: Ponce Inlet, FL
Mailing Address  4624 Harbour Village Boulevard #4406  Ponce
Inlet, FL 32127
--
_________________________________________________________________________
TRIALOG
25 rue  du  general  Foy
F-75008 Paris
http://www. trialog .com
Tel   : 33 (0) 1 44 70 61 00  Direct : 33 (0) 1 44 70 61 03  Fax   : 33 (0) 1 44 70 05 91
mailto :  antonio . kung @ trialog .com
_________________________________________________________________________

--
Software Engineering Focused on Embedded Systems Technology --

--
Connectivity Solutions for Embedded Systems --  _____________________________________________________________________  The information contained in this transmission, which may be  confidential and proprietary, is only for the intended recipients.  Unauthorized use is strictly prohibited. If you receive this  transmission in error, please notify me immediately by telephone  or electronic mail and confirm that you deleted this transmission  and the reply from your electronic mail system.  _____________________________________________________________________

--
Gail Ann  Magnuson
Mobile: 1.704.232.5648

Residence: Ponce Inlet, FL  Mailing Address 4624 Harbour Village Boulevard #4406 Ponce
Inlet, FL 32127