Groups - ISTPA Analysis of Privacy Principles uploaded

Submitter's message
As the TC analyzes the NISTR 8062 for committee comments, it may be useful to read this 2007 ISTPA study, which illustrates the core components of 12 representative privacy las, regulations and best practices documents.  This document helped inform the development of the PMRM. The draft NISTR (line 302 ff. critiques FIPPs as merely  conceptual,  which this study shows is an inaccurate characterization.

--
John Sabo
Document Name :  ISTPA Analysis of Privacy Principles
Description
The Analysis of Privacy Principles, published in 2007 by the ISTPA,  analyzed twelve international privacy regulations and best documents  [instruments] in order to determine if a  common  set of  FIPPs could be  extracted or inferred.

 The study methodology included the use of a working set of privacy  principles in order to facilitate cross-instrument mapping while also  accommodating their many variations in the twelve instruments:
Accountability, Notice, Consent, Collection Limitation, Use Limitation,  Disclosure, Access and Correction, Security/Safeguards, Data Quality,  Enforcement, and Openness.

 Using direct references extracted from each instrument, mapped against  these terms in tabular format, the Analysis compares and correlates the  language in each instrument associated with these key principles and  identifies in nine instances where a particular principle is composed of  additional, definable components.
Download Latest Revision
Public Download Link
Submitter : John Sabo
Group : OASIS Privacy Management Reference Model (PMRM)

TC
Folder : Standards
Date submitted : 2015-06-22 09:48:47