Big Data and Data Protection Overview
The Information Commissioner's Office (ICO) in the UK upholds information rights by enforcing regulations like the Data Protection Act and promoting data privacy. ICO's powers include fines for breaches, enforcement notices, and audits. Understanding the Data Protection Act's eight principles is crucial for organizations utilizing big data and analytics. Ensuring transparency and trust in handling personal data, along with complying with DP principles, are key factors in navigating the challenges of big data analytics.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
Big Data and data protection Alastair Barter Information Commissioner s Office
The ICO - Our Mission: The Information Commissioner s Office (ICO) is the UK s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
The role of the ICO Enforce and regulate Freedom of Information Act Data Protection Act Environmental Information Regulations Privacy and Electronic Communications Regulations Provide information to individuals and organisations Adjudicate on complaints Promote good practice
ICO Powers 500,000 fines for serious breaches of DPA 500,000 fines for serious breaches of PECR Enforcement notices and undertakings Audit functions Criminal cases blagging
Data Protection Act 1998 The eight principles
Big Data - Our approach Big data and analytics are not games played by different rules. If personal data is used, the DP principles apply. DP challenges organisations to be innovative in doing big data and analytics. Be transparent; build trust.
Personal data Analytics will not always use personal data Personal data can be: provided observed derived inferred Anonymisation does work: can be more challenging for big data a tool to help big data analytics
DP Principles Fairness v creepy analytics What are people told? What are their reasonable expectations? What is the effect of the analysis? Obtaining meaningful consent Contracts, legitimate interests; is the analysis necessary? Purpose limitation v repurposing data Data minimisation v n=all SARs easier or harder?
Tools for compliance Carry out a privacy impact assessments Bake in privacy by design Transparency Privacy notices don t work with analytics and big data?
DP not fit for purpose? Flexibility in the principles DP challenges big data players to be innovative Role of 3rd parties (personal data services, accreditation) EU General Data Protection Regulation
Building trust, being transparent Examples of trust-based approach; commercial drivers for this Organisations are concerned about data quality in big data and analytics; an opportunity to build in DP Be realistic about the benefits; be open with data subjects
Keep in touch Subscribe to our e-newsletter at www.ico.org.uk or find us on /iconews @iconews
