Groups - ISTPA Analysis of Privacy Principles uploaded

[John Sabo<john.annapolis@comcast.net>]

        Submitter's message
        As the TC analyzes the NISTR 8062 for committee comments, it may be useful to read this 2007 ISTPA study, which illustrates the core components of 12 representative privacy las, regulations and best practices documents.  This document helped inform the development of the PMRM. The draft NISTR (line 302 ff. critiques FIPPs as merely "conceptual," which this study shows is an inaccurate characterization.
        
-- John Sabo

Document Name: ISTPA Analysis of Privacy Principles

---

Description
The Analysis of Privacy Principles, published in 2007 by the ISTPA,
analyzed twelve international privacy regulations and best documents
[instruments] in order to determine if a "common" set of FIPPs could be
extracted or inferred.

The study methodology included the use of a working set of privacy
principles in order to facilitate cross-instrument mapping while also
accommodating their many variations in the twelve instruments:
Accountability, Notice, Consent, Collection Limitation, Use Limitation,
Disclosure, Access and Correction, Security/Safeguards, Data Quality,
Enforcement, and Openness.

Using direct references extracted from each instrument, mapped against
these terms in tabular format, the Analysis compares and correlates the
language in each instrument associated with these key principles and
identifies in nine instances where a particular principle is composed of
additional, definable components.
Download Latest Revision
Public Download Link

---

Submitter: John Sabo
Group: OASIS Privacy Management Reference Model (PMRM) TC
Folder: Standards
Date submitted: 2015-06-22 09:48:47