{"id":21137,"date":"2017-12-04T13:56:30","date_gmt":"2017-12-04T13:56:30","guid":{"rendered":"http:\/\/digileaders.com\/?p=21137"},"modified":"2019-01-17T09:43:25","modified_gmt":"2019-01-17T09:43:25","slug":"making-data-protection-fit-digital-government","status":"publish","type":"post","link":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/","title":{"rendered":"Making data protection fit for digital government"},"content":{"rendered":"

New EU regulations are not always a source of design inspiration but bear with me while I explain how the General Data Protection Regulations (GDPR) are much more than the introduction of more red tape and bureaucracy for the public sector and businesses in the UK.<\/p>\n

What is the\u00a0GDPR?<\/strong><\/h3>\n

The GDPR is a new regulation for the way data is collected, managed and stored in organisations. It was adopted in April 2016 and will be directly applicable to all EU member states. It takes full effect in May 2018.<\/p>\n

Similar to the Data Protection Act (DPA), the GDPR applies to data controllers and data processors. Controllers are the organisations that decide the purpose and manner in which data is collected\u200a\u2014\u200afor example, a local council. Processors act on the controller\u2019s behalf\u200a\u2014\u200afor example, software providers\u200a\u2014\u200aand will have additional obligations under the GDPR.<\/p>\n

Just like the DPA, the GDPR applies to personal data. However, the GDPR has broadened the definition of what constitutes personal data, making it more appropriate for the internet age. On a basic level, this means that cookies (that track browsing habits) and IP addresses (used to identify a computer or phone) will now be seen as personal data. An individual\u2019s rights over their data will also extend, with measures like the right to be forgotten. Although there will be exemptions, this is likely to be difficult to implement\u200a\u2014\u200aas many organisations\u2019 data isn\u2019t stored in a way that allows for quick identification and deletion.<\/p>\n

What about Brexit? The UK Government has confirmed that the decision to leave the EU will not affect the start of the GDPR (although what happens when we\u2019ve actually left is anyone\u2019s guess).<\/p>\n

Avoiding Fines<\/strong><\/h3>\n

The GDPR will undoubtedly act as a catalyst for the public sector to tighten up its approach to data management, if for no other reason than to avoid the huge fines now within the reach of the Information Commissioner\u2019s Office. Although, despite the recent claims from sections of the media, the chances of actually being handed a large fine in the early days are negligible. Elizabeth Denham, Information Commissioner,\u00a0recently dispelled several myths on this subject<\/a>.<\/em><\/p>\n

We think it\u2019s shortsighted to consider the avoidance of a fine as the only way to save money via GDPR when the reality is that there\u2019s a bigger opportunity for the public sector if it uses this time as to think about data protection legislation more broadly.<\/p>\n

The opportunity for the public\u00a0sector<\/strong><\/h3>\n

GDPR is ultimately about the trust you build with your service users and how you use their data. This is a constantly changing relationship as people interact more and more with digital services. Seemingly small things in the new GDPR legislation, like banning pre-ticked consent boxes, actually signal a big shift in attitude and approach.<\/p>\n

We now need to look at working with data from the perspectives of fairness, transparency, agency, accuracy, security and an individual\u2019s rights. A well governed organisation should already be doing these things but it\u2019s often managed through a compliance regime that catches issues when they arise. How might we change this approach and embed data protection into our design thinking?<\/p>\n

This is not a new concept. A report that was published in 1995 called \u201cPrivacy-enhancing technologies: the path to anonymity\u201d<\/a>\u00a0and was the result of a joint project between the Dutch Data Protection Authority and the Ontario Information Commissioner. Although very technology focussed, it explored approaching privacy protection, by designing systems with no (or much less) personal data, that could still deliver the required features.<\/p>\n

Privacy by\u00a0design<\/strong><\/h3>\n

When designing the services for local government, the challenge is to think about privacy as early as possible. Where technology is involved, this means having a clear plan for minimising the need for user data before a line of code has been written. This moves how we respond to data protection legislation from a question of compliance and post-hoc impact assessment, to a design constraint that will help us deliver the best possible services for citizens.<\/p>\n

Privacy by design is an opportunity to design digital services that are more secure, require less personal data, give our users more control over their own information and cost less to provide.<\/p>\n

For example, in local government there\u2019s often a lack of trust between agencies when it comes to data sharing. This is particularly prevalent when it comes to highly sensitive information such as health and social care records. Clearly, data of this nature needs to be handled securely, but a reluctance to share can result in over-administration. This, in turn, leads to valuable front-line workers spending more time at their desks than they do with citizens. By designing technology that\u2019s built around a smarter approach to data management, you could simultaneously reduce administration while improving outcomes.<\/p>\n

The forthcoming GDPR is an opportunity to ignite a long overdue debate on how to balance the nuances of privacy with a national desire to improve public services. The last time we broached the subject in the UK was during the failed introduction of ID cards. But surely things have moved on since then? Haven\u2019t they?<\/p>\n

\n

This article was originally published here<\/a> and was reposted with permission.<\/p>\n","protected":false},"excerpt":{"rendered":"

New EU regulations are not always a source of design inspiration but bear with me while I explain how the General Data Protection Regulations (GDPR) are much more than the introduction of more red tape and bureaucracy for the public sector and businesses in the […]<\/p>\n","protected":false},"author":11,"featured_media":21139,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"class_list":["post-21137","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","topic-cyber-security","topic-government"],"acf":[],"yoast_head":"\nMaking data protection fit for digital government | Digital Leaders<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Making data protection fit for digital government | Digital Leaders\" \/>\n<meta property=\"og:description\" content=\"New EU regulations are not always a source of design inspiration but bear with me while I explain how the General Data Protection Regulations (GDPR) are much more than the introduction of more red tape and bureaucracy for the public sector and businesses in the […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/\" \/>\n<meta property=\"og:site_name\" content=\"Digital Leaders\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/digitalleadersprogramme\" \/>\n<meta property=\"article:published_time\" content=\"2017-12-04T13:56:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-01-17T09:43:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/safe_share_padlock-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"729\" \/>\n\t<meta property=\"og:image:height\" content=\"360\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"helena.larsen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:site\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"helena.larsen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/\"},\"author\":{\"name\":\"helena.larsen\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e\"},\"headline\":\"Making data protection fit for digital government\",\"datePublished\":\"2017-12-04T13:56:30+00:00\",\"dateModified\":\"2019-01-17T09:43:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/\"},\"wordCount\":883,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/safe_share_padlock-1.jpg\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/\",\"url\":\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/\",\"name\":\"Making data protection fit for digital government | Digital Leaders\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/safe_share_padlock-1.jpg\",\"datePublished\":\"2017-12-04T13:56:30+00:00\",\"dateModified\":\"2019-01-17T09:43:25+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#primaryimage\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/safe_share_padlock-1.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/safe_share_padlock-1.jpg\",\"width\":729,\"height\":360},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/digileaders.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Making data protection fit for digital government\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/digileaders.com\/#website\",\"url\":\"https:\/\/digileaders.com\/\",\"name\":\"Digital Leaders\",\"description\":\"We Lead Transformation\",\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/digileaders.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/digileaders.com\/#organization\",\"name\":\"Digital Leaders\",\"url\":\"https:\/\/digileaders.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"width\":3000,\"height\":2992,\"caption\":\"Digital Leaders\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/digitalleadersprogramme\",\"https:\/\/x.com\/DigiLeaders\",\"https:\/\/www.linkedin.com\/groups\/6527637\/\",\"https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e\",\"name\":\"helena.larsen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g\",\"caption\":\"helena.larsen\"},\"sameAs\":[\"louise.stokes@digileaders.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Making data protection fit for digital government | Digital Leaders","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/","og_locale":"en_GB","og_type":"article","og_title":"Making data protection fit for digital government | Digital Leaders","og_description":"New EU regulations are not always a source of design inspiration but bear with me while I explain how the General Data Protection Regulations (GDPR) are much more than the introduction of more red tape and bureaucracy for the public sector and businesses in the […]","og_url":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/","og_site_name":"Digital Leaders","article_publisher":"https:\/\/www.facebook.com\/digitalleadersprogramme","article_published_time":"2017-12-04T13:56:30+00:00","article_modified_time":"2019-01-17T09:43:25+00:00","og_image":[{"width":729,"height":360,"url":"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/safe_share_padlock-1.jpg","type":"image\/jpeg"}],"author":"helena.larsen","twitter_card":"summary_large_image","twitter_creator":"@DigiLeaders","twitter_site":"@DigiLeaders","twitter_misc":{"Written by":"helena.larsen","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#article","isPartOf":{"@id":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/"},"author":{"name":"helena.larsen","@id":"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e"},"headline":"Making data protection fit for digital government","datePublished":"2017-12-04T13:56:30+00:00","dateModified":"2019-01-17T09:43:25+00:00","mainEntityOfPage":{"@id":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/"},"wordCount":883,"commentCount":0,"publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"image":{"@id":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/safe_share_padlock-1.jpg","inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/","url":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/","name":"Making data protection fit for digital government | Digital Leaders","isPartOf":{"@id":"https:\/\/digileaders.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#primaryimage"},"image":{"@id":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/safe_share_padlock-1.jpg","datePublished":"2017-12-04T13:56:30+00:00","dateModified":"2019-01-17T09:43:25+00:00","breadcrumb":{"@id":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#primaryimage","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/safe_share_padlock-1.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/safe_share_padlock-1.jpg","width":729,"height":360},{"@type":"BreadcrumbList","@id":"https:\/\/digileaders.com\/making-data-protection-fit-digital-government\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/digileaders.com\/"},{"@type":"ListItem","position":2,"name":"Making data protection fit for digital government"}]},{"@type":"WebSite","@id":"https:\/\/digileaders.com\/#website","url":"https:\/\/digileaders.com\/","name":"Digital Leaders","description":"We Lead Transformation","publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/digileaders.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/digileaders.com\/#organization","name":"Digital Leaders","url":"https:\/\/digileaders.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","width":3000,"height":2992,"caption":"Digital Leaders"},"image":{"@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/digitalleadersprogramme","https:\/\/x.com\/DigiLeaders","https:\/\/www.linkedin.com\/groups\/6527637\/","https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ"]},{"@type":"Person","@id":"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e","name":"helena.larsen","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g","caption":"helena.larsen"},"sameAs":["louise.stokes@digileaders.com"]}]}},"_links":{"self":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/21137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/comments?post=21137"}],"version-history":[{"count":0,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/21137\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media\/21139"}],"wp:attachment":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media?parent=21137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}