ENISA
https://www.enisa.europa.eu
Trust Service Forum 2022: Deepdive into Digital Identity Wallets and Web Certificates
https://www.enisa.europa.eu/news/trust-service-forum-2022-deepdive-into-policy-developments-digital-identity-wallets-and-web-certificates
The European Union Agency for Cybersecurity (ENISA) gathered experts from trust services providers, standardisation bodies and national authorities around the discussion tables of the Trust Services Forum organised on 27 and 28 October in Berlin.No publisherTrust ServicesTrust service providersIdentity & TrusteIDAS Incident Reporting2022/11/09 17:15:00 GMT+2News ItemTrust and Reputation Models
https://www.enisa.europa.eu/publications/trust-and-reputation-models
Reputation systems are a key success factor of many websites, enabling users and customers to have a better understanding of the information, products and services being provided. However, by using reputation systems, individuals place themselves at additional risk. This report studies privacy risks of in duty systems and surveys the current practice of reputation providers. Furthermore, it gives recommendations to service providers to improve their practice to mitigate risks for their customers and to policymakers to improve the legal framework on privacy and data protection to suit the needs of our modern communication society.No publisherIdentity & Trust2011/12/19 15:10:00 GMT+2Report/StudyTo log or not to log? - Risks and benefits of emerging life-logging applications [Appendix I]
https://www.enisa.europa.eu/publications/life-logging-risk-assessment/to-log-or-not-to-log-risks-and-benefits-of-emerging-life-logging-applications-appendix-i/view
This is the Appendix I Scenario Building and Analysis Template, accompanying the deliverable "To log or not to log? - Risks and benefits of emerging life-logging applications".No publisherEuropean Union InstitutionsIdentity & TrustRisk ManagementPrivacy2011/11/10 22:00:00 GMT+2FileTo log or not to log? - Risks and benefits of emerging life-logging applications
https://www.enisa.europa.eu/publications/to-log-or-not-to-log-risks-and-benefits-of-emerging-life-logging-applications
No publisherEuropean Union InstitutionsRisk ManagementNetwork and Information Security AwarenessIdentity & TrustPrivacy2011/11/10 22:00:00 GMT+2Report/StudyTo log or not to log? - Risks and benefits of emerging life-logging applications [Appendix II]
https://www.enisa.europa.eu/publications/life-logging-risk-assessment/to-log-or-not-to-log-risks-and-benefits-of-emerging-life-logging-applications-appendix-ii/view
This is the Appendix II Risk Assessment Spreadsheet, accompanying the deliverable "To log or not to log? - Risks and benefits of emerging life-logging applications"No publisherNetwork and Information Security AwarenessEuropean Union InstitutionsIdentity & TrustRisk ManagementPrivacy2011/11/10 22:00:00 GMT+2FileThe Use of Cryptographic Techniques in Europe
https://www.enisa.europa.eu/publications/the-use-of-cryptographic-techniques-in-europe
With the increased use of e-Government services, the amount of citizens’ sensitive data being transmitted over public networks (e.g. the Internet) and stored within applications that are accessible from anywhere on the Internet has grown significantly. Hence, the cryptographic recommendations and specifications that European Union (EU) Member States promote for e-Government services have a direct impact on the privacy of European citizens. This study examine Member States’ cryptographic documents and specifications that relate to the encryption of unclassified information stored and transmitted by e-Government services. The findings and recommendations rely on answers received from Member States, covering more than 61% of the EU population; additionally, selected members of the European ICT industry provided feedback on their experience of working with, deploying, auditing and testing Member States’ cryptographic solutions.No publisherIdentity & Trust2011/12/19 15:10:00 GMT+2Report/StudyThe right to be forgotten - between expectations and practice
https://www.enisa.europa.eu/publications/the-right-to-be-forgotten
The right to be forgotten is included in the proposed regulation on data protection published by the European Commission in January 2012. The regulation is still to be adopted by the European Parliament for entering into force. The different legal aspects of the right to be forgotten (i.e. right to erasure or right to oblivion) have been debated in different contexts and are beyond the scope of this paper. With this paper we aim to cover other facets of the right to be forgotten. We focus on the technical means to enforce or support the right in information systems; as can be seen from this paper, there are technical limitations and there is a further need for clear definitions and legal clarifications.No publisherIdentity & TrustPrivacy2012/11/20 00:05:00 GMT+2Report/StudyThe Future of Identity
https://www.enisa.europa.eu/news/enisa-news/the-future-of-identity
No publisherENISA eventsIdentity & Trust2013/08/23 16:48:04 GMT+2News ItemTechnology-induced challenges in Privacy & Data Protection in Europe [German Version]
https://www.enisa.europa.eu/publications/technology-induced-challenges-in-privacy-data-protection-in-europe-german-version
In this page you will find the German version of the report.No publisherIdentity & TrustTrainingsPrivacy2009/10/13 10:16:00 GMT+2Report/StudyTechnology-induced challenges in Privacy & Data Protection in Europe [Spanish Version]
https://www.enisa.europa.eu/publications/technology-induced-challenges-in-privacy-data-protection-in-europe-spanish-version
In this page you will find the Spanish version of the report.No publisherIdentity & TrustTrainingsPrivacy2009/10/13 10:05:00 GMT+2Report/StudyTechnology-induced challenges in Privacy & Data Protection in Europe [French Version]
https://www.enisa.europa.eu/publications/technology-induced-challenges-in-privacy-data-protection-in-europe-fr
In this page you will find the French version of the report. No publisherIdentity & TrustTrainingsPrivacy2009/10/13 10:05:00 GMT+2Report/StudyTechnology-induced challenges in Privacy & Data Protection in Europe
https://www.enisa.europa.eu/publications/technology-induced-challenges-in-privacy-data-protection-in-europe
The ENISA Working Group on Privacy & Technology has been established to analyse the problems posed by these technology trends and the implications for the current EU legal framework. The main task of the Working Group is to propose actions to cope with these difficulties. In this report, we identify the main technology-induced gaps between data protection regulation and the realities of the developing socio-economic environment. We consider the potential threats and opportunities presented by state-of-the-art technologies and suggest priorities for tackling the most pressing gaps.No publisherIdentity & TrustTrainingsPrivacy2009/08/07 12:50:00 GMT+2Report/StudySurvey of accountability, trust, consent, tracking, security and privacy mechanisms in online environments
https://www.enisa.europa.eu/publications/survey-pat
The study, using a survey, attempts to evaluate which are currently the mechanisms deployed in available online services for accountability, consent, trust, security and privacy. While the finding of this survey cannot be easily extrapolated to all online services, some trends are prominent and it is safe to assume that these are valid for most organisations that operate online. Besides these trends, we mention here the lack of a single coherent view on how to best achieve user privacy in online environments. An increase in awareness of privacy and security concepts within organisations and industry sectors appears to be desirable, in order to maintain a high level of security and confidence on the part of users and society in the ICT infrastructure and services provided within the EU. A major area of concern was how the EU would create and maintain a ‘level regulatory playing field’, especially with non-EU based multinationals entering the EU market without proper (privacy) compliance and rapidly establishing a significant user base. No publisherIdentity & TrustPrivacy2011/01/31 15:45:00 GMT+2Report/StudySupporting the fight against cybercrime
https://www.enisa.europa.eu/news/enisa-news/supporting-the-fight-against-cybercrime
The map to the road less traveled: CSIRTs & Law Enforcement cooperationNo publisherCybersecurityLaw Enforcement AutoritiesIdentity & TrustCSIRTsCyber Crisis Cooperation2020/04/02 12:00:00 GMT+2News ItemStudy on data collection and storage in the EU
https://www.enisa.europa.eu/publications/data-collection
Given the clear contrast between the importance of the privacy by design principle on the one hand, and the reality of lax data protection practices with many online service providers on the other hand, the aim of this study is to present an analysis of the relevant legal framework of European Member States on the principles of minimal disclosure and the minimum duration of the storage of personal data. The study is not intended to go too deep into the details of the legal complexities of the data protection legislation. It rather focuses on a limited number of relevant use cases and tries to find out how the aforementioned principles are expressed in concrete legal or regulatory provisions applicable to these cases, and how they are observed in practice.No publisherIdentity & TrustPrivacy2012/02/23 11:55:00 GMT+2Report/Study