European Privacy Seal

One of the main problems facing the information society is a lack of transparency in IT products and services causing a lack of trust in IT solutions. Citizens and business often need “a good faith belief” when using privacy relevant IT products and services. Technical developments are made by the hour and the possibilities of electronic surveillance are huge. Currently there is no transparent guidance for choosing a data security and privacy compliant product in Europe. The aim of this project was to introduce and disseminate a transparent European product privacy certificate that fosters consumer protection, civil rights and acceptance of privacy by marketing mechanisms as well as an increase of market transparency for privacy relevant products that leads to an enlargement of the market for Privacy Enhancing Technologies and finally an increase of trust in IT.

This project undertook a market validation of a European Privacy Seal that certifies the compliance of IT products and services with European privacy and data security law (e.g. 95/46/EC and 2002/58/EC). It was based on the regional ICPP Privacy Seal which certifies IT products and services compliance with regional and national regulations of privacy and data security after the completion of a specific two-step procedure: an evaluation by accepted legal and IT experts and a crosschecking of the evaluation report by ICPP.

Manufacturers or vendors of IT products or IT-based services can apply for a privacy seal on a voluntary base and use the certification to demonstrate privacy compliance of their product to customers. Customers and users can employ the certificate, issued by an independent third party, as information for their product choice. A short public report published for each certified product provides additional information on the product.

The project focused on the trans-European validation of the certification procedure and certification criteria as well as on expert admittance and accreditation of certification bodies. The procedural scheme and the general certification criteria is made publicly available to guarantee transparency. The validation is supported by trials in Germany, Austria, Slovakia, United Kingdom, and Sweden. The project started with a market, potential and legal analysis followed by the adaptation of ICPP criteria on certification and expert admittance to the European demands and trial set up. During and after trials and validation, procedures and criteria were evaluated. At the end of the project, it has been expected to grant European Privacy Seals in a final event. One of the key outputs of the project was the establishment of a transparent European Privacy Seal procedure and of a European privacy criteria catalogue based on the relevant European Directives and Regulations.

Duration

06/2007 - 02/2009

Coordinator

Independent Center for Privacy Protection Schleswig Holstein, Germany

Partners

Agencia de Protección de Datos de la Communidad de Madrid, Spain Borking Consultancy, Netherlands Commission Nationale de l`Informatique et des Libertés, Frankreich Ernst & Young AB, Sweden Institut für Technikfolgenabschätzung, Österreichische Akademie der Wissenschaften, Austria London Metropolitan University, United Kingdom TÜViT, Germany VaF s.r.o, Slowakia