Regulations for privacy enhancing security technologies in Europe

What are the principles that security research and security technologies must follow if they are to comply with fundamental rights and European values? The PRISE project, coordinated by the ITA, tried to answer this question in a participatory process involving producers, users, experts and citizens.

The objective of PRISE was to promote a secure future for European citizens based on innovative security technologies and policies that are in line with privacy protection and human rights in general. PRISE developed guidelines for security solutions to meet these requirements. It provided assistance to the European Union in shaping its forthcoming security research programme.

Scenarios were prepared and presented to citizens

First of all we set up standards for a security research and technology development that would benefit privacy. On this basis, we consulted various interest groups including security technology workers, private and public users, institutions and organisations that represented possibly conflicting interests. The background is that accepted and acceptable security technologies are easier to introduce, are used more and encounter less public and user opposition. They also help to make the European security industry more competitive by providing guidelines for security technologies that comply with the fundamental rights.

The principal result of PRISE was a set of criteria for improving security technologies. These sets of criteria are intended to be applied in research, development, and during implementation, and by industry, policy makers, public and private users.

The PRISE guidelines are

  • There is a baseline of privacy that is inviolable
  • Privacy and security is not a zero sum game
  • General access for law enforcement authorities to existing databases is not acceptable
  • Preservation of privacy is a shared responsibility
  • Use of PRISE criteria in FP7 project evaluations is an important step
  • Privacy enhancement is an essential non-functional requirement
  • Privacy protection requires continuous further development and reassessment of criteria

Publikationen

Publikationen

  • Peissl, W. (2012). Datenschutz als Designmerkmal. In M. Decker, Grunwald, A., & Knapp, M. (Eds.), Der Systemblick auf Innovation – Technikfolgenabschätzung in der Technikgestaltung (pp. 141-148). Berlin: edition sigma.
  • Peissl, W. (2011). New and emerging approaches to privacy. Practis Newsletter, 11.
  • Čas, J. (2010). Privacy and Security: A Brief Synopsis of the Results of the European TA-Project PRISE. In S. Gutwirth, Poullet, Y., & De Hert, P. (Eds.), Data Protection in a Profiled World (pp. 257-262). Heidelberg: Springer.
  • Peissl, W. (2009). Privacy and Security - a way to manage the dilemma. (N. Pohlmann, Reimer, H., & Schneider, W., Eds.), ISSE 2009 Securing Electronic Business Processes. Highlights of the Information Security Solutions European 2009 Conference. Wiesbaden: Vieweg+Teubner.
  • Cas, J. (Ed.). (2009). Towards privacy enhancing security technologies - the next steps. Towards privacy enhancing security technologies - the next steps (p. 149). Wien. Retrieved from http://prise.oeaw.ac.at/docs/PRISE_D7.3_Concluding_Conference_Proceedings.pdf
  • Cas, J. (2008). Privatsphäre und Sicherheit. Ergebnisse aus dem europäischen TA-Projekt PRISE. Technikfolgenabschätzung - Theorie Und Praxis, 79-82. Retrieved from http://www.tatup-journal.de/tatup083_jcas08a.php
  • Cas, J. (2008). Datenschutzfördernde Sicherheitstechnologien - Ergebnisse und Empfehlungen aus dem PRISE-Projekt (Privacy and Security). Tagungsband 6th Information Security Conference - Critical Infrastructures.
  • Cas, J. (2008). PRISE - Abschlusskonferenz: Leitlinien für grundrechtskonforme Sicherheitstechnologien und Sicherheitsmaßnahmen. Ita-Newsletter Juni 2008, 17. Retrieved from http://epub.oeaw.ac.at/ita/ita-newsletter/NL0608.pdf#17
  • Peissl, W., Raguse, M., Meints, M., & Langfeldt, O. (2008). Criteria for privacy enhancing security technologies. Wien.
  • Cas, J. (2008). Kriterienkatalog zu Privatsphäre und Sicherheit, 2-3. Retrieved from http://epub.oeaw.ac.at/ita/ita-newsletter/NL0308.pdf#2
  • Cas, J. (2007). Austrian report - Interview meeting about security technologies and privacy (Deliverable 5.2 of the PRISE project) (p. 20). Wien. Retrieved from http://prise.oeaw.ac.at/docs/PRISE_D5.2_Austrian_Interview_meeting_report.pdf
  • Cas, J. (2007). Privatsphäre und Sicherheit - Ein Kurzbericht vom ersten PRISE-Workshop, 2-3. Retrieved from http://epub.oeaw.ac.at/ita/ita-newsletter/NL0307.pdf#2-3
  • Cas, J. (2006). Reassuring habitats - rearrested inhabitants?, 6-7. Retrieved from http://epub.oeaw.ac.at/ita/ita-newsletter/NL0906.pdf#6
  • 1

Konferenzbeiträge/Vorträge

Konferenzbeiträge/Vorträge

  • 20/04/2012 , Sofia
    Walter Peissl: 
    PRISE – Privacy and Security: Supporting activity outline
    PACITA Workshop
    Other Invited Lecture
  • 01/12/2011 , Brussels
    Johann Cas: 
    What is (in-)security today? And what does it mean to Responsible Research and Innovation in Biometrics and Security Technologies
    RISE Final Conference
    Other Lecture
  • 10/09/2011 , Wien
    Johann Cas: 
    '9/11’ als Startschuss zum Überwachungswahn? (Einleitungsvortrag)
    Podiumsdiskussion im Rahmen der "Freiheit statt Angst"-Tage 2011
    Other Invited Lecture
  • 25/11/2010 , Berlin
    Walter Peissl: 
    Datenschutz als Designmerkmal – Vorschläge zur Technikgestaltung am Beispiel von TA-Forschungen zur Privatsphäre in der Informationsgesellschaft
    NTA4
    Other Lecture
  • 22/10/2010 , Wien
    Walter Peissl: 
    Sicherheit und Datenschutz als integrierte Planungsvorgaben von Produkt- und Technologieentwicklung
    Jahreskonferenz des Instituts für Sicherheitsforschung [Sigmund Freud Priv. Univ. Wien]
    Other Invited Lecture
  • 27/10/2009 , Wien
    Walter Peissl: 
    Privacy and Security, Results from the PRISE project
    Privacy OS
    Other Lecture
  • 04/12/2008 , Madrid
    Johann Cas: 
    PRISE - Guidelines for Privacy Enhancing Security Technologies
    1. Seminario Internacional de Protección de Datos y Personalidad
    Other Invited Lecture
  • 17/11/2008 , Brüssel
    Johann Cas: 
    Ethical Aspects of Security and Privacy - Technical and Regulatory
    ESRIF Transverse working group Meeting
    Other Invited Lecture
  • 14/11/2008 , Ispra
    Walter Peissl: 
    How to integrate privacy principles into security technologies - The PRISE approach
    Workshop on Privacy (JRC/IPSC)
    Other Invited Lecture
  • 22/10/2008 , Krems
    Johann Cas: 
    PRISE - Kriterien für Privacy Enhancing Security Technologies
    6. Information Security Konferenz Donau-Uni Krems 2008
    Other Invited Lecture
  • 01/10/2008 , Brüssel
    Johann Cas: 
    Criteria for Privacy Enhancing Security Technologies
    NAT SEC 08
    Other Invited Lecture
  • 29/09/2008 , Paris
    Walter Peissl: 
    Privacy and Security - the PRISE matrix. An innovative approach to accepted and acceptable security technologies
    SRC08 - European Security Research Conference 2008
    Other Invited Lecture
  • 04/09/2008 , Brüssel
    Johann Cas: 
    Ethical aspects of Security Research - Privacy and Freedom enhancing technologies
    ESRIF WG11 meeting
    Other Invited Lecture
  • 28/04/2008 , Wien
    Walter Peissl: 
    The PRISE Framework
    PRISE Final Conference
    Other Lecture
  • 04/02/2008 , Wien
    Walter Peissl: 
    The PRISE Framework
    2nd User and Stakeholder Workshop
    Other Lecture
  • 16/04/2007 , Brüssel
    Walter Peissl: 
    Criteria for privacy enhancing security technologies
    Prise-Review Workshop
    Other Lecture
  • 19/12/2006 , Wien
    Walter Peissl: 
    PRISE - Ein erfolgreiches PASR Projekt mit österreichischer Beteiligung
    Thematische Auftaktkonferenz zum 7. EU-Forschungsrahmenprogramm
    Other Invited Lecture
  • 25/08/2006 , Alpbach
    Johann Cas: 
    Reassuring habitats - rearrested inhabitants?
    Komplexität, Konvergenz, Gewissheit - Der Prozess von der Wissenschaft zur Technologie
    Other Invited Lecture
  • 1

Duration

01/2006 - 06/2008