The Privacy Audit: Learning from Contact Tracing’s Data Protection Failures
A forthcoming analysis in Computer Law & Security Review critically assesses the effectiveness of Data Protection Impact Assessments (DPIAs) by examining their application to COVID-19 contact tracing apps. The study by Michael Spratt and TJ McIntyre investigates whether these mandated privacy risk assessments successfully identified and mitigated the significant data security and information security challenges posed by rapid digital surveillance deployment. This research is crucial for understanding how DPIAs function under pressure and their role in compliance frameworks for technologies handling sensitive personal data.
Study Significance: For cybersecurity and risk management professionals, this study offers vital lessons for strengthening incident response and vulnerability assessment protocols. The findings directly inform the development of more robust security policies and compliance strategies for future public health crises or any large-scale deployment of identity and access management systems. It underscores the need for DPIAs to evolve beyond checkbox exercises into dynamic tools for proactive threat intelligence and data breach prevention.
Source →Stay curious. Stay informed — with Science Briefing.
Always double check the original article for accuracy.
