Arguing conformance with data protection principles

TL;DR

This paper discusses how organizations can use conformance arguments to substantiate and improve the assessment of their compliance with data protection principles, enhancing transparency and trust.

Contribution

It introduces the concept of using conformance arguments as a systematic approach for organizations to demonstrate compliance with data protection principles.

Findings

Conformance arguments can improve assessment rigor.

Use of conformance arguments enhances transparency.

Supports trust among organizations, authorities, and data subjects.

Abstract

We show how conformance arguments can be used by organisations to substantiate claims of conformance to data protection principles. Use of conformance arguments can improve the rigour and consistency with which these organisations, supervisory authorities, certification bodies and data subjects can assess the truth of these claims.