Citizen security v. data security: the role of standardisation in bridging the gap

Abstract

Citizen and infrastructure security on the one hand, and the rights to privacy and personal data protection on the other, have been widely discussed in opposition to each other. There are mixed feelings in society: low tolerance of risk and high feelings of insecurity vs. sensitivity toward unnecessary interferences into the private sphere.

Technical standards and certification have been developing in both fields. Traditionally, security is an area for standardisation activity. Recently, privacy seals and data protection standards have also been developed at international and European level. In particular, in the forthcoming GDPR, standards and seals have a prominent role in facilitating compliance with the law.

Starting from the re-evaluation of the relationship of the two concepts of security and privacy, the panel will assess the role of technical standards and certification as a facilitator of both citizen security and personal data protection. The discussion will revolve around the following questions:

- Privacy and security: priority, balance or trade-off? - Are there “good” and “evil” security technologies? - Can standardisation and certification play a role in balancing the two concepts? - What are the perspectives and limitations of such an approach?