Further reading (Optional)

Oetzel, C., Spiekermann, S., Grüning, I., Kelter, H. and Mull, S., 2011. Privacy Impact Assessment Guideline for RFID Applications. Bundesamt für Sicherheit in der Informationstechnik (BSI).
ICO, 2014. Conducting privacy impact assessments code of practice, Information Commissioner’s Office, 2014.
CNIL, 2015. How to carry out a PIA.
ISO/IEC 29134, 2017. Information technology – Security techniques – Guidelines for privacy impact assessment. (https://www.iso.org/standard/62289.html)

The Standard Data Protection Model

There's a DPIA method called The Standard Data Protection Model that builds upon the Data Protection Goals covered earlier in the course. Below, Harald Zwingelberg briefly introduces the method.