GuiDanCe technical training on the GDPR: what’s next?

Follow

As from May 2018, the new EU General Data Protection Regulation (GDPR) will take effect and impact all EU cities, asked to appoint a data protection officer (DPO) and to implement a series of new rules and practices. Sharing good practices related to the implementation of the GDPR has been identified as a priority in the frame of the Data Working Group of EUROCITIES’ Knowledge Society Forum.

More information on https://www.eugdpr.org/

Download the executive-summary_GuiDanCe GDPR training January 22 2018 Bruxelles

Collective brainstorming

To support GDC signatory cities and KSF member cities in understanding the implication of the new privacy rules in the EU, the GuiDanCe project,supporting the implementation of the Charter for the period 2015-2018, organised a technical workshop untited ‘the GDPR demystified‘ on Monday 22 January 2018 in Brussels. [see the call for participation here]

This training, on https://www.actionac.net was designed to help cities’ data experts to understand the concepts and processes necessary for the data management chain within a city administration to deal with citizens’ privacy while delivering smart services.

The workshop was delivered by Antonio Kung (chair of the EIP-SCC initiative ‘citizen approach to data: privacy-by-design) and Antony Page (GDPR lead for the H2020 Smart Cities & Communities project Sharing Cities).

Presentation of Barcelona roadmap to GDPR compliance

21 participants from 13 cities learned how to conduct a privacy impact assessment (P.I.A) based on four specific and concrete use-cases presented by four volunteering cities:

• A specific application (smart energy sensors in social housing) by the Royal Borough of Greenwich, London;
• A specific application (using non-motorised traffic metrics for optimizing traffic flow, by the city of Eindhoven;
• The general case of open data, by the city of Espoo;
• The general case of building a roadmap for GDPR compliance, by the city of Barcelona.

Among the observations and recommendations produced by the session: the need for trusted party audit – the challenge of handing consent for collecting personal data before the anonymisation process – the linkability issue of collected dataset with other datasets – the impact on city administration…

Read more in the executive-summary_GuiDanCe GDPR training January 22 2018 Bruxelles

Follow