ADAPT Academic Dr. Harshvardhan J. Pandit (Dublin City University) recently had a paper accepted at the Annual Privacy Forum conference organised by ENISA and the EU Commission taking place in Sweden in September. The paper, titled “Implementing ISO/IEC TS 27560:2023 Consent Records and Receipts for GDPR and DGA”, was written in collaboration with Jan Lindquist, editor of ISO/IEC TS 27560:2023, and Georg Krog, chief legal counsel of Signatu – a compliance solutions provider which has implemented ISO 27560 and DPV in its services.
The paper compares consent requirements between ISO/IEC TS 27560:2023, ISO/IEC 29184:2020 Privacy Notices, and GDPR to show how these standards can be used to support GDPR compliance. The paper also describes implementing these standards using the Data Privacy Vocabulary (DPV) to create interoperable consent records and receipts. The DPV is a state of the art resource which enables creating knowledge graphs for legal compliance, and is maintained by the Data Privacy Vocabularies and Controls Community Group (DPVCG).
This work has importance for ongoing GDPR compliance and the implementation of machine-readable consent forms under the EU Data Governance Act (DGA). A preprint of the paper can be accessed here: https://arxiv.org/abs/2405.04528
