Data Protection as a Corporate Social Responsibility

Paolo Balboni, Professor of Privacy, CybersecuFinancial Services Law and Distributed Ledger Technology? rity and IT Contract Law and Kate Elizabeth Francis, PhD Candidate, European Centre on Privacy and Cybersecurity, Faculty of Law, Maastricht University, the Netherlands

Contents: PART I INTRODUCTION TO DATA PROTECTION AS CORPORATE SOCIAL RESPONSIBILITY 1 Introduction to Data Protection as Corporate Social Responsibility 2 Corporate social responsibility and related challenges PART II A NOVEL APPROACH FOR THE PROMOTION OF ETHICS IN THE DATA-DRIVEN ECONOMY – DATA PROTECTION AS A CORPORATE SOCIAL RESPONSIBILITY 3 Scope of the UM-DPCSR Framework 4 UM-DPCSR Framework principle 1: Embed data protection, fairness and security in the design of processes 5 UM-DPCSR Framework Principle 2: be transparent with individuals about the collection and further processing of their data 6 UM-DPCSR Framework Principle 3: balance profits with the actual benefits for citizens 7 UM-DPCSR Framework Principle 4: publish relevant findings based on statistical/anonymized data to improve society 8 UM-DPCSR Framework Principle 5: devote a portion of revenues to awareness campaigns for citizens with regards to the data-centric society PART III GOVERNANCE AND IMPLEMENTATION OF THE FRAMEWORK WITHIN ORGANISATIONS 9 Adherence to the UM-DPCSR Framework 10 Conclusion Annex A: UM DPCSR Data Protection Icons for high-risk processing activities Annex B: Complete set of Arts. 13 and 14 GDPR Data Protection Icons for Information Notices Bibliography Index