Privacy in chains, preserving privacy on the chain level

Abstract

This article is only available in Dutch.Many chains process personal data although it is not always crystal clear this is the case, for example when techniques such as pseudonyzing of number systems are used. Processing personal data is required to fulfill several requirements originating in the privacy law, such as purpose limitation, necessity, proportionality and data protection. An exchange of information which is developed under the theory of Chain Computerization largely fulfills these requirements. The chain analysis, the method of analyse of the theory, addresses multiple requirements. Despite this, it neglects two important elements of privacy, namely legality and self determination of the persons involved. In case these elements are neglected, the risk grows that an exchange of information develops conflicts with the law or is not considered to be acceptable by the organisations or persons involved. It may reduce the effectiveness of the cooperation. To apply to the privacy requirements, the chain analyses may be extended with several questions to determine risks in an early stage, providing the opportunity to mitigate these risks.