Data Protection as a Corporate Social Responsibility by Balboni, Paolo; Francis, Kate;

Long description:

This progressive book critically analyses the current state of data protection enforcement and proposes a new auditable framework of practical guidelines to contribute to a more sustainable data-driven future.

In outlining the debates relating to current data protection structures, Paolo Balboni and Kate Elizabeth Francis argue that legislation alone cannot sufficiently protect individuals’ fundamental rights and freedoms, and instead consider the pressing need for a more ethical approach to data protection. They present the Maastricht University Data Protection as a Corporate Social Responsibility Framework (UM-DPCSR Framework), outlining not only its features, but also how it can fill the gap left by the inadequacies of a merely legal approach to data protection. Balboni and Francis persuasively call on organisations wishing to contribute positively to society through data processing to adopt this framework and to commit to doing good with data or, at the very least, to avoid harming individuals by processing their data.

Data Protection as a Corporate Social Responsibility will be a beneficial read for scholars and students with particular interest in corporate law and governance, human rights, internet and technology law, and privacy. It will also appeal to legal professionals, cybersecurity professionals, and sustainability specialists alike.

This progressive book critically analyses the current state of data protection enforcement and proposes a new auditable framework of practical guidelines to contribute to a more sustainable data-driven future. In outlining the debates relating to current data protection structures, Paolo Balboni and Kate Elizabeth Francis argue that legislation alone cannot sufficiently protect individuals’ fundamental rights and freedoms, and instead consider the pressing need for a more ethical approach to data protection.

‘The DPCSR Framework is the most prominent initiative so far to embed data protection and data security by design into organisational governance structures. That allows institutions to transform ethical principles into reality, which is essential to any responsible organisation.’

Table of Contents:

Contents: PART I INTRODUCTION TO DATA PROTECTION AS CORPORATE SOCIAL RESPONSIBILITY 1 Introduction to Data Protection as Corporate Social Responsibility 2 Corporate social responsibility and related challenges PART II A NOVEL APPROACH FOR THE PROMOTION OF ETHICS IN THE DATA-DRIVEN ECONOMY – DATA PROTECTION AS A CORPORATE SOCIAL RESPONSIBILITY 3 Scope of the UM-DPCSR Framework 4 UM-DPCSR Framework principle 1: Embed data protection, fairness and security in the design of processes 5 UM-DPCSR Framework Principle 2: be transparent with individuals about the collection and further processing of their data 6 UM-DPCSR Framework Principle 3: balance profits with the actual benefits for citizens 7 UM-DPCSR Framework Principle 4: publish relevant findings based on statistical/anonymized data to improve society 8 UM-DPCSR Framework Principle 5: devote a portion of revenues to awareness campaigns for citizens with regards to the data-centric society PART III GOVERNANCE AND IMPLEMENTATION OF THE FRAMEWORK WITHIN ORGANISATIONS 9 Adherence to the UM-DPCSR Framework 10 Conclusion Annex A: UM DPCSR Data Protection Icons for high-risk processing activities Annex B: Complete set of Arts. 13 and 14 GDPR Data Protection Icons for Information Notices Bibliography Index