An exploration of whether current Privacy by Design models meet the need to gain Informed Consent

Abstract

In 2018 the UK implemented the European Union’s (EU) General Data Protection Regulations (GDPR) into law as the Data Protection Act 2018. This significantly increased the personal data requirements organisations needed to meet to be compliant.

One of these requirements is that organisations now need to gain informed consent from data subjects to use their personal data. I wanted to explore if current privacy by design models can keep up with the change in data protection regulations. If they do not seem to be able to do so, I wanted to explore if they could be extended to gain informed consent.

The thesis looks at several privacy by design models, and then presents a model that can provide a foundation for future privacy by design frameworks can to be extended to gain informed consent from data subjects. The thesis also compares the new framework against an existing privacy by design framework, to show how it provides additional functionality.

Date of Award	May 2023
Original language	English
Awarding Institution	University of Brighton
Supervisor	Haralambos Mouratidis (Supervisor) & Andrew Fish (Supervisor)