{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,23]],"date-time":"2024-10-23T03:15:24Z","timestamp":1729653324224,"version":"3.28.0"},"reference-count":48,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,5]]},"DOI":"10.23919\/mipro.2017.7973645","type":"proceedings-article","created":{"date-parts":[[2017,7,25]],"date-time":"2017-07-25T15:28:35Z","timestamp":1500996515000},"page":"1424-1430","source":"Crossref","is-referenced-by-count":0,"title":["Law and technology in data processing: Risk-based approach in EU data protection law and implementation challenges in Croatia"],"prefix":"10.23919","author":[{"given":"Nina","family":"Gumzej","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"Impact Assessment Accompanying the General Data Protection Regulation 25 1 2012 SEC(2012) 72 final","first-page":"14","year":"0","key":"ref39"},{"journal-title":"Recitals 75&#x2013;76 of the GDPR","year":"0","key":"ref38"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1093\/idpl\/ipu018"},{"key":"ref32","first-page":"755","article-title":"Integrating privacy and ethical impact assessments","volume":"40","author":"wright","year":"2015","journal-title":"Privacy Impact Assessments the CNIL publishes its PIA manual"},{"journal-title":"PIA Code of Practice","year":"0","key":"ref31"},{"key":"ref30","first-page":"47","volume":"122","year":"2011","journal-title":"Privacy and Data Protection Impact Assessment Framework for RFID Applications"},{"journal-title":"Article 37 paragraph 5 and Article 39 of the GDPR","year":"0","key":"ref37"},{"journal-title":"Article 25 paragraph 1 of the GDPR","year":"0","key":"ref36"},{"journal-title":"Article 5 of the GDPR","year":"0","key":"ref35"},{"journal-title":"Article 32 recitals 76 and 83 of the GDPR respectively","year":"0","key":"ref34"},{"journal-title":"Article 28 paragraph 3 of the DPD","year":"0","key":"ref10"},{"journal-title":"For further details see Article 35 and Article 57 paragraph 1 (k) as well as recitals 84&#x2013;93 of the GDPR","year":"0","key":"ref40"},{"journal-title":"Official Gazette of Croatia no 103\/03 118\/06 41\/08 130\/11 and 106\/12 - consolidated text","year":"0","key":"ref11"},{"journal-title":"Article 18 of the PDPA","year":"0","key":"ref12"},{"journal-title":"Decree on the procedure for storage and special measures relating to the technical protection of special categories of personal data Official Gazette of Croatia no 139\/04 Special categories of personal data are regulated in Article 8 of the PDPA","year":"0","key":"ref13"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-007-2543-0_4"},{"journal-title":"Article 33 point 9 of the PDPA","year":"0","key":"ref15"},{"year":"0","key":"ref16"},{"journal-title":"Article 18 paragraph 2 and Article 20 paragraph 2 and recitals 49 54 of the DPD Article 18a of the PDPA respectively","year":"0","key":"ref17"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1093\/idpl\/ipv005"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-007-5170-5_1"},{"key":"ref28","first-page":"290","article-title":"Privacy management practices in the proposed EU regulation","volume":"4","author":"clarke","year":"1998","journal-title":"International Data Privacy Law"},{"journal-title":"Article 3 and recital 24 of the GDPR","year":"0","key":"ref4"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2011.11.004"},{"key":"ref3","first-page":"31","volume":"281","year":"1995","journal-title":"Directive 95\/46\/EC of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data OJ L"},{"journal-title":"Article 83 and paragraphs 5&#x2013;6 of the GDPR","year":"0","key":"ref6"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-007-2543-0_2"},{"journal-title":"Article 4 point 1 and recitals 26 and 30 of the GDPR","year":"0","key":"ref5"},{"journal-title":"Statement on the role of a risk-based approach in data protection legal frameworks 14\/EN WP 218 30 5 2014 p 2 See Article 17 paragraph 1 and recital 46 Article 20 and recitals 53&#x2013;54 of the DPD respectively","year":"0","key":"ref8"},{"journal-title":"Article 57 paragraph 1 (i) of the GDPR","year":"0","key":"ref7"},{"key":"ref2","first-page":"1","article-title":"Regulation (EU) 2016\/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC","volume":"119","year":"2016","journal-title":"Official Journal of the European Union (further OJ) L"},{"key":"ref9","first-page":"103","article-title":"Data protection laws in the EU: The difficulties in meeting the challenges posed by global social and technical developments","author":"korff","year":"2010","journal-title":"The European Commission's"},{"key":"ref1","doi-asserted-by":"crossref","first-page":"163","DOI":"10.1007\/978-94-017-7376-8_7","article-title":"Visions of Technology - Big Data Lessons Understood by EU Policy Makers in Their Review of the Legal Frameworks on Intellectual Property Rights, Access to and Re-use of PSI and the Protection of Personal Data","volume":"24","author":"lammerant","year":"2016","journal-title":"Data Protection on the Move - Current Developments in ICT and Privacy\/Data Protection Law Governance and Technology Series - Issues in Privacy and Data Protection"},{"key":"ref46","first-page":"63","article-title":"Data Protection Impact Assessment Template for Smart Grid and Smart Metering Systems","year":"2014","journal-title":"Expert Group 2 Regulatory Recommendations for Privacy Data Protection and Cyber-Security in the Smart Grid Environment"},{"key":"ref20","first-page":"161","article-title":"Evaluating privacy impact assessments, Innovation","volume":"6","author":"wright","year":"2012","journal-title":"Law Governance and Technology Series"},{"journal-title":"Adoption of 2017 GDPR Action Plan - Press Release","year":"2017","key":"ref45"},{"journal-title":"Security techniques Guidelines for privacy impact assessment (under development target publication","year":"2017","key":"ref48"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-007-2543-0_17"},{"journal-title":"Projet de recommandation d'initiative concernant l'analyse d'impact relative &#x00E1; la protection des donn&#x00E9;es et la consultation pr&#x00E9;alable soumis &#x00E1; la consultation publique (CO-AR-2016&#x2013;004)","year":"0","key":"ref47"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1093\/scipol\/sct083"},{"journal-title":"Recital 84 of the GDPR","year":"0","key":"ref42"},{"journal-title":"Statement on the role of a risk-based approach in data protection legal frameworks 14\/EN WP 218","year":"2014","key":"ref24"},{"journal-title":"For further details see Article 36 and recitals 94&#x2013;96 of the GDPR","year":"0","key":"ref41"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1093\/idpl\/ipu027"},{"journal-title":"Recital 77 of the GDPR For details on codes of conducts certification mechanisms and tasks of the European Data Protection Board see Articles 40&#x2013;43 and Article 70 respectively","year":"0","key":"ref44"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1093\/idpl\/ipu035"},{"journal-title":"Article 1 paragraphs 1&#x2013;2 and recital 75 of the GDPR","year":"0","key":"ref43"},{"journal-title":"Communication from the Commission on the precautionary principle (COM(2000)) 1 final","article-title":"The principle encompasses specific circumstances where scientific evidence is insufficient, inconclusive or uncertain and where there are indications through preliminary objective scientific evaluation that there are reasonable grounds for concern that the potentially dangerous effects (on the environment, human, animal or plant health) may be inconsistent with the chosen level of protection","year":"2000","key":"ref25"}],"event":{"name":"2017 40th International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO)","start":{"date-parts":[[2017,5,22]]},"location":"Opatija, Croatia","end":{"date-parts":[[2017,5,26]]}},"container-title":["2017 40th International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7958418\/7973374\/07973645.pdf?arnumber=7973645","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T11:49:48Z","timestamp":1569930588000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7973645\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,5]]},"references-count":48,"URL":"https:\/\/doi.org\/10.23919\/mipro.2017.7973645","relation":{},"subject":[],"published":{"date-parts":[[2017,5]]}}}