Hi Gabor,
Thank you for sending around the draft of the best practice DPA guidance. We have the following comments/thoughts
* The audience for the deliverable will be your fellow DPAS. * Its audience already has a high level of background contextual knowledge, so we can jump straight in to the best practices - so we can probably cut some of this content down. * Perhaps the aim of this deliverable should be to 1) introduce best practices in awareness raising that they might not be aware of and 2) provide some evidence base for what has been found to be effective. * I would suggest keeping the report as brief and accessible as possible. * We don't want to duplicate the report on the interviews (d2.1) and the report on the hotline (d3.2). * Perhaps we can identify 5-10 best practices for awareness raising for SMES * Description of the practice * Followed by why we think its "best"/"good" practice. * This could include conventional/standard/must have practices - such as a hotline of some description - then then more cutting-edge/innovative/experimental practices - where we don't have as much evidence for success, but they're new for an audience. * E.g. Ireland's conference with DPOs from large corporations advising SMEs. * We should be talking about best practices we can be confident of recommending. The readers will want to know why we are confident about our recommendations, or what our rationale for recommending them is (examples will likely be - its had positive feedback from interviews, we found out about it during our information gathering, it worked during the trial of the hotline.... ) * Include other best practices we are aware of, not just activities from STAR II (hotline and awareness raising campaign). * One (or more) of the best practices should relate to the hotline (setting up, management) * A potential example is the PHAEDRA II project final recommendations report - http://www.phaedra-project.eu/wp-content/uploads/PHAEDRA2_D41_final_20170114... (particularly, the early single page with all the best practices together, then short sections setting out the substance of the best practice, and our justification for supporting it). * We have some specific feedback, notes and suggestions to this effect on the attached word document.
Best wishes, DBW
Dr David Barnard-Wills Research Manager (Policy, Ethics and Emerging Technologies) Trilateral Research Ltd.
1 Knightsbridge Green London SW1X 7QA
www.trilateralresearch.comhttp://www.trilateralresearch.com/ www.twitter.com/dbarnardwillshttp://www.twitter.com/dbarnardwills
I'm part time - Working hours: 9.30 to 14.45, Mon, Tues, Thurs, Fri
Dear David, Dear All,
thank you for your comments. Based on the suggestions we prepare a revised version and it will be sent for review on the first week of November at the latest.
Best,
Renáta
Idézet (David Barnard-Wills David.Barnard-Wills@trilateralresearch.com):
Hi Gabor,
Thank you for sending around the draft of the best practice DPA guidance. We have the following comments/thoughts
- The audience for the deliverable will be your fellow DPAS.
- Its audience already has a high level of background
contextual knowledge, so we can jump straight in to the best practices - so we can probably cut some of this content down. * Perhaps the aim of this deliverable should be to 1) introduce best practices in awareness raising that they might not be aware of and 2) provide some evidence base for what has been found to be effective. * I would suggest keeping the report as brief and accessible as possible. * We don't want to duplicate the report on the interviews (d2.1) and the report on the hotline (d3.2).
- Perhaps we can identify 5-10 best practices for awareness
raising for SMES * Description of the practice * Followed by why we think its "best"/"good" practice. * This could include conventional/standard/must have practices - such as a hotline of some description - then then more cutting-edge/innovative/experimental practices - where we don't have as much evidence for success, but they're new for an audience. * E.g. Ireland's conference with DPOs from large corporations advising SMEs. * We should be talking about best practices we can be confident of recommending. The readers will want to know why we are confident about our recommendations, or what our rationale for recommending them is (examples will likely be - its had positive feedback from interviews, we found out about it during our information gathering, it worked during the trial of the hotline.... ) * Include other best practices we are aware of, not just activities from STAR II (hotline and awareness raising campaign). * One (or more) of the best practices should relate to the hotline (setting up, management) * A potential example is the PHAEDRA II project final recommendations report - http://www.phaedra-project.eu/wp-content/uploads/PHAEDRA2_D41_final_20170114... (particularly, the early single page with all the best practices together, then short sections setting out the substance of the best practice, and our justification for supporting it).
- We have some specific feedback, notes and suggestions to this
effect on the attached word document.
Best wishes, DBW
Dr David Barnard-Wills Research Manager (Policy, Ethics and Emerging Technologies) Trilateral Research Ltd.
1 Knightsbridge Green London SW1X 7QA
www.trilateralresearch.comhttp://www.trilateralresearch.com/ www.twitter.com/dbarnardwillshttp://www.twitter.com/dbarnardwills
I'm part time - Working hours: 9.30 to 14.45, Mon, Tues, Thurs, Fri
Dear Gabor, dear all,
Apologies for following up on this email thread only know. I went through the document and provided my comments. I think you made a good attempt to prepare a guidance for DPAs on good practices in raising personal data compliance/ the GDPR awareness among SMEs. I suggest, however, restructuring the document. I think David and Leanne pointed it out very well that we need to include some kind of good practices and recommendations in this guidance document. At the moment, it includes a description of your experience at NAIH and of the observations from the interviews. I think the best way to proceed further is to schedule the call and agree upon a way to improve this document.
Could we schedule a skype call for 1 hour 30min on Wed/Thu or Fri next week?
Best regards, Lina
From: star-bounces@listserv.vub.ac.be star-bounces@listserv.vub.ac.be On Behalf Of David Barnard-Wills Sent: Wednesday, October 23, 2019 12:46 PM To: 'STAR' star@listserv.vub.ac.be Subject: [star] STAR II - Feedback on DPA guidance draft
Hi Gabor,
Thank you for sending around the draft of the best practice DPA guidance. We have the following comments/thoughts
* The audience for the deliverable will be your fellow DPAS. * Its audience already has a high level of background contextual knowledge, so we can jump straight in to the best practices – so we can probably cut some of this content down. * Perhaps the aim of this deliverable should be to 1) introduce best practices in awareness raising that they might not be aware of and 2) provide some evidence base for what has been found to be effective. * I would suggest keeping the report as brief and accessible as possible. * We don’t want to duplicate the report on the interviews (d2.1) and the report on the hotline (d3.2). * Perhaps we can identify 5-10 best practices for awareness raising for SMES * Description of the practice * Followed by why we think its “best”/”good” practice. * This could include conventional/standard/must have practices – such as a hotline of some description – then then more cutting-edge/innovative/experimental practices – where we don’t have as much evidence for success, but they’re new for an audience. * E.g. Ireland’s conference with DPOs from large corporations advising SMEs. * We should be talking about best practices we can be confident of recommending. The readers will want to know why we are confident about our recommendations, or what our rationale for recommending them is (examples will likely be – its had positive feedback from interviews, we found out about it during our information gathering, it worked during the trial of the hotline…. ) * Include other best practices we are aware of, not just activities from STAR II (hotline and awareness raising campaign). * One (or more) of the best practices should relate to the hotline (setting up, management) * A potential example is the PHAEDRA II project final recommendations report - http://www.phaedra-project.eu/wp-content/uploads/PHAEDRA2_D41_final_20170114... (particularly, the early single page with all the best practices together, then short sections setting out the substance of the best practice, and our justification for supporting it). * We have some specific feedback, notes and suggestions to this effect on the attached word document.
Best wishes, DBW
Dr David Barnard-Wills Research Manager (Policy, Ethics and Emerging Technologies) Trilateral Research Ltd.
1 Knightsbridge Green London SW1X 7QA
www.trilateralresearch.comhttp://www.trilateralresearch.com/ www.twitter.com/dbarnardwillshttp://www.twitter.com/dbarnardwills
I’m part time – Working hours: 9.30 to 14.45, Mon, Tues, Thurs, Fri
Dear Lina,
Thank you for your comments. Both Wednesday and Thursday seem good for Renáta and me, but Friday is not OK. I suggest to start at 2 pm CET.
Best,
Gábor
From: Lina JASMONTAITE [mailto:Lina.Jasmontaite@vub.be] Sent: Monday, November 25, 2019 12:54 PM To: Kulitsán Gábor kulitsan.gabor@naih.hu Cc: David Barnard-Wills david.barnard-wills@trilateralresearch.com; 'STAR' star@listserv.vub.ac.be Subject: RE: STAR II - Feedback on DPA guidance draft
Dear Gabor, dear all,
Apologies for following up on this email thread only know. I went through the document and provided my comments.
I think you made a good attempt to prepare a guidance for DPAs on good practices in raising personal data compliance/ the GDPR awareness among SMEs. I suggest, however, restructuring the document. I think David and Leanne pointed it out very well that we need to include some kind of good practices and recommendations in this guidance document. At the moment, it includes a description of your experience at NAIH and of the observations from the interviews.
I think the best way to proceed further is to schedule the call and agree upon a way to improve this document.
Could we schedule a skype call for 1 hour 30min on Wed/Thu or Fri next week?
Best regards,
Lina
From: star-bounces@listserv.vub.ac.be mailto:star-bounces@listserv.vub.ac.be <star-bounces@listserv.vub.ac.be mailto:star-bounces@listserv.vub.ac.be > On Behalf Of David Barnard-Wills Sent: Wednesday, October 23, 2019 12:46 PM To: 'STAR' <star@listserv.vub.ac.be mailto:star@listserv.vub.ac.be > Subject: [star] STAR II - Feedback on DPA guidance draft
Hi Gabor,
Thank you for sending around the draft of the best practice DPA guidance. We have the following comments/thoughts
* The audience for the deliverable will be your fellow DPAS.
* Its audience already has a high level of background contextual knowledge, so we can jump straight in to the best practices – so we can probably cut some of this content down. * Perhaps the aim of this deliverable should be to 1) introduce best practices in awareness raising that they might not be aware of and 2) provide some evidence base for what has been found to be effective. * I would suggest keeping the report as brief and accessible as possible. * We don’t want to duplicate the report on the interviews (d2.1) and the report on the hotline (d3.2).
* Perhaps we can identify 5-10 best practices for awareness raising for SMES
* Description of the practice * Followed by why we think its “best”/”good” practice. * This could include conventional/standard/must have practices – such as a hotline of some description – then then more cutting-edge/innovative/experimental practices – where we don’t have as much evidence for success, but they’re new for an audience.
* E.g. Ireland’s conference with DPOs from large corporations advising SMEs.
* We should be talking about best practices we can be confident of recommending. The readers will want to know why we are confident about our recommendations, or what our rationale for recommending them is (examples will likely be – its had positive feedback from interviews, we found out about it during our information gathering, it worked during the trial of the hotline…. ) * Include other best practices we are aware of, not just activities from STAR II (hotline and awareness raising campaign). * One (or more) of the best practices should relate to the hotline (setting up, management) * A potential example is the PHAEDRA II project final recommendations report - http://www.phaedra-project.eu/wp-content/uploads/PHAEDRA2_D41_final_20170114... (particularly, the early single page with all the best practices together, then short sections setting out the substance of the best practice, and our justification for supporting it).
* We have some specific feedback, notes and suggestions to this effect on the attached word document.
Best wishes,
DBW
Dr David Barnard-Wills
Research Manager (Policy, Ethics and Emerging Technologies)
Trilateral Research Ltd.
1 Knightsbridge Green
London SW1X 7QA
www.trilateralresearch.com http://www.trilateralresearch.com/
www.twitter.com/dbarnardwills http://www.twitter.com/dbarnardwills
I’m part time – Working hours: 9.30 to 14.45, Mon, Tues, Thurs, Fri
Dear Gabor,
2 pm (CET) works well for me on both Wednesday or Thursday.
Thank you for forwarding the request to extend the deadline for the submission of 4.1 . I saw that it was approved by the PO.
Best regards, Lina
From: Kulitsán Gábor kulitsan.gabor@naih.hu Sent: Thursday, November 28, 2019 10:59 AM To: Lina JASMONTAITE Lina.Jasmontaite@vub.be Cc: David Barnard-Wills david.barnard-wills@trilateralresearch.com; 'STAR' star@listserv.vub.ac.be Subject: RE: STAR II - Feedback on DPA guidance draft
Dear Lina,
Thank you for your comments. Both Wednesday and Thursday seem good for Renáta and me, but Friday is not OK. I suggest to start at 2 pm CET.
Best, Gábor
From: Lina JASMONTAITE [mailto:Lina.Jasmontaite@vub.be] Sent: Monday, November 25, 2019 12:54 PM To: Kulitsán Gábor <kulitsan.gabor@naih.humailto:kulitsan.gabor@naih.hu> Cc: David Barnard-Wills <david.barnard-wills@trilateralresearch.commailto:david.barnard-wills@trilateralresearch.com>; 'STAR' <star@listserv.vub.ac.bemailto:star@listserv.vub.ac.be> Subject: RE: STAR II - Feedback on DPA guidance draft
Dear Gabor, dear all,
Apologies for following up on this email thread only know. I went through the document and provided my comments. I think you made a good attempt to prepare a guidance for DPAs on good practices in raising personal data compliance/ the GDPR awareness among SMEs. I suggest, however, restructuring the document. I think David and Leanne pointed it out very well that we need to include some kind of good practices and recommendations in this guidance document. At the moment, it includes a description of your experience at NAIH and of the observations from the interviews. I think the best way to proceed further is to schedule the call and agree upon a way to improve this document.
Could we schedule a skype call for 1 hour 30min on Wed/Thu or Fri next week?
Best regards, Lina
From: star-bounces@listserv.vub.ac.bemailto:star-bounces@listserv.vub.ac.be <star-bounces@listserv.vub.ac.bemailto:star-bounces@listserv.vub.ac.be> On Behalf Of David Barnard-Wills Sent: Wednesday, October 23, 2019 12:46 PM To: 'STAR' <star@listserv.vub.ac.bemailto:star@listserv.vub.ac.be> Subject: [star] STAR II - Feedback on DPA guidance draft
Hi Gabor,
Thank you for sending around the draft of the best practice DPA guidance. We have the following comments/thoughts
* The audience for the deliverable will be your fellow DPAS. * Its audience already has a high level of background contextual knowledge, so we can jump straight in to the best practices – so we can probably cut some of this content down. * Perhaps the aim of this deliverable should be to 1) introduce best practices in awareness raising that they might not be aware of and 2) provide some evidence base for what has been found to be effective. * I would suggest keeping the report as brief and accessible as possible. * We don’t want to duplicate the report on the interviews (d2.1) and the report on the hotline (d3.2). * Perhaps we can identify 5-10 best practices for awareness raising for SMES * Description of the practice * Followed by why we think its “best”/”good” practice. * This could include conventional/standard/must have practices – such as a hotline of some description – then then more cutting-edge/innovative/experimental practices – where we don’t have as much evidence for success, but they’re new for an audience. * E.g. Ireland’s conference with DPOs from large corporations advising SMEs. * We should be talking about best practices we can be confident of recommending. The readers will want to know why we are confident about our recommendations, or what our rationale for recommending them is (examples will likely be – its had positive feedback from interviews, we found out about it during our information gathering, it worked during the trial of the hotline…. ) * Include other best practices we are aware of, not just activities from STAR II (hotline and awareness raising campaign). * One (or more) of the best practices should relate to the hotline (setting up, management) * A potential example is the PHAEDRA II project final recommendations report - http://www.phaedra-project.eu/wp-content/uploads/PHAEDRA2_D41_final_20170114... (particularly, the early single page with all the best practices together, then short sections setting out the substance of the best practice, and our justification for supporting it). * We have some specific feedback, notes and suggestions to this effect on the attached word document.
Best wishes, DBW
Dr David Barnard-Wills Research Manager (Policy, Ethics and Emerging Technologies) Trilateral Research Ltd.
1 Knightsbridge Green London SW1X 7QA
www.trilateralresearch.comhttp://www.trilateralresearch.com/ www.twitter.com/dbarnardwillshttp://www.twitter.com/dbarnardwills
I’m part time – Working hours: 9.30 to 14.45, Mon, Tues, Thurs, Fri
Hi All,
Apologies for delay. DBW and I are free both Wed and Thurs this week at 2pm (CET)/1pm (UK) for a call.
Shall we go for Wednesday if possible?
It would be good to talk through the feedback, but also the website, CPDP and Gabor's positive interactions with the EC recently as well.
Looking forward to it.
Best wishes,
Leanne
https://www.linkedin.com/in/trilateral-research-7278b3135/[https://trilateralresearch.co.uk/wp-content/uploads/2018/12/tri-logo.jpg]http://www.trilateralresearch.com/
Leanne Cochrane
Senior Research Analyst | Policy, Ethics and Emerging Technologies Team
leanne.cochrane@trilateralresearch.com
www.trilateralresearch.comhttp://www.trilateralresearch.com
Mobile: +44 (0) 7545 955 242
Skype:@ljcochrane
________________________________ From: star-bounces@listserv.vub.ac.be star-bounces@listserv.vub.ac.be on behalf of Kulitsán Gábor kulitsan.gabor@naih.hu Sent: 28 November 2019 09:58 To: 'Lina JASMONTAITE' Lina.Jasmontaite@vub.be Cc: 'STAR' star@listserv.vub.ac.be Subject: Re: [star] STAR II - Feedback on DPA guidance draft
Dear Lina,
Thank you for your comments. Both Wednesday and Thursday seem good for Renáta and me, but Friday is not OK. I suggest to start at 2 pm CET.
Best,
Gábor
From: Lina JASMONTAITE [mailto:Lina.Jasmontaite@vub.be] Sent: Monday, November 25, 2019 12:54 PM To: Kulitsán Gábor kulitsan.gabor@naih.hu Cc: David Barnard-Wills david.barnard-wills@trilateralresearch.com; 'STAR' star@listserv.vub.ac.be Subject: RE: STAR II - Feedback on DPA guidance draft
Dear Gabor, dear all,
Apologies for following up on this email thread only know. I went through the document and provided my comments.
I think you made a good attempt to prepare a guidance for DPAs on good practices in raising personal data compliance/ the GDPR awareness among SMEs. I suggest, however, restructuring the document. I think David and Leanne pointed it out very well that we need to include some kind of good practices and recommendations in this guidance document. At the moment, it includes a description of your experience at NAIH and of the observations from the interviews.
I think the best way to proceed further is to schedule the call and agree upon a way to improve this document.
Could we schedule a skype call for 1 hour 30min on Wed/Thu or Fri next week?
Best regards,
Lina
From: star-bounces@listserv.vub.ac.bemailto:star-bounces@listserv.vub.ac.be <star-bounces@listserv.vub.ac.bemailto:star-bounces@listserv.vub.ac.be> On Behalf Of David Barnard-Wills Sent: Wednesday, October 23, 2019 12:46 PM To: 'STAR' <star@listserv.vub.ac.bemailto:star@listserv.vub.ac.be> Subject: [star] STAR II - Feedback on DPA guidance draft
Hi Gabor,
Thank you for sending around the draft of the best practice DPA guidance. We have the following comments/thoughts
* The audience for the deliverable will be your fellow DPAS. * Its audience already has a high level of background contextual knowledge, so we can jump straight in to the best practices – so we can probably cut some of this content down. * Perhaps the aim of this deliverable should be to 1) introduce best practices in awareness raising that they might not be aware of and 2) provide some evidence base for what has been found to be effective. * I would suggest keeping the report as brief and accessible as possible. * We don’t want to duplicate the report on the interviews (d2.1) and the report on the hotline (d3.2). * Perhaps we can identify 5-10 best practices for awareness raising for SMES * Description of the practice * Followed by why we think its “best”/”good” practice. * This could include conventional/standard/must have practices – such as a hotline of some description – then then more cutting-edge/innovative/experimental practices – where we don’t have as much evidence for success, but they’re new for an audience. * E.g. Ireland’s conference with DPOs from large corporations advising SMEs. * We should be talking about best practices we can be confident of recommending. The readers will want to know why we are confident about our recommendations, or what our rationale for recommending them is (examples will likely be – its had positive feedback from interviews, we found out about it during our information gathering, it worked during the trial of the hotline…. ) * Include other best practices we are aware of, not just activities from STAR II (hotline and awareness raising campaign). * One (or more) of the best practices should relate to the hotline (setting up, management) * A potential example is the PHAEDRA II project final recommendations report - http://www.phaedra-project.eu/wp-content/uploads/PHAEDRA2_D41_final_20170114... (particularly, the early single page with all the best practices together, then short sections setting out the substance of the best practice, and our justification for supporting it). * We have some specific feedback, notes and suggestions to this effect on the attached word document.
Best wishes,
DBW
Dr David Barnard-Wills
Research Manager (Policy, Ethics and Emerging Technologies)
Trilateral Research Ltd.
1 Knightsbridge Green
London SW1X 7QA
www.trilateralresearch.comhttp://www.trilateralresearch.com/
www.twitter.com/dbarnardwillshttp://www.twitter.com/dbarnardwills
I’m part time – Working hours: 9.30 to 14.45, Mon, Tues, Thurs, Fri
Dear Leanne,
Thanks for your reply. Having a call at 14 CET tomorrow works well. Indeed, then we could go through all relevant issues.
Best regards, Lina
From: Leanne Cochrane leanne.cochrane@trilateralresearch.com Sent: Monday, December 2, 2019 3:29 PM To: Kulitsán Gábor kulitsan.gabor@naih.hu; Lina JASMONTAITE Lina.Jasmontaite@vub.be Cc: 'STAR' star@listserv.vub.ac.be Subject: Re: [star] STAR II - Feedback on DPA guidance draft
Hi All,
Apologies for delay. DBW and I are free both Wed and Thurs this week at 2pm (CET)/1pm (UK) for a call.
Shall we go for Wednesday if possible?
It would be good to talk through the feedback, but also the website, CPDP and Gabor's positive interactions with the EC recently as well.
Looking forward to it.
Best wishes,
Leanne
[https://trilateralresearch.co.uk/wp-content/uploads/2018/12/tri-logo.jpg]http://www.trilateralresearch.com/
Leanne Cochrane
Senior Research Analyst | Policy, Ethics and Emerging Technologies Team
leanne.cochrane@trilateralresearch.commailto:leanne.cochrane@trilateralresearch.com
www.trilateralresearch.comhttp://www.trilateralresearch.com
Mobile: +44 (0) 7545 955 242
Skype:@ljcochrane
________________________________ From: star-bounces@listserv.vub.ac.bemailto:star-bounces@listserv.vub.ac.be <star-bounces@listserv.vub.ac.bemailto:star-bounces@listserv.vub.ac.be> on behalf of Kulitsán Gábor <kulitsan.gabor@naih.humailto:kulitsan.gabor@naih.hu> Sent: 28 November 2019 09:58 To: 'Lina JASMONTAITE' <Lina.Jasmontaite@vub.bemailto:Lina.Jasmontaite@vub.be> Cc: 'STAR' <star@listserv.vub.ac.bemailto:star@listserv.vub.ac.be> Subject: Re: [star] STAR II - Feedback on DPA guidance draft
Dear Lina,
Thank you for your comments. Both Wednesday and Thursday seem good for Renáta and me, but Friday is not OK. I suggest to start at 2 pm CET.
Best,
Gábor
From: Lina JASMONTAITE [mailto:Lina.Jasmontaite@vub.be] Sent: Monday, November 25, 2019 12:54 PM To: Kulitsán Gábor <kulitsan.gabor@naih.humailto:kulitsan.gabor@naih.hu> Cc: David Barnard-Wills <david.barnard-wills@trilateralresearch.commailto:david.barnard-wills@trilateralresearch.com>; 'STAR' <star@listserv.vub.ac.bemailto:star@listserv.vub.ac.be> Subject: RE: STAR II - Feedback on DPA guidance draft
Dear Gabor, dear all,
Apologies for following up on this email thread only know. I went through the document and provided my comments.
I think you made a good attempt to prepare a guidance for DPAs on good practices in raising personal data compliance/ the GDPR awareness among SMEs. I suggest, however, restructuring the document. I think David and Leanne pointed it out very well that we need to include some kind of good practices and recommendations in this guidance document. At the moment, it includes a description of your experience at NAIH and of the observations from the interviews.
I think the best way to proceed further is to schedule the call and agree upon a way to improve this document.
Could we schedule a skype call for 1 hour 30min on Wed/Thu or Fri next week?
Best regards,
Lina
From: star-bounces@listserv.vub.ac.bemailto:star-bounces@listserv.vub.ac.be <star-bounces@listserv.vub.ac.bemailto:star-bounces@listserv.vub.ac.be> On Behalf Of David Barnard-Wills Sent: Wednesday, October 23, 2019 12:46 PM To: 'STAR' <star@listserv.vub.ac.bemailto:star@listserv.vub.ac.be> Subject: [star] STAR II - Feedback on DPA guidance draft
Hi Gabor,
Thank you for sending around the draft of the best practice DPA guidance. We have the following comments/thoughts
* The audience for the deliverable will be your fellow DPAS.
* Its audience already has a high level of background contextual knowledge, so we can jump straight in to the best practices – so we can probably cut some of this content down. * Perhaps the aim of this deliverable should be to 1) introduce best practices in awareness raising that they might not be aware of and 2) provide some evidence base for what has been found to be effective. * I would suggest keeping the report as brief and accessible as possible. * We don’t want to duplicate the report on the interviews (d2.1) and the report on the hotline (d3.2).
* Perhaps we can identify 5-10 best practices for awareness raising for SMES
* Description of the practice * Followed by why we think its “best”/”good” practice. * This could include conventional/standard/must have practices – such as a hotline of some description – then then more cutting-edge/innovative/experimental practices – where we don’t have as much evidence for success, but they’re new for an audience.
* E.g. Ireland’s conference with DPOs from large corporations advising SMEs.
* We should be talking about best practices we can be confident of recommending. The readers will want to know why we are confident about our recommendations, or what our rationale for recommending them is (examples will likely be – its had positive feedback from interviews, we found out about it during our information gathering, it worked during the trial of the hotline…. ) * Include other best practices we are aware of, not just activities from STAR II (hotline and awareness raising campaign). * One (or more) of the best practices should relate to the hotline (setting up, management) * A potential example is the PHAEDRA II project final recommendations report - http://www.phaedra-project.eu/wp-content/uploads/PHAEDRA2_D41_final_20170114... (particularly, the early single page with all the best practices together, then short sections setting out the substance of the best practice, and our justification for supporting it).
* We have some specific feedback, notes and suggestions to this effect on the attached word document.
Best wishes,
DBW
Dr David Barnard-Wills
Research Manager (Policy, Ethics and Emerging Technologies)
Trilateral Research Ltd.
1 Knightsbridge Green
London SW1X 7QA
www.trilateralresearch.comhttp://www.trilateralresearch.com/
www.twitter.com/dbarnardwillshttp://www.twitter.com/dbarnardwills
I’m part time – Working hours: 9.30 to 14.45, Mon, Tues, Thurs, Fri
Hi All,
Yes, 14 CET tomorrow is ok for us (Renáta and me) as well.
Gábor
From: Lina JASMONTAITE [mailto:Lina.Jasmontaite@vub.be] Sent: Tuesday, December 3, 2019 9:41 AM To: Leanne Cochrane leanne.cochrane@trilateralresearch.com; Kulitsán Gábor kulitsan.gabor@naih.hu Cc: 'STAR' star@listserv.vub.ac.be Subject: RE: [star] STAR II - Feedback on DPA guidance draft
Dear Leanne,
Thanks for your reply. Having a call at 14 CET tomorrow works well.
Indeed, then we could go through all relevant issues.
Best regards,
Lina
From: Leanne Cochrane <leanne.cochrane@trilateralresearch.com mailto:leanne.cochrane@trilateralresearch.com > Sent: Monday, December 2, 2019 3:29 PM To: Kulitsán Gábor <kulitsan.gabor@naih.hu mailto:kulitsan.gabor@naih.hu >; Lina JASMONTAITE <Lina.Jasmontaite@vub.be mailto:Lina.Jasmontaite@vub.be > Cc: 'STAR' <star@listserv.vub.ac.be mailto:star@listserv.vub.ac.be > Subject: Re: [star] STAR II - Feedback on DPA guidance draft
Hi All,
Apologies for delay. DBW and I are free both Wed and Thurs this week at 2pm (CET)/1pm (UK) for a call.
Shall we go for Wednesday if possible?
It would be good to talk through the feedback, but also the website, CPDP and Gabor's positive interactions with the EC recently as well.
Looking forward to it.
Best wishes,
Leanne
http://www.trilateralresearch.com/
Leanne Cochrane
Senior Research Analyst | Policy, Ethics and Emerging Technologies Team
leanne.cochrane@trilateralresearch.com mailto:leanne.cochrane@trilateralresearch.com
www.trilateralresearch.com http://www.trilateralresearch.com
Mobile: +44 (0) 7545 955 242
Skype:@ljcochrane
_____
From: star-bounces@listserv.vub.ac.be mailto:star-bounces@listserv.vub.ac.be <star-bounces@listserv.vub.ac.be mailto:star-bounces@listserv.vub.ac.be > on behalf of Kulitsán Gábor <kulitsan.gabor@naih.hu mailto:kulitsan.gabor@naih.hu > Sent: 28 November 2019 09:58 To: 'Lina JASMONTAITE' <Lina.Jasmontaite@vub.be mailto:Lina.Jasmontaite@vub.be > Cc: 'STAR' <star@listserv.vub.ac.be mailto:star@listserv.vub.ac.be > Subject: Re: [star] STAR II - Feedback on DPA guidance draft
Dear Lina,
Thank you for your comments. Both Wednesday and Thursday seem good for Renáta and me, but Friday is not OK. I suggest to start at 2 pm CET.
Best,
Gábor
From: Lina JASMONTAITE [mailto:Lina.Jasmontaite@vub.be] Sent: Monday, November 25, 2019 12:54 PM To: Kulitsán Gábor <kulitsan.gabor@naih.hu mailto:kulitsan.gabor@naih.hu > Cc: David Barnard-Wills <david.barnard-wills@trilateralresearch.com mailto:david.barnard-wills@trilateralresearch.com >; 'STAR' <star@listserv.vub.ac.be mailto:star@listserv.vub.ac.be > Subject: RE: STAR II - Feedback on DPA guidance draft
Dear Gabor, dear all,
Apologies for following up on this email thread only know. I went through the document and provided my comments.
I think you made a good attempt to prepare a guidance for DPAs on good practices in raising personal data compliance/ the GDPR awareness among SMEs. I suggest, however, restructuring the document. I think David and Leanne pointed it out very well that we need to include some kind of good practices and recommendations in this guidance document. At the moment, it includes a description of your experience at NAIH and of the observations from the interviews.
I think the best way to proceed further is to schedule the call and agree upon a way to improve this document.
Could we schedule a skype call for 1 hour 30min on Wed/Thu or Fri next week?
Best regards,
Lina
From: star-bounces@listserv.vub.ac.be mailto:star-bounces@listserv.vub.ac.be <star-bounces@listserv.vub.ac.be mailto:star-bounces@listserv.vub.ac.be > On Behalf Of David Barnard-Wills Sent: Wednesday, October 23, 2019 12:46 PM To: 'STAR' <star@listserv.vub.ac.be mailto:star@listserv.vub.ac.be > Subject: [star] STAR II - Feedback on DPA guidance draft
Hi Gabor,
Thank you for sending around the draft of the best practice DPA guidance. We have the following comments/thoughts
* The audience for the deliverable will be your fellow DPAS.
o Its audience already has a high level of background contextual knowledge, so we can jump straight in to the best practices – so we can probably cut some of this content down.
o Perhaps the aim of this deliverable should be to 1) introduce best practices in awareness raising that they might not be aware of and 2) provide some evidence base for what has been found to be effective.
o I would suggest keeping the report as brief and accessible as possible.
o We don’t want to duplicate the report on the interviews (d2.1) and the report on the hotline (d3.2).
* Perhaps we can identify 5-10 best practices for awareness raising for SMES
o Description of the practice
o Followed by why we think its “best”/”good” practice.
o This could include conventional/standard/must have practices – such as a hotline of some description – then then more cutting-edge/innovative/experimental practices – where we don’t have as much evidence for success, but they’re new for an audience.
* E.g. Ireland’s conference with DPOs from large corporations advising SMEs.
o We should be talking about best practices we can be confident of recommending. The readers will want to know why we are confident about our recommendations, or what our rationale for recommending them is (examples will likely be – its had positive feedback from interviews, we found out about it during our information gathering, it worked during the trial of the hotline…. )
o Include other best practices we are aware of, not just activities from STAR II (hotline and awareness raising campaign).
o One (or more) of the best practices should relate to the hotline (setting up, management)
o A potential example is the PHAEDRA II project final recommendations report - http://www.phaedra-project.eu/wp-content/uploads/PHAEDRA2_D41_final_20170114... (particularly, the early single page with all the best practices together, then short sections setting out the substance of the best practice, and our justification for supporting it).
* We have some specific feedback, notes and suggestions to this effect on the attached word document.
Best wishes,
DBW
Dr David Barnard-Wills
Research Manager (Policy, Ethics and Emerging Technologies)
Trilateral Research Ltd.
1 Knightsbridge Green
London SW1X 7QA
www.trilateralresearch.com http://www.trilateralresearch.com/
www.twitter.com/dbarnardwills http://www.twitter.com/dbarnardwills
I’m part time – Working hours: 9.30 to 14.45, Mon, Tues, Thurs, Fri
-
David Barnard-Wills -
Kulitsán Gábor -
Leanne Cochrane -
Lina JASMONTAITE -
nagy.renata＠naih.hu