<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01420983</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-18T01:38:15+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">PRIAM: a Privacy Risk Analysis Methodology</title>
            <author role="aut">
              <persName>
                <forename type="first">Daniel</forename>
                <surname>Le Métayer</surname>
              </persName>
              <email type="md5">02faf63c6858f4c2a53666ffa5335341</email>
              <email type="domain">inria.fr</email>
              <idno type="idhal" notation="string">daniel-le-metayer</idno>
              <idno type="idhal" notation="numeric">170349</idno>
              <idno type="halauthorid" notation="string">1360-170349</idno>
              <idno type="IDREF">https://www.idref.fr/083763961</idno>
              <affiliation ref="#struct-206120"/>
              <affiliation ref="#struct-203831"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sourya Joyee</forename>
                <surname>De</surname>
              </persName>
              <email type="md5">74e0a46b56bdb94229b3d7f9e5ce1e66</email>
              <email type="domain">inria.fr</email>
              <idno type="idhal" notation="numeric">980987</idno>
              <idno type="halauthorid" notation="string">1019783-980987</idno>
              <affiliation ref="#struct-206120"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Daniel</forename>
                <surname>Le Métayer</surname>
              </persName>
              <email type="md5">02faf63c6858f4c2a53666ffa5335341</email>
              <email type="domain">inria.fr</email>
            </editor>
            <funder ref="#projanr-35711"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2016-12-21 12:49:19</date>
              <date type="whenModified">2025-10-06 11:35:37</date>
              <date type="whenReleased">2016-12-21 12:49:19</date>
              <date type="whenProduced">2016-09-26</date>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="177893">
                <persName>
                  <forename>Daniel</forename>
                  <surname>Le Métayer</surname>
                </persName>
                <email type="md5">02faf63c6858f4c2a53666ffa5335341</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01420983</idno>
            <idno type="halUri">https://inria.hal.science/hal-01420983</idno>
            <idno type="halBibtex">lemetayer:hal-01420983</idno>
            <idno type="halRefHtml">&lt;i&gt;Data Privacy Management and Security Assurance&lt;/i&gt;, Sep 2016, Heraklion, Greece</idno>
            <idno type="halRef">Data Privacy Management and Security Assurance, Sep 2016, Heraklion, Greece</idno>
            <availability status="restricted"/>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="INSA-LYON">Institut National des Sciences Appliquées de Lyon</idno>
            <idno type="stamp" n="INRIA-RHA">INRIA Grenoble - Rhône-Alpes</idno>
            <idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="TDS-MACS">Réseau de recherche en Théorie des Systèmes Distribués, Modélisation, Analyse et Contrôle des Systèmes</idno>
            <idno type="stamp" n="INRIA-RENGRE">INRIA-RENGRE</idno>
            <idno type="stamp" n="INSA-GROUPE">Groupe INSA</idno>
            <idno type="stamp" n="UDL">UDL</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="INRIA-LYS">INRIA-LYON</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">PRIAM: a Privacy Risk Analysis Methodology</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Daniel</forename>
                    <surname>Le Métayer</surname>
                  </persName>
                  <email type="md5">02faf63c6858f4c2a53666ffa5335341</email>
                  <email type="domain">inria.fr</email>
                  <idno type="idhal" notation="string">daniel-le-metayer</idno>
                  <idno type="idhal" notation="numeric">170349</idno>
                  <idno type="halauthorid" notation="string">1360-170349</idno>
                  <idno type="IDREF">https://www.idref.fr/083763961</idno>
                  <affiliation ref="#struct-206120"/>
                  <affiliation ref="#struct-203831"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sourya Joyee</forename>
                    <surname>De</surname>
                  </persName>
                  <email type="md5">74e0a46b56bdb94229b3d7f9e5ce1e66</email>
                  <email type="domain">inria.fr</email>
                  <idno type="idhal" notation="numeric">980987</idno>
                  <idno type="halauthorid" notation="string">1019783-980987</idno>
                  <affiliation ref="#struct-206120"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>Data Privacy Management and Security Assurance</title>
                  <date type="start">2016-09-26</date>
                  <date type="end">2016-09-27</date>
                  <settlement>Heraklion</settlement>
                  <country key="GR">Greece</country>
                </meeting>
                <editor>G. Livraga</editor>
                <editor>V. Torra</editor>
                <editor>A.  Aldini</editor>
                <editor>F.  Martinelli</editor>
                <editor>N. Suri</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <date type="datePub">2016-09-26</date>
                </imprint>
              </monogr>
              <ref type="publisher">http://www.springer.com/us/book/9783319470719</ref>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en"> harm</term>
                <term xml:lang="en"> risk</term>
                <term xml:lang="en"> PRA</term>
                <term xml:lang="en"> privacy risk analysis</term>
                <term xml:lang="en"> PIA</term>
                <term xml:lang="en"> privacy impact assessment</term>
                <term xml:lang="en"> personal data</term>
                <term xml:lang="en">privacy</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cy">Computer Science [cs]/Computers and Society [cs.CY]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Privacy Impact Assessments (PIA) are recognized as a key step to enhance privacy protection in new information systems and services. They will be required in Europe when the new General Data Protection Regulation becomes eective. From a technical perspective, the core of a PIA is a Privacy Risk Analysis (PRA), which has received relatively less attention than organizational and legal aspects of PIAs. In this paper, we propose a rigorous and systematic PRA methodology. </p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-206120" status="VALID">
          <idno type="RNSR">201321065V</idno>
          <idno type="ROR">https://ror.org/02b3vs478</idno>
          <orgName>Privacy Models, Architectures and Tools for the Information Society</orgName>
          <orgName type="acronym">PRIVATICS</orgName>
          <date type="start">2014-01-01</date>
          <date type="end">2026-06-30</date>
          <desc>
            <address>
              <addrLine>Centre Inria de l'Université Grenoble Alpes655, avenue de l'Europe 38334 Saint Ismier CedexInria de Lyon56 Bd Niels Bohr69100 Villeurbanne</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/equipes/privatics</ref>
          </desc>
          <listRelation>
            <relation active="#struct-2497" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-203831" type="direct"/>
            <relation active="#struct-219748" type="indirect"/>
            <relation active="#struct-301088" type="indirect"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation active="#struct-1096051" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-203831" status="VALID">
          <orgName>CITI Centre of Innovation in Telecommunications and Integration of services</orgName>
          <orgName type="acronym">CITI</orgName>
          <desc>
            <address>
              <addrLine>CITI Laboratory, INSA Lyon Domaine Scientifique de la Doua Batiment Claude Chappe 6 avenue des Arts 69621 Villeurbanne Cedex Phone +33 4 7243 6415 Fax +33 4 7243 6227 E-Mail citi@insa-lyon.fr</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.citi.insa-lyon.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-219748" type="direct"/>
            <relation active="#struct-301088" type="indirect"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-2497" status="VALID">
          <idno type="RNSR">199218244V</idno>
          <idno type="ROR">https://ror.org/00n8d6z93</idno>
          <orgName>Centre Inria de l'Université Grenoble Alpes</orgName>
          <desc>
            <address>
              <addrLine>Inovallée655 avenue de l'Europe38330 Montbonnot</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/centre/grenoble</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-219748" status="VALID">
          <idno type="IdRef">052444724</idno>
          <idno type="ISNI">0000 0001 2292 0228</idno>
          <orgName>Institut National des Sciences Appliquées de Lyon</orgName>
          <orgName type="acronym">INSA Lyon</orgName>
          <date type="start">1957-03-18</date>
          <desc>
            <address>
              <addrLine>20 Avenue Albert Einstein, 69621 Villeurbanne cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.insa-lyon.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
            <relation active="#struct-301232" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301088" status="VALID">
          <idno type="ROR">https://ror.org/01rk35k63</idno>
          <orgName>Université de Lyon</orgName>
          <desc>
            <address>
              <addrLine>92 rue Pasteur - CS 30122, 69361 Lyon Cedex 07</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.universite-lyon.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-301232" status="VALID">
          <idno type="IdRef">162105150</idno>
          <orgName>Institut National des Sciences Appliquées</orgName>
          <orgName type="acronym">INSA</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-1096051" status="VALID">
          <idno type="RNSR">202224236C</idno>
          <idno type="ROR">https://ror.org/022gakr41</idno>
          <orgName>Centre Inria de Lyon</orgName>
          <desc>
            <address>
              <addrLine>Inria de Lyon / Bâtiment CEI-2 / Campus La Doua - Villeurbanne / 56, Boulevard Niels Bohr / CS 52132 / 69 603 Villeurbanne</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.inria.fr/fr/centre-inria-de-lyon</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-35711" status="VALID">
          <idno type="anr">ANR-12-INSE-0013</idno>
          <idno type="program">Ingénierie Numérique et Sécurité</idno>
          <orgName>BioPriv</orgName>
          <desc>Conception de systèmes biométriques pour le contrôle d'accès : application d'une démarche systématique de " Privacy by Design "</desc>
          <date type="start">2012</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>