Implementing GDPR in the Charity Sector: A Case Study - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Book Sections Year : 2019

Implementing GDPR in the Charity Sector: A Case Study

Jane Henriksen-Bulmer
  • Function : Author
  • PersonId : 1052836
Shamal Faily
  • Function : Author
  • PersonId : 1052837
Sheridan Jeary
  • Function : Author
  • PersonId : 1052838


Due to their organisational characteristics, many charities are poorly prepared for the General Data Protection Regulation (GDPR). We present an exemplar process for implementing GDPR and the DPIA Data Wheel, a DPIA framework devised as part of the case study, that accounts for these characteristics. We validate this process and framework by conducting a GDPR implementation with a charity that works with vulnerable adults. This charity processes both special category (sensitive) and personally identifiable data. This GDPR implementation was conducted and devised for the charity sector, but can be equally applied in any organisation that need to implement GDPR or conduct DPIAs.
Fichier principal
Vignette du fichier
479119_1_En_12_Chapter.pdf (410.09 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-02271655 , version 1 (27-08-2019)





Jane Henriksen-Bulmer, Shamal Faily, Sheridan Jeary. Implementing GDPR in the Charity Sector: A Case Study. Eleni Kosta; Jo Pierson; Daniel Slamanig; Simone Fischer-Hübner; Stephan Krenn. Privacy and Identity Management. Fairness, Accountability, and Transparency in the Age of Big Data : 13th IFIP WG 9.2, 9.6/11.7, 11.6/SIG 9.2.2 International Summer School, Vienna, Austria, August 20-24, 2018, Revised Selected Papers, AICT-547, Springer International Publishing, pp.173-188, 2019, IFIP Advances in Information and Communication Technology, 978-3-030-16743-1. ⟨10.1007/978-3-030-16744-8_12⟩. ⟨hal-02271655⟩
72 View
26 Download



Gmail Facebook X LinkedIn More