The Interoperability Privacy viewpoint highlights the EIRA building blocks that are relevant when implementing the EU General Data Protection Regulation (GDPR) or assessing an existing architecture against the GDPR principles. Public administrations must indeed guarantee the citizens’ privacy, and the confidentiality, authenticity, integrity and non-repudiation of information provided by citizens and businesses.
Narrative: The selected Architecture Building Blocks from the five different views highlight the Architecture Building Blocks of the EIRA that are that are relevant with respect to GDPR:
1. The selected Architecture Building Blocks of the legal view show that privacy requirements are coming from a [Public Policy] realised by a [Binding instrument] (the GDPR itself).
2. The selected Architecture Building Blocks of the organisational view show that the roles of [Public Service Consumer] and [Public Service Provider] in the delivery of a [Public Service] are impacted by GDPR. Specific privacy roles are indeed associated to these roles by GDPR. All [Exchanges of Business Information] are impacted if the associated [Business Information] involve personal data of a [Citizen]. A [Privacy Framework], aligned with GDPR, needs then to be associated to the [Business Capability] implemented by the [Exchange of Business Information].
3. The selected Architecture Building Blocks of the semantic view show that
[Data] and [Data Sets], if involving personal data, are impacted by GDPR, as
a relevant [Data Policy], respecting the [Privacy Framework], needs to be
applied.
4. The selected Architecture Building Blocks of the Technical View show that
many service involving data are impacted by the privacy regulation, such as
[Data Transformation Service], [Data Validation Service], [e-Archiving Service], [Data Publication Service], [Data Exchange Service]. Additionally, a [Privacy Service] implementing GDPR principle can be used to ensure compliance.