In November 2021, a research report was published on the Privacy Impact Assessment (PIA) methodology, applied to connected cars. This research was carried out within the framework of Axis 5 – Trust and Personal Data – of the C3S Chair, in close collaboration with the Values and Policies of Personal Information (Valeurs et Politiques des Informations Personnelles or VP-IP) Chair of the Institut Mines-Télécom.
The report, written by Claire Levallois (Professor of Law at IMT/Télécom Paris, Coordinator of the VP-IP Chair) and Jonathan Keller (Law Engineer at Télécom Paris) is based on a practical case (called “Biomem”) to which four impact assessment methodologies are applied: the French CNIL and Priam, the German BSI and the US NIST methodologies.) It is completed by a legal section dealing with the judicialization of risks related to personal data.
Read the report (in French)