ICPP ICPP = Independent Centre for Privacy Protection Schleswig-HolsteinICPP = Independent Centre for Privacy Protection Schleswig-Holstein Service provider for the citizens of Schleswig-Holstein instituted by the Land GovernmentService provider for the citizens of Schleswig-Holstein instituted by the Land Government Independent supervisory authority (as defined under the EU Data Protection Directive)Independent supervisory authority (as defined under the EU Data Protection Directive)

Overview 1. Who needs a Privacy Seal? 2. How does the Privacy Seal work? 3. Does the Privacy Seal work? 4. Where does the Privacy Seal fit into the e-region project? 5. What do Privacy Seals have to do with the EU? 6. Who is interested in a Privacy Seal from Schleswig-Holstein? 7. Does the Privacy Seal end with the e-region project?

Who needs a Privacy Seal? EverybodyEverybody Developers, manufacturers and providers of IT productsDevelopers, manufacturers and providers of IT products Users and customersUsers and customers All the innovators in the world of privacy protectionAll the innovators in the world of privacy protection Data Protection AuthoritiesData Protection Authorities

Overview 1. Who needs a Privacy Seal? 2. How does the Privacy Seal work? 3. Does the Privacy Seal work? 4. Where does the Privacy Seal fit into the e-region project? 5. What do Privacy Seals have to do with the EU? 6. Who is interested in a Privacy Seal from Schleswig-Holstein? 7. Does the Privacy Seal end with the e-region project?

Legal Basis of the Privacy Seal

IT Product Process of the Privacy Seal

IT Product Independent Expert examines IT Product … Process of the Privacy Seal

IT Product Independent Expert examines IT Product … IT Product is legally and technically privacy-compliant Process of the Privacy Seal

IT Product Independent Expert examines IT Product … ICPP grants Privacy Seal for 2 Years IT Product is legally and technically privacy-compliant Process of the Privacy Seal

IT Product Independent Expert examines IT Product … ICPP grants Privacy Seal for 2 Years Certified IT Product IT Product is legally and technically privacy-compliant Process of the Privacy Seal

IT Product Independent Expert examines IT Product … ICPP grants Privacy Seal for 2 Years Certified IT Product Privacy Protection as Competition Advantage Private Customers IT Product is legally and technically privacy-compliant Process of the Privacy Seal

IT Product Independent Expert examines IT Product … ICPP grants Privacy Seal for 2 Years Certified IT Product Privacy Protection as Competition Advantage Public Authorities Certified Products are deployed preferably IT Product is legally and technically privacy-compliant Private Customers Process of the Privacy Seal

Overview 1. Who needs a Privacy Seal? 2. How does the Privacy Seal work? 3. Does the Privacy Seal work? 4. Where does the Privacy Seal fit into the e-region project? 5. What do Privacy Seals have to do with the EU? 6. Who is interested in a Privacy Seal from Schleswig-Holstein? 7. Does the Privacy Seal end with the e-region project?

Companies with Privacy Seal

Overview 1. Who needs a Privacy Seal? 2. How does the Privacy Seal work? 3. Does the Privacy Seal work? 4. Where does the Privacy Seal fit into the e-region project? 5. What do Privacy Seals have to do with the EU? 6. Who is interested in a Privacy Seal from Schleswig-Holstein? 7. Does the Privacy Seal end with the e-region project?

Regional Identity and Nationwide Radiation Standard: Schleswig- Holstein Land Data Protection Act (LDSG)Standard: Schleswig- Holstein Land Data Protection Act (LDSG) Privacy by technology within the productPrivacy by technology within the product Pull effect on competing suppliersPull effect on competing suppliers Nationwide offering of certified products, if need be EU Users benefit from higher privacy protection level nationwide Product privacy protection level improves nationwide

Overview 1. Who needs a Privacy Seal? 2. How does the Privacy Seal work? 3. Does the Privacy Seal work? 4. Where does the Privacy Seal fit into the e-region project? 5. What do Privacy Seals have to do with the EU? 6. Who is interested in a Privacy Seal from Schleswig-Holstein? 7. Does the Privacy Seal end with the e-region project?

Privacy Seal and EU Privacy by Technology Privacy by Technology 1970 Privacy by Technology 1981 Privacy Technology (D. Chaum et al.) 1995 Privacy Enhancing Technologies - PETs (J. Borking et al.) 2002 Privacy Seal Schleswig- Holstein Idea: High level impacts of privacy standards implemented in IT products Idea: High level impacts of privacy standards implemented in IT products

European Commission: Promotion of PETs Conferences and Workshops on PETsConferences and Workshops on PETs Promotion of PETs in EU Programmes:Promotion of PETs in EU Programmes: –Research: IST (Information Society Technologies) Programme –Privacy Strategy From the Report on the Implementation of the Data Protection Directive (95/46/EC) of the Commission (15 May 2003):From the Report on the Implementation of the Data Protection Directive (95/46/EC) of the Commission (15 May 2003):

First Report on the Implementation of the Data Protection Directive (95/46/EC), 15 May 2003: The key-issue is not only how to create technologies that are really privacy enhancing, but how to make sure that these technologies are properly identified and recognised as such by the users. Certification schemes play a crucial role and the Commission will continue to follow developments in this area. The Commission believes that such schemes should indeed be encouraged and further developed. The objective is not just better privacy practices, but also to increase transparency and therefore the trust of users and to give those investing in compliance and even enhanced protection an opportunity to demonstrate their performance in this respect and exploit this to their competitive advantage.

Privacy Seal internationally presented ( ): March 2002&2003, Hanover March 2002, Danzig 23 May 2002, The Hague 21 October 2002, Vilnius October 2002, Zurich 11 November 2002, Vienna 26 November 2002, Berlin 5-6 December 2002, Rome 9-11 April 2003, Almaden (USA) May 2003, Bad Godesberg May 2003, Vienna 15 October 2003, Brussels 6-7 November 2003, Toronto

Overview 1. Who needs a Privacy Seal? 2. How does the Privacy Seal work? 3. Does the Privacy Seal work? 4. Where does the Privacy Seal fit into the e-region project? 5. What do Privacy Seals have to do with the EU? 6. Who is interested in a Privacy Seal from Schleswig-Holstein? 7. Does the Privacy Seal end with the e-region project?

Who is interested in a Privacy Seal from Schleswig-Holstein? Important: international standardisationImportant: international standardisation Contacts to other seal and audit initiatives (Privacy & Security)Contacts to other seal and audit initiatives (Privacy & Security) PETTEP - Privacy Enhancing Technologies Testing and Evaluation ProjectPETTEP - Privacy Enhancing Technologies Testing and Evaluation Project –Initiated by the IPC Ontario, Canada –Aim: Criteria for PETs –Team from administration, business, science

The internationally renowned Cryptologist David Chaum, L.A.: The Privacy Seal and the data protection audit are extremely innovative and have enormous potential. Privacy protection experts in Kiel are worldwide leading. I hope that the German Federal Government takes this into consideration when making future laws and does not hamper this trend. (25 August 2003, Kiel)

Overview 1. Who needs a Privacy Seal? 2. How does the Privacy Seal work? 3. Does the Privacy Seal work? 4. Where does the Privacy Seal fit into the e-region project? 5. What do Privacy Seals have to do with the EU? 6. Who is interested in a Privacy Seal from Schleswig-Holstein? 7. Does the Privacy Seal end with the e-region project?

Sustainability Certification application continued after the project endedCertification application continued after the project ended Recommendation by other Data Protection CommissionersRecommendation by other Data Protection Commissioners Plans for a federal law for data protection audits by the German Federal GovernmentPlans for a federal law for data protection audits by the German Federal Government

Heide Simonis, Minister-president of Land Schleswig-Holstein: Schleswig-Holstein has reacted to the opportunities and rapid progress in global communication and information through its data protection policy with convincing, citizen-friendly, efficient and innovative laws. We are the leading German Land in this respect. Data protection has become a local advantage for Schleswig-Holstein. (2003)