Standardised Messenger Audit
Résumé
Successful communication is an important component for collaboration and teamwork within businesses,
as well as a big part of everyday life. While messenger services were intended for personal use when they
were first introduced, they are now a widely used tool in various contexts. An essential factor in the use
of messenger services is the guarantee and assurance of data protection. In Germany and other European
countries, the DSGVO compliance of messengers is therefore an important issue. The messenger service
must thus protect the data of its user base, ensure control over their data, and delete data in compliance
with the law. In addition, the service must keep data processing to a minimum and use the data only for
specified, clear and legitimate purposes. In order for data protection authorities to also be able to consistently
and comprehensively advise and monitor companies and institutions on the use of messengers, common
requirements for the use of messengers and standardized audit methods in line with the GDPR are essential.
The stated goal of the SPE project is therefore to develop a test catalog of mandatory, recommended, and
optional requirements using the keywords described in RFC 2119, which a GDPR-compliant messenger front
end has to meet. This catalog is primarily supposed to support supervisory authorities in their work, but
companies may also be interested in this catalog to review and improve on their product.
Domaines
Cryptographie et sécurité [cs.CR]
Fichier principal
standardisedmessengeraudit_d1frontend-requirement_edpb-spe-programme_en.pdf (416.51 Ko)
Télécharger le fichier
standardisedmessengeraudit_d2audit-methodology_edpb-spe-programme_en.pdf (1008.69 Ko)
Télécharger le fichier
Origine | Fichiers produits par l'(les) auteur(s) |
---|
Origine | Fichiers produits par l'(les) auteur(s) |
---|