Rapport Année : 2024

Standardised Messenger Audit

Résumé

Successful communication is an important component for collaboration and teamwork within businesses, as well as a big part of everyday life. While messenger services were intended for personal use when they were first introduced, they are now a widely used tool in various contexts. An essential factor in the use of messenger services is the guarantee and assurance of data protection. In Germany and other European countries, the DSGVO compliance of messengers is therefore an important issue. The messenger service must thus protect the data of its user base, ensure control over their data, and delete data in compliance with the law. In addition, the service must keep data processing to a minimum and use the data only for specified, clear and legitimate purposes. In order for data protection authorities to also be able to consistently and comprehensively advise and monitor companies and institutions on the use of messengers, common requirements for the use of messengers and standardized audit methods in line with the GDPR are essential. The stated goal of the SPE project is therefore to develop a test catalog of mandatory, recommended, and optional requirements using the keywords described in RFC 2119, which a GDPR-compliant messenger front end has to meet. This catalog is primarily supposed to support supervisory authorities in their work, but companies may also be interested in this catalog to review and improve on their product.

Mots clés

Fichier principal
Vignette du fichier
standardisedmessengeraudit_d1frontend-requirement_edpb-spe-programme_en.pdf (416.51 Ko) Télécharger le fichier
standardisedmessengeraudit_d2audit-methodology_edpb-spe-programme_en.pdf (1008.69 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04840617 , version 1 (22-01-2025)

Identifiants

  • HAL Id : hal-04840617 , version 1

Citer

Mathieu Cunche. Standardised Messenger Audit. European Data Protection Board (EDPB). 2024. ⟨hal-04840617⟩
9 Consultations
0 Téléchargements

Partager

More