This policy outlines the framework that the MOE uses to assess and manage the risk to the children participating in all of its programs, including any donor-funded programs, and the measures and systems put in place to respond to concerns about their wellbeing.
Sensitive Regulated Data: Permitted and Restricted UsesPurposeScope and AuthorityStandardViolation of the Standard - Misuse of InformationDefinitionsReferencesAppendix A: Personally Identifiable Information (PII)Appendix B: Security of Personally Owned Devices that Access or Maintain Sensitive Restricted DataAppendix C: Sensitive Security Information (SSI)
Additional metadata: - Licence: http://reference.data.gov.uk/id/open-government-licence
By 2024, the share of the global population to be covered under modern privacy regulations is projected to reach 75 percent. The forecast for the year 2023 was 65 percent. Additionally, in 2020, only ten percent of the global population's privacy was protected by modern laws.
Attribution 4.0 (CC BY 4.0)https://creativecommons.org/licenses/by/4.0/
License information was derived automatically
This dataset is about books. It has 1 row and is filtered where the book is Cyber security, privacy and data protection in EU law : a law, policy and technology analysis. It features 7 columns including author, publication date, language, and book publisher.
Open Government Licence 3.0http://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/
License information was derived automatically
The indicator measures the number of children who had been the subject of a Child Protection Plan continuously for two years or longer against the number of children ceasing to be the subject of a Child Protection Plan during the year, expressed as percentage
Source: CPR3 statutory return form local authorities to Department for Children Schools and Families (DCSF).
Publisher: DCLG Floor Targets Interactive
Geographies: County/Unitary Authority, Government Office Region (GOR), National
Geographic coverage: England
Time coverage: 2006/07 to 2008/09
Type of data: Administrative data
Attribution 4.0 (CC BY 4.0)https://creativecommons.org/licenses/by/4.0/
License information was derived automatically
In January 2012, the European Commission proposed a comprehensive reform of data protection rules in the EU. The objective is to make data protection rules fit for the digital age by putting citizens back in control over of their personal data and simplifying the regulatory environment for business. The completion of this reform is a key priority for 2015 and a key enabler of the Digital Single Market project , which aims to empower European citizens and businesses to fully seize the opportunities of the digital economy. The Eurobarometer survey, conducted in March 2015, asked 28,000 EU citizens what they think about the protection of their personal data. The overall conclusion of the survey shows that the protection of personal data remains a very important concern for citizens, as it was when the Commission presented the reform in 2012. Its outcome confirms the need to finalise the data protection reform.
Attribution 4.0 (CC BY 4.0)https://creativecommons.org/licenses/by/4.0/
License information was derived automatically
A dataset of privacy policies in the Greek language, with policies coming from top visited websites in Greece with a privacy policy in the Greek language.
The dataset, as well as results of its analysis are included.
if you want to use this dataset, please cite the relevant conference publication:
Georgia M. Kapitsaki and Maria Papoutsoglou, "A privacy policies dataset in Greek in the GDPR era, in Proceedings of the 27th Pan-Hellenic Conference on Informatics, PCI 2023.
This data was collected by the Office of the National Coordinator for Health IT in coordination with Clinovations and the George Washington University Milken Institute of Public Health. ONC and its partners collected the data through research of state government and health information organization websites. The dataset provides policy and law details for four distinct policies or laws, and, where available, hyperlinks to official state records or websites. These four policies or laws are: 1) State Health Information Exchange (HIE) Consent Policies; 2) State-Sponsored HIE Consent Policies; 3) State Laws Requiring Authorization to Disclose Mental Health Information for Treatment, Payment, and Health Care Operations (TPO); and 4) State Laws that Apply a Minimum Necessary Standard to Treatment Disclosures of Mental Health Information.
Attitude to data protection. Topics: Occupational contact with personal data; self-assessment of willingness to provide information about personal matters regarding authorities; detailed determination of type and frequency of contacts with authorities; perceived disturbances by the requests for personal data by authorities; personal determination of wrong decisions by authorities due to incorrect storage of personal data; attitude to a data protection law and assessment of a government demand for storage of personal data; detailed determinations of those authorities to whom one would provide information without hesitation; assessment of the danger of abuse of data; attitude to a personal identification and a computer network of authorities; attitude to innovations and computers; attitude to protection of the private sphere; classification of activities in the areas private sphere and public; receipt of social services; type of borrowing and taxes paid; completed insurance policies; last medical treatment and number of visits to the doctor in the last year; last hospital stay; membership in clubs or citizen initiatives; self-assessment of status in various roles, such as e.g. patient, borrower, citizen, insurance policy holder or in occupation; satisfaction with democracy and the political system in the FRG; attitude to reforms and more social justice; relationship with neighborhood; assessment of the size of personal circle of friends. Scales: attitudes to democracy and the social system. Demography: age; sex; marital status; school education; vocational training; occupation; employment; household income; size of household; composition of household; head of household; self-assessment of social class. Einstellung zum Datenschutz. Themen: Beruflicher Kontakt mit personenbezogenen Daten; Selbsteinschätzung der Auskunftsbereitschaft über persönliche Angelegenheiten gegenüber Behörden; detaillierte Ermittlung von Art und Häufigkeit der Kontakte zu Behörden; empfundene Störungen durch das Erfragen persönlicher Daten durch Behörden; eigene Feststellung falscher Entscheidungen von Behörden aufgrund fälschlicher Speicherung persönlicher Daten; Einstellung zu einem Datenschutzgesetz und Einschätzung eines staatlichen Anspruchs auf die Speicherung persönlicher Daten; detaillierte Ermittlungen derjenigen Behörden, denen man bedenkenlos Auskunft erteilen würde; Einschätzung der Gefahr eines Datenmißbrauchs; Einstellung zu einem Personenkennzeichen und einem Computerverbund der Behörden; Einstellung zu Innovationen und Computern; Einstellung zum Schutz der Privatsphäre; Einordnung von Tätigkeiten in die Bereiche Privatsphäre und Öffentlichkeit; Empfang von Sozialleistungen; Art der aufgenommenen Kredite und der abgeführten Steuern; abgeschlossene Versicherungen; letzte ärztliche Behandlung und Anzahl der Arztbesuche im letzten Jahr; letzter Krankenhausaufenthalt; Mitgliedschaft in Vereinen oder Bürgerinitiativen; Selbsteinschätzung des Status in verschiedenen Rollen, wie z. B. als Patient, als Kreditnehmer, als Staatsbürger, als Versicherungsnehmer oder im Beruf; Zufriedenheit mit der Demokratie und dem politischen System in der BRD; Einstellung zu Reformen und zu mehr sozialer Gerechtigkeit; Verhältnis zur Nachbarschaft; Einschätzung der Größe des eigenen Bekanntenkreises. Skalen: Einstellungen zur Demokratie und zum Gesellschaftssystem. Demographie: Alter; Geschlecht; Familienstand; Schulbildung; Berufsausbildung; Beruf; Berufstätigkeit; Haushaltseinkommen; Haushaltsgröße; Haushaltszusammensetzung; Haushaltungsvorstand; Selbsteinschätzung der Schichtzugehörigkeit.
http://data.europa.eu/eli/dec/2011/833/ojhttp://data.europa.eu/eli/dec/2011/833/oj
The Annual Report is an overview of European Data Protection Supervisor's (EDPS) work in the main operational fields of supervision, consultation, cooperation and IT developments from the reporting year. It also sets out the main priorities for the following year.
The Annual Report reviews the activities of the European Data Protection Supervisor and its focus on increasing the capacity of EU bodies for accountable data processing and for more proactive integration of data protection rules and principles in policy making.
These are records related to maintaining the security of information technology (IT) systems and data. Records outline official procedures for securing and maintaining IT infrastructure and relate to the specific systems for which they were written. This series also includes analysis of security policies, processes, and guidelines, as well as system risk management and vulnerability analyses. Includes records such as:rn- System Security Plansrn- Disaster Recovery Plansrn- Continuity of Operations Plansrn- published computer technical manuals and guides rn- examples and references used to produce guidelines covering security issues related to specific systems and equipmentrn- records on disaster exercises and resulting evaluations rn- network vulnerability assessments rn- risk surveysrn- service test plansrn- test files and data
Attribution 4.0 (CC BY 4.0)https://creativecommons.org/licenses/by/4.0/
License information was derived automatically
This research topic focuses on understanding how Information Security Policy Compliance (ISPC) influences the protection of patient privacy within healthcare organizations, with a specific focus on the mediating role of Security Education, Training, and Awareness (SETA) programs.
Attribution 4.0 (CC BY 4.0)https://creativecommons.org/licenses/by/4.0/
License information was derived automatically
The dataset consists of three different privacy policy corpora (in English and Italian) composed of 81 unique privacy policy texts spanning the period 2018-2021. This dataset makes available an example of three corpora of privacy policies. The first corpus is the English-language corpus, the original used in the study by Tang et al. [2]. The other two are cross-language corpora built (one, the source corpus, in English, and the other, the replication corpus, in Italian, which is the language of a potential replication study) from the first corpus.
The policies were collected from:
We manually analyzed the Alexa top 10 Italy websites as of November 2021. Analogously, we analyzed selected apps that, in the same period, had ranked better in the "most profitable games" category of the Play Store for Italy.
All the privacy policies are ANSI-encoded text files and have been manually read and verified.
The dataset is helpful as a starting point for building comparable cross-language privacy policies corpora. The availability of these comparable cross-language privacy policies corpora helps replicate studies in different languages.
Details on the methodology can be found in the accompanying paper.
The available files are as follows:
This dataset is the original dataset used in the publication [1]. The original English U.S. corpus is described in the publication [2].
[1] F. Ciclosi, S. Vidor and F. Massacci. "Building cross-language corpora for human understanding of privacy policies." Workshop on Digital Sovereignty in Cyber Security: New Challenges in Future Vision. Communications in Computer and Information Science. Springer International Publishing, 2023, In press.
[2] J. Tang, H. Shoemaker, A. Lerner, and E. Birrell. Defining Privacy: How Users Interpret Technical Terms in Privacy Policies. Proceedings on Privacy Enhancing Technologies, 3:70–94, 2021.
Beurteilung des Datenschutzes in Unternehmen durch Datenschutzbeauftragte in Betrieben. Themen: Einschätzung der Qualität des nationalen Datenschutzes; Selbsteinschätzung der Kenntnis der Datenschutzbestimmungen im eigenen Land; Einstellung zum Datenschutzgesetz (Skala: Wahrung der Grundrechte durch Datenschutzgesetze, Striktheit und Notwendigkeit des Datenschutzgesetzes, Harmonisierung der Datenschutzgesetze innerhalb Europas, Einschätzung der Auslegung des Datenschutzgesetzes im eigenen Land im Vergleich zu anderen EU-Mitgliedsstaaten); Einschätzung der Angemessenheit bestehender Gesetze zum Datenschutz angesichts des steigenden Datentransfers persönlicher Informationen über das Internet; Nutzung von Technologien (privacy enhancing technologies) zum Schutz von Datenbanken im Unternehmen; Maßnahmen zur Erhöhung der Sicherheit des Datentransfers; Transfer persönlicher Daten über das Internet durch das Unternehmen in Staaten außerhalb der EU und Art dieser Daten (Personaldaten, Kundendaten, Informationsverkauf); genutztes Medium zum personenbezogenen Datentransfer; Kenntnis des Ausdrucks ´Standardvertragsklauseln´ in Bezug auf die Übermittlung personenbezogener Daten; Kontakt des Unternehmens mit der nationalen Datenschutzbehörde und Gründe für diesen Kontakt; Veröffentlichung regelmäßiger Mitteilungen zur Datenschutzpolitik des Unternehmens; Überwachung der Öffentlichkeitsrezeption dieser Mitteilungen; geschätzte Zahl der Anfragen an das Unternehmen auf Zugang zur Datenbasis im Jahr 2006; eingegangene Datenschutzbeschwerden im Unternehmen; wichtigste Verbesserungsvorschläge für das Datenschutzgesetz: mehr Klarheit über die Umsetzungspraxis der Datenschutzbestimmungen, besseres Gleichgewicht zwischen dem Recht auf Datenschutz und der Informationsfreiheit, internationale Angleichung der nationalen Datenschutzregelungen, stärker abgestimmte Sicherheitsvorkehrungen sowie spezielle Datenschutzregelungen für jeden Sektor; Einstellung zu einer Reduzierung des Datenschutzes mit dem Argument der Terrorismusbekämpfung (Überwachung von Telefongesprächen, Internetnutzung, Kreditkartennutzung und Flugpassagierdaten, Split: Präsentation der Ablehnungskategorie bzw. der Zustimmungskategorie an erster bzw. an letzter Stelle der Antwortvorlagen). Demographie: Position des Befragten im Unternehmen; Angaben zum Unternehmen (beschränkt auf Unternehmensaktivitäten im eigenen Land): Anzahl der Mitarbeiter, unabhängig oder Teil eines nationalen oder internationalen Konzerns; Branche. Zusätzlich verkodet wurde: Befragten-ID; Interviewsprache; Interviewdatum; Interviewdauer (Interviewbeginn und Interviewende); Gewichtungsfaktor. Attitudes of companies towards data protection issues. Measures of data protection. Topics: assessment of the level of protection of the national Data Protection Law for citizens as sufficient; familiarity with the provisions of the national Data Protection Law; attitude towards selected statements on the requirements of the data protection law: necessary, too strict, only necessary for certain sectors of activity; attitude towards the following statements: sufficient harmonization of the member states’ data protection laws to consider that personal data can be moved freely within the EU, data protection law in the own country is applied more strictly than in other member states; suitability of existing legislation on data protection with regard to the increasing exchange of personal data; use of Privacy Enhancing Technologies in the company; transfer of personal data via the internet; measures taken to enhance security of data transfer; transfer of personal data to countries outside the European Economic Area; type of transferred data; used means of transferring personal data; awareness of the term ´standard contractual clauses´ with regard to personal data transfer to countries outside the European Economic Area; regular contact of the company with national data protection authority; reasons for contact: notifications, asking for guidances, complaints against company, inspections, other reasons; maintenance and update of privacy policy notices by the company; monitoring of the examination of policy notes by the public; approximate number of requests for access to personal data received in 2006; complaints from people whose personal data are being currently processed; preferred actions to improve the implementation of the legal framework on data protection; attitude towards selected measures to fight international terrorism: monitor telephone calls, monitor internet use, monitor credit card use, monitor flight passenger data. Demography: position of respondent at the company; information about the company (limited to activities in the own country): number of employees, independent or part of national or international group; company sector. Additionally coded was: respondent ID; language of the interview; date of interview; time of the beginning of the interview; duration of the interview; country; weighting factor.
The documents contained in this dataset reflect NASA's comprehensive IT policy in compliance with Federal Government laws and regulations.
Attribution 4.0 (CC BY 4.0)https://creativecommons.org/licenses/by/4.0/
License information was derived automatically
Comprehensive dataset outlining Advatec’s privacy policy, including data collection practices, user rights, GDPR compliance, and third-party data handling procedures.
Attribution 4.0 (CC BY 4.0)https://creativecommons.org/licenses/by/4.0/
License information was derived automatically
115 privacy policies from the OPP-115 corpus have been re-annotated with the specific data retention periods disclosed, aligned with the GDPR requirements disclosed in Art. 13 (2)(a). Those retention periods have been categorized into the following 6 distinct cases:
C0: No data retention period is indicated in the privacy policy/segment. C1: A specific data retention period is indicated (e.g., days, weeks, months...). C2: Indicate that the data will be stored indefinitely. C3: A criterion is determined during which a defined period during which the data will be stored can be understood (e.g., as long as the user has an active account). C4: It is indicated that personal data will be stored for an unspecified period, for fraud prevention, legal or security reasons. C5: It is indicated that personal data will be stored for an unspecified period, for purposes other than fraud prevention, legal, or security. Note: If the privacy policy or segment accounts for more than one case, the case with the highest value was annotated (e.g., if case C2 and case C4 apply, C4 is annotated).
Then, the ground truth dataset served as validation for our proposed ChatGPT-based method, the results of which have also been included in this dataset.
Columns description: - policy_id: ID of the policy in the OPP-115 dataset - policy_name: Domain of the privacy policy - policy_text: Privacy policy collected at the time of OPP-115 dataset creation - info_type_value: Type of personal data to which data retention refers - retention_period: Period of retention annotated by OPP-115 annotators - actual_case: Our annotated case ranging from C0-C5 - GPT_case: ChatGPT classification of the case identified in the segment - actual_Comply_GDPR: Boolean denoting True if they apparently comply with GDPR (cases C1-C5) or False if not (case C0) - GPT_Comply_GDPR: Boolean denoting True if they apparently comply with GDPR (cases C1-C5) or False if not (case C0) - paragraphs_retention_period: List containing the paragraphs annotated as Data Retention by OPP-115 annotators and our red text describing the relevant information used for our annotation decision
Attribution 4.0 (CC BY 4.0)https://creativecommons.org/licenses/by/4.0/
License information was derived automatically
ABSTRACT This article aims to examine the ways in which relevant formulators of schooling policies operate under a concept of social protection that is associated with and produced under the neoliberal gendarme. By enrolling in the field of schooling policies, it analyzes how social protection is dimensioned and intensified based on the logic of the school’s expanded social responsibility. Firstly, it places policymakers in a broader scope. Secondly, it deepens reflection about the Brazilian reality and offers some provocations. Methodologically, the article is based mainly on theoretical-political digressions from a critical perspective of analysis. The concepts of social protection presented here refer to the school as a place of welcome and protection, with creative spaces both inside and outside formal systems and the development of adaptable and flexible programs.
The Policy is established to ensure that the collection, management, and dissemination of data is conducted with due regard to the Department’s obligations towards data protection principles.
This policy outlines the framework that the MOE uses to assess and manage the risk to the children participating in all of its programs, including any donor-funded programs, and the measures and systems put in place to respond to concerns about their wellbeing.