...
- The OECD privacy principles, which have been the basis for the EU data protection directive. The benefit is, that OECD is not limited just to the UK or Europe.
- The EU Data Protection Directive 95/46/EC (Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data)
- Additional material is provided by the Article 29 Data Protection Working Party
- In addition, while the legal principles are buried in the Directive, the UK law provides a different presentation, which may be more readable
- An opinion from the European Court that a member state cannot further limit the power to process data, by adding an additional qualification to their equivalent of Art 7f. There are comments that this is a reminder that the Directive is supposed to \*promote\* the flow of data at the same time as protecting the privacy of individuals.
- A related blog posting
- A memo from DLA Piper to the eduGAIN project
- The REFEDS paper on data protection in Federated Access Management pdf
- The eduGAIN Policy Framework Data Protection Good Practice Profile ver 1.0 pdf