FIT5205 Data in Society – Assignment 2 PIA Review Worksheet

“See the accompanying assignment specification for instructions, assessment criteria, citing and referencing requirements, etc. Note that using double quotation marks around worksheet text and questions so that not included in Turnitin similarity scores.”

STUDENT ID

General (10 marks)

“Give an overview of the context for this PIA addressing the following questions

a) What are Intelligent Transport Systems (ITS) and what are their potential benefits?

b) Who are the key stakeholders in the development of Intelligent Transport Systems?

c) What is C-ITS technology and what role does it play in the ITS ecosystem?

d) What are the new data/information risks of C-ITS and other automated vehicle technologies?

(5 marks)”

“Explain who has carried out this PIA, on whose behalf, what is its scope and what is its evidence base (1 mark)”

“What are the indications that a Privacy by Design approach is being adopted for the development and deployment of C-ITS and other automated vehicle technologies In Australia? Illustrate your answer with an example for at least four of the Privacy Design principles and make sure that your answer demonstrates your understanding of the Privacy by Design principles.

(4 marks)”

PIA Findings (12 marks)

“Explain the reasoning behind why the data collected, used and disclosed in C-ITS messaging should be considered personal information for the purpose of Australian privacy legislation. (2 marks)”

“Locate a suitable diagram of possible information flows in C-ITS and explain in your own words. Ensure that you provide a full citation and reference to your source (2 marks)”

“APP Findings (8 Marks)

For each of the following APP findings explain the implications for

a) Organisations providing and operating C-ITS devices (e.g. vehicle manufactures, transport operators, road infrastructure providers)

b) Governance

c) Vehicle and road users”

APP	Finding	C-ITS Device Organisations	Governance	Vehicle and road users
APP 1: Openness and Transparency	“Participants in C-ITS (including any centralised function or central hub that may be established) are required to develop specific C-ITS privacy policies to comply with the openness and transparency principles in APP1.”
APP 3: Collection of solicited personal information	“Collection of solicited personal information is likely to be in accordance with APP3, although some aspects of collection are still to be determined. No sensitive data is collected.”
APP 5: Notification	“The C-ITS framework (here and abroad) does not yet include a standard approach regarding the provision of notice to drivers. Compliance with APP 5 presents a significant challenge for C-ITS”
APP 6: Use or Disclosure	“Compliance with APP 6 requires significant further technical and policy development, in order to provide a system of ‘consent markers’ that works in practice.”
APP 11: Security	“Privacy legislation requires some specific security compliance steps (to the extent that these are not already being undertaken): 1. Risk assessment – the OAIC Guidelines require organisations to conduct a risk and vulnerability assessment; 2. Data destruction – there is a specific requirement in APP 11 to develop a detailed data destruction plan; and 3. Broadcast data – the security review should include a discussion on the potential impact of ‘eavesdropping’.”
APP 12: Access	“Access requests in the C-ITS framework will be complex, and may only provide limited data to individual consumers. The system might benefit from some work on ensuring consistent access across the network.”

Post PIA (3 marks)

“This PIA was undertaken in 2016 and published in 2017. What has happened in Australia with regards to C-ITS developments since?”

References

[Insert your reference list here]