May 06 - GRA Participates in Data Sweep to Review Mobile App Privacy Issues
Together with other privacy enforcement authorities around the world, the Gibraltar Regulatory Authority, as Data Protection Commissioner, will be reviewing the use of personal data by mobile apps to identify privacy issues, as part of the 2014 Sweep by the Global Privacy Enforcement Network (“GPEN”).
GPEN was established to foster cross-border cooperation among privacy authorities a second sweep will take place between May 12th and 18th 2014, with authorities participating ‘in a coordinated effort to examine privacy issues related to mobile applications.’
This theme was chosen because many privacy enforcement authorities have identified mobile apps as a key area of focus in light of the privacy implications for consumers. Apps are raising a number of privacy concerns.
During the Sweep week, participants will review some of the most popular apps as well as apps of particular interest to their jurisdiction. For example, some participants plan to focus on health-related apps or apps developed by public sector organizations.
Sweep participants will be looking at the types of permissions an app is seeking and whether those permissions exceed what would be expected based on the app’s functionality, but also how the app explains to consumers why it wants the information and what it will do with it. Concerns identified during the Sweep will result in follow-up work such as outreach to organizations and/or enforcement actions.
The aim is increase public and business awareness of privacy rights and responsibilities, encouraging compliance with privacy legislation; identifying concerns, which may be addressed with targeted education and/or enforcement; and enhancing cooperation amongst privacy enforcement authorities.
Participants in the sweep range from a huge variety of countries including most of Europe, Canada, Colombia, China and Australia.
