Work Package 1: Project management & coordination
The primary objective of this work package is to ensure co-ordination, co-operation and cohesion in all aspects of the project’s lifetime ensuring that all the foreseen activities are carried out accordingly with the approved work plan. This objective can be analysed in the following:
- To ensure the project’s proper management and the achievement of its objectives in accordance with its time schedule and budget.
- To ensure efficient planning and coordination, and provide the communication with the European Commission.
- To ensure efficient steering of the activities, efficient risk and conflict management and establishment of a clear decision-making process.
- To provide continuous monitoring of the project progress and assure the quality of deliverables.
Work Package 2: Requirements and framework for risk analysis and communication
The goal of this work package is, on the one hand, to set the ground for byRisk project work, in terms of requirements analysis and elicitation, and, on the other hand, to specify the risk analysis and communication approaches. To this end, it aims at the following:
- Establishment of a baseline on what constitutes data protection risk according to the relevant legislation, taking also into account risks stemming from artificial intelligence and machine learning systems and services.
- Development of thorough understanding of what are the particular needs and challenges faced by SMEs, with regard to properly identifying data protection risks
- Evaluation of currently existing tools and practices focusing on data protection risk identification, assessing their applicability for SMEs
- Identification and elucidation of how data protection risks are being instantiated in the context of SMEs processing activities
- Evaluation of currently existing approaches for raising data protection awareness to the public, especially in relation to the notion of data protection risk
- Establishment of a taxonomy on data protection and privacy risks
- Set up a classification and elucidation of data protection risks that need to be identified and addressed by SMEs
- Set up a classification and elucidation of data protection risks that need to be communicated to the public, in the framework of public awareness
- To specify the functionalities of the Risk analysis tool for the SMEs
Work Package 3: Risk assessment tool development, operation and evaluation
This work package will first deal with the development of the Risk Assessment Tool, targeting SMEs. During the second year of the project, it will focus on the operation and maintenance of the tool, paving the way for its sustainability after the project’s conclusion. More specifically, this work package has the following objectives:
- Specification of the Risk Assessment Tool architecture
- Development of the software modules comprising the tool, resulting in a fully-functional and user-friendly web application
- Deployment of the tool, in order to start its operational phase
- Operational integration of the tool within the ecosystem of HDPA’s solutions towards assisting SMEs to comply with the GDPR
- To foster the seamless operation of the tool
- To maintain the tool, in terms of content updates, and fixing of any technical and operational issues that may emerge
- To evaluate and assess the tool, in order to provide for future improvements
Work Package 4: Awareness raising activities
This work package will deal with planning, preparing and performing the awareness raising activities of the project. It aims at the following:
- To set-up the overall strategy towards raising awareness
- To prepare the appropriate material to be leveraged in the context of awareness raising activities
- To design and create a tool towards raising awareness among the data subjects
- To maintain the risk awareness tool, in terms of content updates, and fixing of any technical and operational issues that may emerge
- Performance of the awareness raising activities
- Assessment and evaluation of the awareness raising programme
Work Package 5: Dissemination, exploitation and sustainability
This work package is vertical to the byRisk objectives, aiming at impact creation, exploitation and sustainability of the project results, and dissemination. Its objectives are the following:
- To provide visibility of the project results
- To network at the National and European level
- To provide for the sustainability of byRisk results beyond the project duration