Some Thoughts on the Legal Background of the Continuously Increasing Privacy Risk in Information Systems and on How to Deal with It

This paper tries to give an overview of the rising concerns raised by the issue of privacy protection that is associated with the European Data Retention Directive. After relating this risk to the requirements as stated in the European Data Protection Directive, an approach for a security-integrated view on the design of information systems is discussed. The paper then finishes with an outlook on the possible impact on IT governance.