Explore how private enhancing technologies must be used within an appropriate legal and governance framework. There is an importance of adhering to fully transparent privacy notices (Articles 12/13) to ensure that organisations can hold data securely. Delve into the challenges of finding a lawful basis under both the Data Protection Act and Common law for any movement of data. What are the common compliance matters affecting PETs use cases (e.g., data localisation, consent obligations, data minimisation)? Are there ambiguities around compliance conditions e.g., what constitutes 'effective anonymisation'? How can organisations and regulators work together to untangle these ambiguities? Finally, examine the value of anonymisation and the identifiability spectrum from the perspective of PETs.
