The relationship between data protection legislation and information security related standards

Abstract

In the last 20 years standards in the context of information security rapidly developed and reached a high level of maturity. Information security also is an important task in the context of data protection, as outlined by the European Data Protection Directive 95/46/EC. However, this Directive does not explicitly relate to standards in the context of information security, security requirements are described quite generally. In this paper it is analysed how on a European level selected standards in the context of information security can be used to fulfill the security requirements described in the Directive 95/46/EC.