The Privacy Guarantor has just given the ok to the rules governing electronic access to public administration services, including through the use of App IO. The Authority has expressed a favorable opinion on the guidelines prepared by the Agency for Digital Italy (AgID).
Privacy Guarantor: the use of the IO App is regulated
The document defines the modalities for the creation and operation of the telematic access point to allow public administrations and other providers to make their services available to users. The access point, consisting of the set of systems developed and managed by PagoPa, is made up of several components: a front-end (which includes the App IO and a web application), which the user can access through SPID about CIE; a back-end, which also manages the interactions between the front-end and the back office; a back office, dedicated to providers, thanks to which they can join the access point and use the services and interfaces made available to interact with citizens.
The scheme in question takes into account the indications provided by the Guarantor’s Office during numerous discussions with the representatives of AgID and PagoPa to ensure appropriate guarantees for the protection of privacy. Indications that first of all concerned the roles assumed by PagoPa and the providers, and the methods of joining the telematic access point.
Particular attention was paid to the measures and guarantees adopted to create the access point in compliance with the principi di privacy by design e privacy by default, with specific regard to the processing of data relating to health and personal data relating to criminal convictions and offenses, and to the methods of integration of the telematic access point with other digital platforms.
In the opinion, the Guarantor specified that the analysis of further detailed measures that will be adopted will be carried out as part of the impact assessment on data protection that will be transmitted by PagoPa. Finally, the regulation of other technical aspects was deferred to other technical regulations of AgID.