European Data Protection Supervisor
European Data Protection Supervisor



The Internet Privacy Engineering Network (IPEN) was launched in 2014. It is a practical initiative encouraging the development of methodologies and tools which can effectively foster privacy-enhancing technologies or PETs.

It supports the creation of engineer groups working on (re)-usable building blocks, design patterns and other tools for selected internet use cases where privacy is at stake.

IPEN welcomes participants from different areas such as data protection authorities, academia, open source and business development and other individuals who are committed to finding engineering solutions to privacy challenges.

The objective of the work should be to integrate data protection and privacy into all phases of the development process, from the requirements phase to production, as it is most appropriate for the development model and the application environment.

 It supports networking between engineer groups and existing initiatives for engineering privacy into the internet. This network facilitates exchange in order to coordinate work and avoid duplication, in addition to discussing which privacy oriented use cases should be addressed with priority.

 IPEN is building a repository of relevant resources, making its findings and knowledge base accessible to all participants, developers and privacy experts.

 A core group takes care of collection and distribution of information, liaises with other relevant initiatives, facilitates the dialogue on engineering solutions, and organises online and offline events.


Other Documents

IPEN 2020 Encryption Webinar

IPEN 2020 Encryption Webinar

IPEN workshops bring together privacy experts and engineers from public authorities, industry, academia and civil society to discuss relevant challenges and developments for the technological implementation of data protection and privacy.

The EDPS organised on 24 June 2020 an Internet Privacy Engineering Network (IPEN)

Webinar on the Use of Encryption for Privacy Enhancing Technologies (PETs)

The webinar was a follow-up event to the online workshop held on 3 June 2020 on the state of the art in encryption and its role as a safeguard for data protection and privacy. The common objective for both events was to add more technical knowledge and better understanding to the debates on privacy and encryption, by promoting the understanding of already available technologies, and encouraging their development and use when processing personal data.

Other Documents

IPEN 2020 Online Workshop

IPEN 2020 Online Workshop

IPEN workshops bring together privacy experts and engineers from public authorities, industry, academia and civil society to discuss relevant challenges and developments for the technological implementation of data protection and privacy.

The EDPS organised the first online IPEN workshop, on:

Wednesday 3 June 2020

with a  focus on the state of the art in encryption and its role for protection of privacy and personal data. The event was designed to promote the understanding of already available encryption technologies, and encourage their development and usage in the context of processing of personal data.

Other Documents

IPEN 2020 Panel on Web Tracking

IPEN 2020 Panel on Web Tracking

Exposing and limiting web tracking - technology, design, litigation and enforcement

Tuesday, 21 January 2020, from 10:00 – 12:00


European Data Protection Supervisor (EDPS)
Giovanni Buttarelli Room (Ground Floor)
Rue Montoyer 30
1000 Brussels, Belgium

IPEN events bring together privacy experts and engineers from public authorities, industry, academia and civil society to discuss relevant challenges and developments for the technological implementation of data protection and privacy.

The first IPEN event of 2020 will be focussing on web tracking, which over the years has become more pervasive and problematic. Web tracking is an issue tightly linked to technology, and new technologies are emerging to help identify and fight unlawful web tracking.

This IPEN event will showcase the efforts by Data Protection Authorities (DPAs) to increasingly enforce the relevant provisions of the General Data Protection Regulation (GDPR) and the ePrivacy Directive, and by consumer protection organisations to use legal means to curb web tracking. A software provider is trying to offer an alternative to the prevailing financing model for web companies. On an internet where websites have become increasingly complex and dependant on third party components, website owners appreciate having the tools to assess the web tracking activities on their websites. Equally, website visitors would also be empowered if they could do some test on the visited websites to check for web trackers. As part of the answer, the event will showcase the Website Evidence Collector, made publicly available by the European Data Protection Supervisor.


10:00-10:30 Registration (coffee and tea will be served)
10:30-10:40 Opening statement by Wojciech WIEWIOROWSKI, European Data Protection Supervisor
10:40-11:50 Panel discussion with

  • Isabelle BUSCKE, German consumer organisation VZBV
  • Jelle MAKKINGA, Senior Inspector, Dutch DPA Autoriteit Persoonsgegevens
  • Xabier LAREO, Technology & Security Officer, EDPS
  • Panos PAPADOPOULOS, Brave Software
  • Achim KLABUNDE, Adviser to the Supervisor, EDPS (moderator)

11:50-12:00 Conclusion by Thomas ZERDICK, Head of Unit “Information Technology Policy”, EDPS

The panel will be part of the “Brussels Data Protection Week” and take place the day before the conference "Computers, Privacy and Data Protection" which will be held 22-24 January 2020.

Registration details

The workshop is free of charge. Participants will carry their own expenses.
To register for the workshop, please send an email to stating your full name, affiliation and whether you consent to:

  • sharing your contact details among the participants of the workshop for networking purposes;
  • using your contact details to invite you to future similar events;
  • taking photos and record videos of you during the workshop for publishing them on our intranet, internet site and other EDPS social channels (Twitter, LinkedIn and YouTube).

Upon receipt of a registration request, we may ask for additional details required to access the EDPS building.

For questions please read the Data Protection Notice or contact
For more information about the Internet Privacy Engineering Network, please check the IPEN homepage, the IPEN Wiki and/or consider joining the IPEN mailing list.

Other Documents

Presentations annual IPEN workshop 2019 - Afternoon sessions

Presentations annual IPEN workshop, 12 June 2019, Rome

‘Anonymisation systems and utility’ - Maurizio Naldi, Università di Roma Tor VergataPDF icon
‘Embedding privacy in software development: implementation aspects’ - Larisa Gabudeanu, Universitatea Babeș-BolyaiPDF icon
‘Design patterns for consent management’ - Stefano Leucci, Nexa Center for Internet and SocietyPDF icon
‘PDP4E privacy engineering toolkit’ - Samuel Martín, Universidad Politécnica de Madrid, Gabriel Pedroza, Commissariat à l'énergie atomique (CEA)PDF icon
‘Data subjects and privacy by design’ - Rula Sayaf, Privacy AlgebraPDF icon
Other Documents

Presentations annual IPEN workshop 2019 - Morning sessions

Presentations annual IPEN workshop, 12 June 2019, Rome

‘The Brave Ad Platform’ - Panos Papadopoulos, BravePDF icon
‘ErnieApp’ - Scott Stonham, ErnieAppPDF icon
‘By design approach in large-scale smart city projects’ - Alessandro Mantelero, Politecnico di Torino PDF icon
‘Status of privacy engineering standardisation’ - Antonio Kung, Trialog PDF icon
‘State of the art on reusable elements for the systematic design of privacy-friendly information systems’ - José M. del Álamo, Universidad Politécnica de Madrid PDF icon
‘Guiding App Developers on Privacy and Security Design Matters’ - Majid Hatamian, Goethe Universität Frankfurt/M.PDF icon
Other Documents

IPEN Rome Workshop 2019

Final agenda


Privacy by Design

EDPS Preliminary Opinion on Privacy by Design.

Wednesday, 27 September, 2017

Newsletter (N°

In the September 2017 edition of the EDPS Newsletter we cover the EDPS Opinion on the digital single gateway, the investigation of complaints relating to medical data and the latest developments in privacy engineering.

The state of privacy 2017: mid-mandate report

The state of privacy 2017: mid-mandate report, Speech by Giovanni Buttarelli for the presentation of the 2016 EDPS Annual Report to the LIBE Committee, European Parliament

Other Documents

IPEN Workshop 2016 publications

"Privacy engineering as a field" by José M. del Álamo, U Politicénica de MadridPDF icon
"My tracking choices" by Claude Castelluccia - INRIAPDF icon
"Documenting consent" by Torgeir Hovden, SignatuPDF icon
"Top 10 Privacy Risks" by Florian Stahl, OWASPPDF icon
"Credential" by Nicolás Notario McDonnellPDF icon
PSA - the privacy by design approach of Deutsche Telekom by Frank Wagner, Deutsche Telekom AGPDF icon
What are DPAs expecting from Controllers to comply with Article 25 GDPR? by Felix Bieker, ULD Schleswig-HolsteinPDF icon

Digital Festival

Digital Festival 2016 takes place at The Egg in Brussels on 21 June 2016. This festival of ideas provides an opportunity to challenge and better understand the impact and potential of digital technologies.

As part of the festival, the EDPS has organised a workshop entitled Data Protection by Design: Privacy as an engineering principle. As people become increasingly aware of the threat of mass surveillance, the demand for more privacy friendly technologies is increasing. In the EU, data protection by design and by default will soon become a legal obligation, under the new data protection rules to be applied by May 2018. The workshop will address the different approaches to privacy engineering, the current challenges faced and initiatives, such as the Internet Privacy Engineering Network (IPEN), which aim to overcome these challenges.

The workshop takes place from 2.45pm-4pm and will be moderated by EDPS IT specialist Achim Klabunde. Confirmed speakers include Aurelie Pols, Estelle Masse, Jetzabel Serna and Aristotelis Tzafalias. To attend, please register online for the Digital Festival.


Presentation of the EDPS 2014 Annual Report at LIBE

Presentation of the EDPS 2014 Annual Report during the meeting of the Committee on Civil Liberties, Justice and Home Affairs, speech of Giovanni Buttarelli, European Parliament, Brussels

Other Documents

IPEN Workshop 2015



Friday, 05 June 2015

Interdisciplinary Centre for Law and ICT, Catholic University of Leuven, Sint-Michielsstraat 6, 3000 Leuven (Belgium)

Hosted by KU Leuven, sponsored by project PARIS (PrivAcy pReserving Infrastructure for Surveillance), supported by PRIPARE project



Speakers list

Practical information

ICRI-ICT location and suggested accommodation

Confirmed speakers:

Keynotes presented by:

  • Giovanni Buttarelli, European Data Protection Supervisor
  • Wojciech Wiewiorowski, Assistant European Data Protection Supervisor
  • Willem Debeuckelaere, President of the Belgium DPA
  • Dr. Els Kindt, Head of Privacy Group ICRI-KU Leuven
  • Achim Klabunde, Head of IT Policy sector at EDPS


  • Prof. Fanny Coudert, KU Leuven
  • Prof. Bettina Behrendt, KU Leuven
  • Antonio Kung, Trialog, Paris
  • Prof. Kai Rannenberg, Goethe Universität Frankfurt
  • Christophe Stenuit, OGERIS
  • Eduard de Jong, ISO/IEC JTC 1/SC7, n-Count Technology B.V., QC Technology BV
  • Prof. Chris Mitchell, Royal Holloway, University of London
  • Michael O’Neill, Baycloud systems
  • Ninja Marnau, CISPA Legal Research and Government Relations
  • Cliff Beeckman, Commission for the Protection of Privacy
  • Brendan Van Alsenoy, Research Unit ICRI / CIR
  • Günes Acar, COSIC research group
  • Dr. Stefan Schiffner, ENISA Area Head Smart Security and Trust
  • Massimo Attoresi, EDPS Technology and Security officer and DPO
  • Fidel Santiago, EDPS Technology and Security officer
  • Fabio Polverino, Legal Officer, Policy and Consultation at EDPS
  • Prof. Susan Perry, American University of Paris
  • Pagona Tsormpatzoudi, ICRI/CIR iMinds
  • Markus Grete, Grete DV GmbG
  • Jan Schallaboeck, ULD Legal researcher


The registration process is closed.

If you have any problems or questions please write to

If you are interested in joining the IPEN mailing list, please subscribe here or send an email to, to which you can also submit any comments or questions. We look forward to collaborating with you.


Cybersecurity and Privacy Innovation Forum 2015

Keynote address by Giovanni Buttarelli given at the Cybersecurity and Privacy Innovation Forum 2015, Brussels

Other Documents

IPEN Presentations

Florian Sthal & Stefan Brugmair - OWASP, Top 10 Privacy Risks ProjectPDF icon
Hannes Tschofenig – Privacy Considerations for Internet ProtocolsPDF icon
Rob van Eijk – Privacy Risk Assessment as an EngineeringPDF icon
Stéphane Petitcolas – Mobilitics & Cookieviz AppsPDF icon
Massimo Attoresi – Privacy Tools and a DPA’s ViewPDF icon
Frank Dawson – Privacy Engineering ProcessPDF icon

Engineering privacy: the IPEN Initiative

“How can we develop internet structure, services and apps which respect user privacy and personal data?” This question was at the core of today’s meeting of privacy experts and developers from industry, academia and free software in Berlin. The first workshop of the Internet Privacy Engineering Network (IPEN) was an important step in building a community which works on developing engineering solutions to effectively protect and enhance privacy on the internet.

Other Documents

IPEN Report

Other Documents

IPEN Speakers List

Other Documents

IPEN Workshop Agenda