What is the Working Party on Information Security and Privacy (WPISP) ?

An intergovernmental forum that:

• Develops policy options by consensus to sustain trust in the global networked society.
• Addresses information security and privacy as complementary issues at the core of our digital activities.
• Maintains an active network of experts from government, business and civil society.
• Serves as a unique platform to:
  • Monitor trends
  • Share and test experiences
  • Analyse the impact of technology on information security and privacy
  • Develop policy guidance

The Work of the WPISP:

• Serves as a foundation for developing national coordinated policies.
• Is balanced and pragmatic; respects cultural, legal and social differences.
• Benefits the broader international community through OECD’s co-operation with non-members.
• Is well recognised by other international and regional organisations.

The WPISP in the OECD Structure:

The OECD is a unique forum where the governments of 30 member countries work together with business and civil society to address the economic, social, environmental and governance challenges of the globalising world economy, as well as exploit its opportunities.

The WPISP works under the direction of the Committee for Information, Computer and Communications Policy (ICCP) which reports to the OECD Council.

It is supported by the OECD Secretariat within the Directorate for Science, Technology and Industry.

Participants are delegates from member countries. Business, civil society, other international organisations and non-members are also sitting at the table.

It meets twice a year in Paris and organises forum sessions and conferences.

WPISP Work on Information Security

• The OECD “Guidelines for the Security of Information Systems and Networks: Towards a Culture of Security” (2002):
  • Aim to promote security in the design and use of ICTs.
  • Help each participant to become aware of risks, assume responsibility, and take steps to enhance the security of information systems and networks.

The WPISP assists governments, businesses and civil society in developing a culture of security across society and building trust online.

• Surveys of national information security policies
  • The Promotion of a Culture of Security in OECD Countries (2005)
  • Survey on the Implementation of the 2002 OECD Security Guidelines (2004)
• International workshops to share experience and best practices
  • OECD-APEC Workshop on Security of Information Systems and Networks (2005)
  • Global Forum on Information Systems and Network Security (2003)
• “Culture of Security Web Site”: directory of resources on national information security policies: www.oecd.org/sti/cultureofsecurity
• Critical information infrastructures policies (ongoing)

Download the factsheet on OECD work on Security of Information Systems and Networks

WPISP Work on Privacy

• The OECD “Guidelines on the Protection of Privacy and Transborder Flows of Personal Data” (1980)represent an international consensus on the handling of personal information in the public and private sectors since 1980.
• “Privacy Online: OECD Guidance on Policy and Practice” (2002) draws together 4 years of WPISP work on alternative dispute resolution, privacy-enhancing technologies, online privacy policies, enforcement and redress, etc. in relation to e-commerce.
• OECD Privacy Policy Generator: www.oecd.org/sti/privacygenerator
• Making privacy notices simple
• Privacy Law Enforcement Cooperation (ongoing) work aims to develop an instrument to assist privacy enforcement authorities in co-operating in cross-border matters

Download the factsheet on OECD Work on Privacy and Personal Data Protection

Other Work

• OECD Guidelines on Cryptography Policy (1998)
• E-Authentication
  • Ottawa Ministerial Declaration on Authentication for Electronic Commerce (1998)
  • "Survey of Legal and Policy Frameworks for E-Authentication Services and E-Signatures in OECD Member Countries" (2002-2003)
  • "The Use of Authentication Across Borders in OECD Countries" (2005)
  • Guidance on e-authentication (ongoing)
• OECD Task Force on Spam (2005-2006)
• Indicators for trust (2005)
• “Biometric-Based Technologies” (2004)
• Other ongoing work
  • Digital Identity Management
  • Malware
  • Pervasive RFID, sensors and networks
  • Common Framework for Implementing Information Security and Privacy

More information and documents are available in the Publications & Documents section (link at the top of this page or at www.oecd.org/sti/security-privacy).