CIPL (Centre for Information Policy Leadership) (2014). A Risk-Based Approach to Privacy: Improving Effectiveness in Practice.
https://www.informationpolicycentre.com/uploads/5/7/1/0/57104281/white_paper_1-a_risk_based_approach_to_privacy_improving_effectiveness_in_practice.pdf

has been cited by the following article:

• TITLE: Three Standpoints in Risk-Based Regulation: Applying a Meta-Regulatory Framework to Personal Data Protection

  AUTHORS: Heloisa Bianquini

  KEYWORDS: Risk-Based Regulation, Personal Data Protection, GDPR, LGPD, Comparative Law

  JOURNAL NAME: Beijing Law Review, Vol.16 No.2, June 30, 2025

  ABSTRACT: By distinguishing between three perspectives of risk-based regulation—namely, of the regulated entity, the regulated activity, and of the regulator itself (Black, 2010b)—this article aims to propose a meta-regulatory framework to investigate the regulation of risk in the field of personal data protection. Using insights from the institutional development of Brazilian data protection law and comparing it with the GDPR, this study clarifies how each jurisdiction operationalizes risk and provides examples to illustrate how each of the three standpoints may interact with other perspectives. The article supports meta-regulatory debates and research on personal data regulation by providing examples and connecting these categories to the key features of a “riskified” (Spina, 2017; Macenaite, 2017) data protection law.