Privacy and Risk-based Authentication - Gresa Mjeku

Today’s apace environment requires an agile approach towards authentication solutions. Risk-based authentication (RBA) is one of them. It categorizes certain login attempts as suspicious by monitoring additional parameters from login credentials such as IP address. RBA’s security and usability rely on the processing of personal data and users benefit from these solutions at the cost of disclosing personal data. This presentation outlines the principles of the GDPR and proposes improvements to integrate them into RBA solutions to preserve privacy and ensure compliance with data protection by design.