Prototyping an End-User User Interface for the Solid Application Interoperability Specification Under GDPR

Bailly, Hadrien; Papanna, Anoop; Brennan, Rob

doi:10.1007/978-3-031-33455-9_33

Cited by 5 publications

(3 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Moreover, ML models were trained with DPV's taxonomies to identify personal data processing activities in code repositories [80,41] and textual datasets [32,33]. DPV's outputs were also used to model access and usage control policies [12,10,16,82], and in particular applied to Solid [20,25,14,13,30,3,19] and health data-sharing use cases [78,61], as well as to describe consent records and contracts for sensor data [49,50]. In the context of data spaces, DPV was used to provide descriptions of health data handling activities [40] and to create user-centric privacy interfaces [36,56,31].…”

Section: Workmentioning

confidence: 99%

Data Privacy Vocabulary (DPV) - Version 2

Pandit,

Esteves,

Krog

et al. 2024

Preprint

View full text Add to dashboard Cite

The Data Privacy Vocabulary (DPV), developed by the W3C Data Privacy Vocabularies and Controls Community Group (DPVCG), enables the creation of machine-readable, interoperable, and standards-based representations for describing the processing of personal data. The group has also published extensions to the DPV to describe specific applications to support legislative requirements such as the EU's GDPR. The DPV fills a crucial niche in the state of the art by providing a vocabulary that can be embedded and used alongside other existing standards such as W3C ODRL, and which can be customised and extended for adapting to specifics of use-cases or domains. This article describes the version 2 iteration of the DPV in terms of its contents, methodology, current adoptions and uses, and future potential. It also describes the relevance and role of DPV in acting as a common vocabulary to support various regulatory (e.g. EU's DGA and AI Act) and community initiatives (e.g. Solid) emerging across the globe.

show abstract

Section: Workmentioning

confidence: 99%

Data Privacy Vocabulary (DPV) - Version 2

Pandit,

Esteves,

Krog

et al. 2024

Preprint

View full text Add to dashboard Cite

show abstract

“…Digita, a Belgium-based startup commercializing Solid solutions (https://www.digita.ai/, accessed on 25 October 2023), also published a research report reflecting on the applicability of the GDPR's requirements to Solid implementations, in particular, regarding data exchange with consent [23]. Recent efforts also promoted a tool to generate and store OAC policies in Solid Pods [38] and evaluated the usage of the Solid Application Interoperability specification to create a User Interface for users to evaluate data requests [39]. Hochstenbach et al are developing RDF Surfaces (https://w3c-cg.github.io/rdfsurfaces/, accessed on 25 October 2023), a Notation3 language that intends to bring first-order logic to the Semantic Web and therefore can be used to "provide enforcement of data policies using logic-based rules" [40].…”

Section: Other Related Workmentioning

confidence: 99%

Is Automated Consent in Solid GDPR-Compliant? An Approach for Obtaining Valid Consent with the Solid Protocol

Florea,

Esteves

2023

Information

View full text Add to dashboard Cite

Personal Information Management Systems (PIMS) are acquiring a prominent role in the data economy by promoting services that help individuals to have more control over the processing of their personal data, in line with the European data protection laws. One of the highlighted solutions in this area is Solid, a new protocol that is decentralizing the storage of data, through the usage of interoperable web standards and semantic vocabularies, to empower its users to have more control over the processing of data by agents and applications. However, to fulfill this vision and gather widespread adoption, Solid needs to be aligned with the law governing the processing of personal data in Europe, the main piece of legislation being the General Data Protection Regulation (GDPR). To assist with this process, we analyze the current efforts to introduce a policy layer in the Solid ecosystem, in particular, related to the challenge of obtaining consent for processing personal data, focusing on the GDPR. Furthermore, we investigate if, in the context of using personal data for biomedical research, consent can be expressed in advance, and discuss the conditions for valid consent and how it can be obtained in this decentralized setting, namely through the matching of privacy preferences, set by the user, with requests for data and whether this can signify informed consent. Finally, we discuss the technical challenges of an implementation that caters to the previously identified legal requirements.

show abstract

“…Digita, a Belgium-based startup commercialising Solid solutions 18 , also published a research report reflecting on the applicability of GDPR's requirements to Solid implementations, in particular, regarding data exchange with consent [19]. Recent efforts also promoted a tool to generate and store OAC policies in Solid Pods [32] and evaluated the usage of the Solid Application Interoperability specification to create a User Interface for users to evaluate data requests [33]. Hochstenbach et al are developing RDF Surfaces 19 , a Notation3 language which intends to bring first-order logic to the Semantic Web and therefore can be used to "provide enforcement of data policies using logic-based rules" [34].…”

Section: Other Related Workmentioning

confidence: 99%

`I Consent to These Terms’: A Legal and Technical Approach for Obtaining Valid Consent in Solid

Florea¹,

Esteves²

2023

Preprint

View full text Add to dashboard Cite

Personal Information Management Systems (PIMS) are acquiring a prominent role in the data economy by promoting products and services that help individuals to manage and control their online identity and thus have more control over the processing of their personal data, in line with the European strategy for data. One of the highlighted solutions in this area is Solid, a new protocol which is decentralising the storage of data, through the usage of interoperable Web standards and semantic vocabularies, to empower its users to have more control over the agents and applications that can access their data. However, to fulfil this vision and gather widespread adoption, Solid needs to be aligned with the law governing the processing of personal data in Europe, the General Data Protection Regulation (GDPR). To assist with this process, we analyse the current efforts to introduce a policy layer in the Solid ecosystem, in particular, related to the challenge of obtaining consent focusing on the GDPR. Furthermore, we investigate if, in the context of using personal data for biomedical research, consent can be expressed in advance, discuss the conditions for valid consent and how it can be obtained in this decentralised setting, namely through the matching of privacy preferences, set by the user, with requests for data and whether this can signify informed consent. Finally, we discuss the technical challenges of an implementation that caters to the previously identified legal requirements.

show abstract

Prototyping an End-User User Interface for the Solid Application Interoperability Specification Under GDPR

Cited by 5 publications

References 14 publications

Data Privacy Vocabulary (DPV) - Version 2

Data Privacy Vocabulary (DPV) - Version 2

Is Automated Consent in Solid GDPR-Compliant? An Approach for Obtaining Valid Consent with the Solid Protocol

`I Consent to These Terms’: A Legal and Technical Approach for Obtaining Valid Consent in Solid

Contact Info

Product

Resources

About