PROV4ITDaTa: Transparent and direct transferof personal data to personal stores

Mulder, Gertjan De; Meester, Ben De; Heyvaert, Pieter; Taelman, Ruben; Dimou, Anastasia; Verborgh, Ruben

doi:10.1145/3442442.3458608

Cited by 9 publications

(10 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…With semantics technologies, individuals could also transfer and exchange personal data with various entities (e.g., between PDSs). For instance, RML.io (RDF Mapping Language) has been used in a proposed solution that allows individuals to transfer personal data into an interoperable format to their personal data store [ 73 ]. Furthermore, semantic technologies are used to link and organise data in decentralised stores based on authorisation methods for granting access to data.…”

Section: Evolution Of Personal Data Storementioning

confidence: 99%

Personal Data Stores (PDS): A Review

Fallatah

Barhamgi

Perera

2023

Sensors

View full text Add to dashboard Cite

Internet services have collected our personal data since their inception. In the beginning, the personal data collection was uncoordinated and was limited to a few selected data types such as names, ages, birthdays, etc. Due to the widespread use of social media, more and more personal data has been collected by different online services. We increasingly see that Internet of Things (IoT) devices are also being adopted by consumers, making it possible for companies to capture personal data (including very sensitive data) with much less effort and autonomously at a very low cost. Current systems architectures aim to collect, store, and process our personal data in the cloud with very limited control when it comes to giving back to citizens. However, Personal Data Stores (PDS) have been proposed as an alternative architecture where personal data will be stored within households, giving us complete control (self-sovereignty) over our data. This paper surveys the current literature on Personal Data Stores (PDS) that enable individuals to collect, control, store, and manage their data. In particular, we provide a comprehensive review of related concepts and the expected benefits of PDS platforms. Further, we compare and analyse existing PDS platforms in terms of their capabilities and core components. Subsequently, we summarise the major challenges and issues facing PDS platforms’ development and widespread adoption.

show abstract

Section: Evolution Of Personal Data Storementioning

confidence: 99%

Personal Data Stores (PDS): A Review

Fallatah

Barhamgi

Perera

2023

Sensors

View full text Add to dashboard Cite

show abstract

“…Beyond access, research on usage control has also been developed [29,35], with the main goal of creating tools to enforce policies and ensure that data are being used according to the users' preferences after access has been provided. In addition, the exercising of the GDPR's data subject rights, in particular of the Right to Data Portability [36] and the Right of Access [37], has been proven to be facilitated through the usage of Solid. Digita, a Belgium-based startup commercializing Solid solutions (https://www.digita.ai/, accessed on 25 October 2023), also published a research report reflecting on the applicability of the GDPR's requirements to Solid implementations, in particular, regarding data exchange with consent [23].…”

Section: Other Related Workmentioning

confidence: 99%

Is Automated Consent in Solid GDPR-Compliant? An Approach for Obtaining Valid Consent with the Solid Protocol

Florea,

Esteves

2023

Information

View full text Add to dashboard Cite

Personal Information Management Systems (PIMS) are acquiring a prominent role in the data economy by promoting services that help individuals to have more control over the processing of their personal data, in line with the European data protection laws. One of the highlighted solutions in this area is Solid, a new protocol that is decentralizing the storage of data, through the usage of interoperable web standards and semantic vocabularies, to empower its users to have more control over the processing of data by agents and applications. However, to fulfill this vision and gather widespread adoption, Solid needs to be aligned with the law governing the processing of personal data in Europe, the main piece of legislation being the General Data Protection Regulation (GDPR). To assist with this process, we analyze the current efforts to introduce a policy layer in the Solid ecosystem, in particular, related to the challenge of obtaining consent for processing personal data, focusing on the GDPR. Furthermore, we investigate if, in the context of using personal data for biomedical research, consent can be expressed in advance, and discuss the conditions for valid consent and how it can be obtained in this decentralized setting, namely through the matching of privacy preferences, set by the user, with requests for data and whether this can signify informed consent. Finally, we discuss the technical challenges of an implementation that caters to the previously identified legal requirements.

show abstract

“…Solid Pods have been demonstrated to be practical in implementation of GDPR's Right to Data Portability [24] and Right of Access [25]. The legal considerations arising from use of Solid have been explored in the context of use-cases (e.g.…”

Section: State Of the Art Regarding Analysis Applications And Explora...mentioning

confidence: 99%

“…They are not exhaustive, since there can always be new paradigms and methods that change how implementations are deployed and/or function. For relevance, see prior descriptions [12][13][14][15]24] and explorations of legal relevance [6,26,37]. Instead, the categorisation of use-cases focuses on the aims of this article, which are: (1) to identify data governance patterns involving Solid Pods; (2) express use-cases in terms of freedoms and limitations on abilities and actors; (3) to explore issues of trust and security that arise from specific governance patterns; (4) to explore variations in responsibilities and accountability; and (5) to guide how legal compliance investigations should approach the use of Solid .…”

Section: Use-cases Exploring Governance Of Solid Infrastructure and Appsmentioning

confidence: 99%

“…While the GDPR tries to offset this through its right to data portability that requires data to be provided using machine-readable and commonly used formats, the actuality is that this right is not respected correctly [53,54]. Solid Pods provide a convenient method to retrieve and store data using GDPR [24], but without appropriate methods to ensure the data is actually useful and usable to the user and other apps, a Pod becomes limited to the user acting as a controller for the storage of information, while only some or apps with the ability to understand the data are able to benefit from it.…”

Section: Lack Of Effective Control Via Limitations On Data Exploitationmentioning

confidence: 99%

See 1 more Smart Citation

Making Sense of Solid for Data Governance and GDPR

Pandit¹

2022

Preprint

View full text Add to dashboard Cite

Solid is a new radical paradigm based on decentralising data from central organisations to individuals, that seeks to empower individuals to have active control of who and how their data is being used. In order to realise this vision, the use-cases and implementations of Solid also require to be consistent with the relevant privacy and data protection regulations such as the GDPR. However, to do so requires prior understanding of all actors, roles, and processes involved in a use-case, which then need to be aligned with GDPR's concepts to identify relevant obligations and only then investigate their compliance. To assist with this process, we apply the existing standardised terminologies and paradigms from ISO/IEC standards to describe the actors and implementations of Solid as `cloud technologies'. We then investigate the applicability of GDPR's requirements to Solid-based implementations, along with an exploration of how existing issues arising from GDPR enforcement also apply to Solid. Finally, we outline the path forward through specific extensions to Solid's specifications that mitigates known issues and enables the realisation of its benefits.

show abstract

PROV4ITDaTa: Transparent and direct transferof personal data to personal stores

Cited by 9 publications

References 1 publication

Personal Data Stores (PDS): A Review

Personal Data Stores (PDS): A Review

Is Automated Consent in Solid GDPR-Compliant? An Approach for Obtaining Valid Consent with the Solid Protocol

Making Sense of Solid for Data Governance and GDPR

Contact Info

Product

Resources

About