以消费者为中心的数据控制、跟踪和透明度-立场文件
Consumer Centric Data Control, Tracking and Transparency -- A Position Paper
摘要：
与用户的活动，偏好和服务相关的个人数据被认为是一种有价值的商品，不仅适用于谷歌，亚马逊和苹果等广泛的技术型公司，而且适用于旅游/运输，银行，娱乐和营销行业等传统公司。这导致了更有针对性的和更广泛的个性化服务，在大多数情况下，他们的财务成本最低。用户授权公司收集他/她的个人数据以获得更个性化/有针对性/上下文感知的服务和无忧活动（对于用户）的操作现实被广泛部署。很明显，所收集数据的安全性、完整性和可访问性至关重要。这些特征在物联网（IoT）、自动驾驶汽车和无缝出行时代变得更加根深蒂固。在这份立场文件中，我们研究了用户和组织在处理个人身份信息（PII）时所面临的挑战。此外，我们还详细阐述了《通用数据保护条例》（GDPR）对PII管理的影响。随后，我们将讨论扩展到未来的技术，特别是物联网和集成传输系统，以获得更好的客户体验，以及它们对数据治理和PII管理的影响。最后，我们提出了一个框架，平衡用户的隐私和数据控制与组织的目标，提供高质量的，有针对性的和有效的服务，他们的客户使用“收集的用户数据“。该框架被称为“面向消费者的数据控制和审计”（CODCA），并定义了适用于隐私问题和法律/法规框架的技术。
英文摘要：
Personal data related to a user's activities, preferences and services, is considered to be a valuable commodity not only for a wide range of technology-oriented companies like Google, Amazon and Apple but also for more traditional companies like travel/transport, banking, entertainment and marketing industry. This has resulted in more targeted and to a great extend personalised services for individuals -- in most cases at a minimal financial cost to them. The operational reality upon which a user authorises companies to collect his/her personal data to receive, in return, more personalised/targeted/context-aware services and hassle-free activities (for users) is widely deployed. It becomes evident that the security, integrity and accessibility of the collected data are of paramount importance. These characteristics are becoming more entrenched in the era of Internet-of-Things (IoT), autonomous vehicles and seamless travel. In this position paper, we examine the challenges faced by both users and organisations in dealing with the Personal Identifiable Information (PII). Furthermore, we expand on the implications of the General Data Protection Regulation (GDPR) specifically for the management of the PII. Subsequently, we extend the discussion to future technologies, especially the IoT and integrated transport systems for better customer experience -- and their ramification on the data governance and PII management. Finally, we propose a framework that balances user's privacy and data control with an organisation's objective of delivering quality, targeted and efficient services to their customers using the "collected user data". This framework is referred to as "Consumer Oriented Data Control \& Auditability" (CODCA) and defines the technologies that are adapted to privacy concerns and legal/regulation-frameworks.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
