人与GDPR的互动：收集个人数据的实践经验
Human-GDPR Interaction: Practical Experiences of Accessing Personal Data
摘要：
在我们这个以数据为中心的世界里，大多数服务都依赖于收集和使用个人数据。欧盟的《通用数据保护条例》（GDPR）旨在加强个人对其数据的控制，但其实际影响尚不清楚。我们提出了一个10名参与者的研究，其中每个参与者提交4-5个数据访问请求。通过对这些请求的采访和对返回数据的讨论，似乎由于不合规和低质量的响应，GDPR未能达到其目标。参与者发现，他们希望了解供应商的数据实践或利用自己的数据。这导致了不信任的增加，而没有任何主观的权力改善，尽管更透明的提供者确实赢得了更大的信任。我们建议设计更有效，数据包容和开放的政策和数据访问系统，以改善客户关系和个人机构，并且更广泛地使用GDPR权利可以帮助提供问责制并激励提供商改进数据实践。
英文摘要：
In our data-centric world, most services rely on collecting and using personal data. The EU's General Data Protection Regulation (GDPR) aims to enhance individuals' control over their data, but its practical impact is not well understood. We present a 10-participant study, where each participant filed 4-5 data access requests. Through interviews accompanying these requests and discussions scrutinising returned data, it appears that GDPR falls short of its goals due to non-compliance and low-quality responses. Participants found their hopes to understand providers' data practices or harness their own data unmet. This causes increased distrust without any subjective improvement in power, although more transparent providers do earn greater trust. We propose designing more effective, data-inclusive and open policies and data access systems to improve both customer relations and individual agency, and also that wider public use of GDPR rights could help with delivering accountability and motivating providers to improve data practices.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
