如何钻入数据孤岛:创建一个可免费使用的数据主体访问包数据集
How to Drill Into Silos: Creating a Free-to-Use Dataset of Data Subject Access Packages
AI总结:
本文针对GDPR下数据主体访问请求包(SARPs)实际使用研究不足的问题,提出生成、预处理、发布和使用SARPs的通用方法,并公开了一个包含五家服务、两名用户SARPs的真实数据集,为后续研究提供基准。
摘要:
欧盟的《通用数据保护条例》(GDPR)强化了个人(数据主体)的若干权利。其中之一是数据主体访问由服务方(数据控制者)收集的其个人数据的权利,并辅以新的数据可携带权。基于这些规定,数据控制者有义务提供相应数据,并允许数据主体自行决定如何使用这些数据。然而,迄今为止,数据主体实际使用和利用这些数据的可能性受到严重限制。除其他原因外,这可归因于缺乏针对控制者提供的数据主体访问请求包(SARPs)实际使用的研究。为了开启并促进此类研究,我们概述了一种通用的高层次方法,用于生成、预处理、发布并最终使用来自不同提供者的SARPs。此外,我们构建了一个真实的数据集,包含来自五个服务的两名用户的SARPs。该数据集已公开提供,未来将作为研究和比较SARPs实际可行使用新方法的起点和参考点。
英文摘要:
The European Union's General Data Protection Regulation (GDPR) strengthened several rights for individuals (data subjects). One of these is the data subjects' right to access their personal data being collected by services (data controllers), complemented with a new right to data portability. Based on these, data controllers are obliged to provide respective data and allow data subjects to use them at their own discretion. However, the subjects' possibilities for actually using and harnessing said data are severely limited so far. Among other reasons, this can be attributed to a lack of research dedicated to the actual use of controller-provided subject access request packages (SARPs). To open up and facilitate such research, we outline a general, high-level method for generating, pre-processing, publishing, and finally using SARPs of different providers. Furthermore, we establish a realistic dataset comprising two users' SARPs from five services. This dataset is publicly provided and shall, in the future, serve as a starting and reference point for researching and comparing novel approaches for the practically viable use of SARPs.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。