Hello Vincent,

Both Georg and I have reviewed your current state and goals description and we think it's a great improvement. We are happy to use it as the basis of what's required of Signatu.

If an updated and new illustration is required, we can put that together tomorrow.

Regards
Jon



On Thu, Oct 14, 2021 at 4:37 PM Vincent Roca <vincent.roca@inria.fr> wrote:
Hello Aidan and Jon, all,

I’ve been through your proposed text in 1.2.1.2 Pilot 1 and have many comments.
I won’t list them but basically, I have the feeling it comes from a very classic view of the job of a CMP.
And we cannot say it will be « for the benefit of the car driver and potentially smart city » whereas we see many service providers that are eager to collect and cross this new type of data for their own purposes.


## Comments about the figure: 

- it mixes (i) 3rd party registration with the CMP (steps 1 to 4) which is done once (and updated with a low frequency) and (ii) car/3rd party communications when a driver is looking for a parking lot (steps 5 to 11). The result is confusing.
- I’m not sure about step 5, I’d say it’s in the other direction, and triggered by a driver who wants to park their car.
- I do not like the big (CMP) in the middle, this is an implementation detail (there’s a CM). I’d rather put « Framework » since this is the component that will orchestrate the whole thing and the goal of this project. In practice, a CMP could implement part of it and sell its services, but that’s not what I think we should highlight here.
- this scenario is very « traditional CMP » oriented. I recognize the logic behind the current web consent banners business. Do we want to mimic this logic in our project? At this level, I’m not sure although I’m convinced CMP have a key role.

Could you update the figure accordingly (if you agree)? Thanks.


## Here’s the text I’d propose as a replacement:

Current Status:

The smart car (also called Intelligent Connected Vehicle, ICV) domain is at the center of many profound changes. In particular, the traditional model of a personal car owned by the driver has exploded. This trend is essential as it deeply impacts the user interactions: spending half an hour for fine tuning one’s own car is acceptable, doing the same for a shared one is not.

Then, the advent of smart cars also means that the number of stakeholders involved in personal data collection has significantly increase, with multiple data controllers/processors, from the car manufacturer to various third parties in charge of sub-systems or peripheral services, including the in-vehicle infotainment system. And since a smart car system will keep on changing over the time (like a smartphone through app additions and software updates), the same is true for the stakeholders and their data collection practices.

Finally, new economic models arrive, leveraging on new types of data made available by smart car. Big technology providers are already part of the game (e.g., Google’s Android Automotive operating system, see: https://source.android.com/devices/automotive?hl=en), which is not through hazard. This situation raises major questions, in particular: how to consent for personalized services, when the system learns the driver's habits and records them in the cloud, supposedly for improved services? And one can easily imagine marketing strategies with discounts on smart car prices in exchange of personalized assistance and hints. Where is the boundary between a fair personalized service and user manipulation, and how to interface with the user given the complexity of the services provided? When nobody understands, trust is not possible.


Goals of Euro-CyberPERFECTION pilot:

Pilot 1 addresses all the requirements related to user information, user consent, transfer of consent to data controllers and processors, and accountability. The Framework designed during WP3 and 4, is the cornerstone of this construction, potentially under the control of a CMP which can implement and propose its services to the various stakeholders.

The Framework will propose a rich set of consent services, like contextualized and personalized user information to enable all users to understand the data collection practices, in an inclusive manner, without any prerequisite. Fine grained and advanced consent management is needed too, in particular to enable pre-filled user profiles to be automatically communicated to data controllers. A formal description of both services and user profiles, an automated reasoning and reconciliation service to quickly find and solve incoherencies, are needed to achieve that goal while minimizing user interaction. The user engagement through the framework also needs to be dynamically updated, as smoothly as possible. The Framework will bring transparency, trust and accountability, which is required to build new services to the benefit of all stakeholders, users included.


Cheers,

  Vincent

----
Vincent Roca, PhD/HDR, PRIVATICS team leader, Inria research institute, France
https://privatics.inrialpes.fr/people/roca/

Le 13 oct. 2021 à 19:55, OMahony, Aidan <Aidan.Omahony@dell.com> a écrit :

Hi Soheil,
 
Use case 1 has been elaborated on in section 1, hopefully it is sufficient.
 
Regards,
Aidan
 
From: EU-CONSENTiNG_consortium <eu-consenting_consortium-bounces@alice.wu.ac.at> On Behalf Of Jon Stephansen / Signatu
Sent: 13 October 2021 18:37
To: Soheil Human
Cc: eu-consenting_consortium@alice.wu.ac.at
Subject: Re: [Eu-consenting_consortium] The description of cases
 

[EXTERNAL EMAIL] 

Hello Soheil,
 
Georg and I finished our parts this afternoon. Please review and let us know if anything further is needed.
 
<image001.png>
<image002.png>
 
Regards
Jon
 
 
 
On Wed, Oct 13, 2021 at 6:00 PM Soheil Human <soheil.human@wu.ac.at> wrote:
Dear all,
 
This is a kind reminder that the description of the cases are still missing in the excellence section (1.2.1.2 Use-case Pilots). I’d appreciate it if you kindly finalise them asap (by tonight/tomorrow early morning). 
 
 
Aidan/Merry: the first case / smart cars => Jon/George will kindly update the diagram

@Beatriz/victor: the second case / smart cities

@Jon @George @Rigo: the third case: consent management platform / finalisation
 
 
Thank a lot,
Best,
Soheil 
Institute for Information Systems and New Media,
Vienna University of Economics and Business (WU Wien)
https://nm.wu.ac.at/human [nm.wu.ac.at]
Lecturer
Department of Philosophy, University of Vienna
 
 
Internal Use - Confidential
-- 
EU-CONSENTiNG_consortium mailing list
EU-CONSENTiNG_consortium@alice.wu.ac.at
http://alice.wu.ac.at/mailman/listinfo/eu-consenting_consortium