Hello Victor,
This is a great description, Victor, and I also appreciate the idea of data altruism.
## Regarding the 2nd application domain: Do you want to update the T5.2 accordingly? So far it’s only focusing on the 2nd application domain... I can also do that, tell me.
## My comments for the 1st application domain: - I hope smart cities will also encompass other mobility systems than just smart cars. May be a re-wording of the 1st sentence would reduce the risk of misunderstanding:
• Mobility data. Connected with the Smart Car pilot, but open to other types of personal mobility, commuters will be able to share their location and temporal information on a daily basis for a limited period of time.
- When I read:
[…] (ii) the individual records will be traceable, and as a personalised service, the citizen will gain insight on his own-generated data, getting recommendations on alternative routes or simply obtaining statistics information (time spent on the road, carbon-footprint, etc.); (iii) leveraging identifiable private information after the user’s active consent will enable better citizen profiling and a more efficient city mobility planning.
It is clear that this use-case includes major security and privacy risks that are so far totally ignored. Individual mobility traces are meaningful and can easily be used to infer sensitive information (in the GDPR meaning, attending health centers or places of worship). Even stored in a pseudonymised manner (which will undoubtedly be the case), this is worrisome. We can keep this goal but we need to highlight we’ll consider appropriate security measures and will discuss all of this in the DPIA. I suggest adding:
Great care will be put on the security of non-anonymized mobility data (cases (ii) and (iii) above), given the privacy risks for the citizens. A detailed privacy impact assessment (DPIA) will be conducted prior to the launch of this service.
- Otherwise, can you copy this to the Google Doc document so that we all work on the same version.
Thanks.
Cheers, Vincent
Le 14 oct. 2021 à 09:11, Rigo Wenning rigo@w3.org a écrit :
\o/
Thanks for adding the concept of data altruism, You're my hero :)
--Rigo
On Thu, 2021-10-14 at 08:20 +0200, Víctor Rodríguez Doncel wrote:
I have also provided a description for a wider "Smart Cities" use case. I think we still need a diagram. With this use case, the project supports with technology the concept of "data altruism" as used in the draft Regulation on European Data Governance (Data Governance Act). If Data Spaces are «a collection of FAIR quality data and related resources consumed, produced and provided by identified participants, each respecting societal values and operating within an explicit framework of trust and governance.», the proposal is that the city is the perfect environment for a data space to consume citizen generated data.
-- EU-CONSENTiNG_consortium mailing list EU-CONSENTiNG_consortium@alice.wu.ac.at http://alice.wu.ac.at/mailman/listinfo/eu-consenting_consortium