An E-government Interoperability Platform Supporting Personal Data Protection Regulations

Public agencies are increasingly required to collaborate with each other in order to provide high-quality e-government services. This collaboration is usually based on the service-oriented approach and supported by interoperability platforms. Such platforms are specialized middleware-based infrastructures enabling the provision, discovery and invocation of interoperable software services. In turn, given that personal data handled by governments are often very sensitive, most governments have developed some sort of legislation focusing on data protection. This paper proposes solutions for monitoring and enforcing data protection laws within an E-government Interoperability Platform. In particular, the proposal addresses requirements posed by the Uruguayan Data Protection Law and the Uruguayan E-government Platform, although it can also be applied in similar scenarios. The solutions are based on well-known integration mechanisms (e.g. Enterprise Service Bus) as well as recognized security standards (e.g. eXtensible Access Control Markup Language) and were completely prototyped leveraging the SwitchYard ESB product.

Decentralized systems for the protection and portability of personal data

The General Data Protection Regulation (GDPR) has been designed to help promote a view in favor of the interests of individuals instead of large corporations. However, there is the need of more dedicated technologies that can help companies comply with GDPR while enabling people to exercise their rights. We argue that such a dedicated solution must address two main issues: the need for more transparency towards individuals regarding the management of their personal information and their often hindered ability to access and make interoperable personal data in a way that the exercise of one's rights would result in straightforward. We aim to provide a system that helps to push personal data management towards the individual's control, i.e., a personal information management system (PIMS). By using distributed storage and decentralized computing networks to control online services, users' personal information could be shifted towards those directly concerned, i.e., the data subjects. The use of Distributed Ledger Technologies (DLTs) and Decentralized File Storage (DFS) as an implementation of decentralized systems is of paramount importance in this case. The structure of this dissertation follows an incremental approach to describing a set of decentralized systems and models that revolves around personal data and their subjects. Each chapter of this dissertation builds up the previous one and discusses the technical implementation of a system and its relation with the corresponding regulations. We refer to the EU regulatory framework, including GDPR, eIDAS, and Data Governance Act, to build our final system architecture's functional and non-functional drivers. In our PIMS design, personal data is kept in a Personal Data Space (PDS) consisting of encrypted personal data referring to the subject stored in a DFS. On top of that, a network of authorization servers acts as a data intermediary to provide access to potential data recipients through smart contracts.

Neo-commodification of persons: exploitation of personal data and impact on the sharing economy

The notion of commodification is a fascinating one. It entails many facets, ranging from subjective debates on desirability of commodification to in depth economic analyses of objects of value and their corresponding markets. Commodity theory is therefore not just defined by a single debate, but spans a plethora of different discussions. This thesis maps and situates those theories and debates and selects one specific strain to investigate further. This thesis argues that commodity theory in its optima forma deals with the investigation into what sets commodities apart from non-commodities. It proceeds to examine the many given answers to this question by scholars ranging from the mid 1800’s to the late 2000’s. Ultimately, commodification is defined as a process in which an object becomes an element of the total wealth of societies in which the capitalist mode of production prevails. In doing so, objects must meet observables, or indicia, of commodification provided by commodity theories. Problems arise when objects are clearly part of the total wealth in societies without meeting established commodity indicia. In such cases, objects are part of the total wealth of a society without counting as a commodity. This thesis examines this phenomenon in relation to the novel commodities of audiences and data. It explains how these non-commodities (according to classical theories) are still essential elements of industry. The thesis then takes a deep dive into commodity theory using the theory on the construction of social reality by John Searle.

Sistema de recolha e execução de rotas (GPS) e partilha em rede social RecGPS

A popularização dos PDA (Personal Data Assistant ) originou um aumento das suas capacidades e funcionalidades, nomeadamente a inclusão de sistemas de posicionamento global(GPS - Global Positioning System ). Tendo como objectivo o aproveitamento das capacidades deste tipo de dispositivos surge o sistema RecGPS. O RecGPS é um pacote de aplicações para recolha, gestão, análise e partilha de percursos (rotas). A recolha e armazenamento das rotas é efectuada através de uma aplicação instalada no PDA com recurso à funcionalidade GPS do mesmo. A gestão e análise das rotas pode ser efectuada nas aplicações PDA e web, sendo a partilha efectuada através de aplicação web (portal/rede social). A colecção de rotas tanto pode ser armazenada no dispositivo como através da aplicação web. Ao nível do PDA para além da criação de novas rotas é possível executar as rotas existentes, efectuando recolha de dados que permitem a comparação com as execuções anteriores. A rede social permite a partilha de rotas e fomenta a discussão dos utilizadores sobre as mesmas. Para permitir a veri cação das capacidades da aplicação para PDA são efectuados testes. Tendo por base um conjunto de amostras são obtidos resultados através da aplicação e efectuada a sua comparação.

Privacy and Data Protection in Elderly Healthcare: Threats and Legal Warranties

The progressive aging of the population requires new kinds of social and medical intervention and the availability of different services provided to the elder population. New applications have been developed and some services are now provided at home, allowing the older people to stay home instead of having to stay in hospitals. But an adequate response to the needs of the users will imply a high percentage of use of personal data and information, including the building up and maintenance of user profiles, feeding the systems with the data and information needed for a proactive intervention in scheduling of events in which the user may be involved. Fundamental Rights may be at stake, so a legal analysis must also be considered.

Sistema de compras assistido por PDA com componente de gestão

A informação é, hoje em dia, um dos motores da actividade humana. As grandes superfícies comerciais baseiam o seu funcionamento, estratégia e modelo de negócio, na informação. O modo como essa informação é recolhida depende do sistema em utilização, seja pelas caixas tradicionais de supermercado seja pelos sistemas de compra online. Este projecto consiste no desenvolvimento de um sistema de compras, assistido por PDA (Personal Digital Assistant), que gere informação conducente ao estudo do comportamento de clientes de superfícies comercias. O sistema possui duas aplicações: uma usada pelo cliente e outra pelo gestor da superfície comercial. A aplicação do cliente permite efectuar compras na superfície comercial através do uso de PDA. Para além de tornar o processo de compra mais confortável e eficiente, permite a recolha de informação, que será gerida e processada pela aplicação criada para o gestor.

Transmisión de datos PDA - servidor web

En aquest projecte es visualitza la trajectòria d'un vehicle (aeri o terrestre) en una pàgina web. Per això es disposa d'una PDA (Personal Digital Assistant), en la qual es té informació actualitzada de la posició i de la velocitat d’aquest vehicle. Aquestes dades són obtingudes d'un sistema que combina la navegació inercial i el GPS (Global Position System), els quals estimen de manera precisa la trajectòria del vehicle. A fi d'oferir una visualització en temps real, versàtil, accessible i amigable a l'usuari de la trajectòria del vehicle, s'ha desenvolupat un sistema de visualització on-line que proporciona un millor rendiment en comparació amb la qual es venia fent en la PDA. Per a dur-lo a terme s'implementa una interfície d'usuari en la PDA que ens permet transmetre aquesta informació via WIFI a la pàgina web, d'igual forma al servidor web es crea una interfície que interpreta i gestiona aquestes dades per a posteriorment ser graficats a Google Maps.

Gestiona't : aplicació en J2EE per a la gestió personal del treball

Aquest treball final de carrera es basa en l'anàlisi, disseny i implementació d'una solució per a la autogestió dels recursos humans de l'empresa; és a dir, per tal que tots els treballadors de la mateixa puguin gestionar tot el relacionat amb el seu entorn de treball (les seves dades personals, el seu temps de treball, les tasques relacionades amb el seu càrrec, la sol·licitud de vacances...). Paral·lelament, aquest treball estudia la viabilitat d'emprar com a eina de treball professional diària l'IDE Eclipse amb la integració del plug-in d'Exadel Studio per a l'ús del framework Struts.

Aplicació de gestió de rutes d'operari i incidències d'instal·lacions sobre PDA amb sincronització remota

Una empresa destinada al sector de la informàtica vol crear un nou producte basat en PDA (Personal Digital Assistant), per tal d’oferir noves prestacions als clients actuals, així com poder ampliar la cartera de clients. El producte està destinat a clients de servei tècnic d’instal·lacions (gas, llum, aigua...), els quals tenen diferents tècnics que, basant-se en una ruta establerta, realitzen tasques de manteniment i reparació de les diferents instal·lacions dels clients. Utilitzant la tecnologia .NET amb l’entorn de desenvolupament Visual Studio 2005 i base de dades SQL Server 2005, s’ha creat una aplicació per a PDA que permeti la informatització de tots els processos de gestió de rutes per part dels tècnics

Das geplante "Datenschutz-Gesetz": eine Bedrohung der medizinisch-epidemiologischen Forschung in der Schweiz? [The proposed law on safeguarding of data: a threat to medical-epidemiologic research in Switzerland?].

The draft of the new law on the confidentiality of personal data severely curtails medical and epidemiological research. This might be detrimental and dangerous to public health. The project therefore has to be amended.

Transparent Network Interfaces to Mobile Peer-to-Peer Environment

The fact that most of new Personal Data Assistant (PDA) devices and smartphones have the ability to communicate via different wireless technologies has made several new applications possible. While traditional network model is based on the idea of static hosts, mobile devices can create decentralized, self-organizing ad-hoc networks and act as peers in the network. This kind of adapting network is suitable for mobile devices which can freely join and leave the networks. Because several different wireless communication technologies are involved, flexible changing of the networking technology must be handled in order to enable seamless communication between these networks. This thesis presents a transparent network interface to mobile Peer-to-Peer environment which is named as Virtual PeerHood. Different wireless technologies and aspects of providing a seamless connectivity between these technologies are explored. The result is a middleware platform for mobile Peer-to-Peer environment, capable of handling several networking technologies.

Anonymisation, Deanonymisation and Data Management

Speaker: Dr Kieron O'Hara Organiser: Time: 04/02/2015 11:00-11:45 Location: B32/3077 Abstract In order to reap the potential societal benefits of big and broad data, it is essential to share and link personal data. However, privacy and data protection considerations mean that, to be shared, personal data must be anonymised, so that the data subject cannot be identified from the data. Anonymisation is therefore a vital tool for data sharing, but deanonymisation, or reidentification, is always possible given sufficient auxiliary information (and as the amount of data grows, both in terms of creation, and in terms of availability in the public domain, the probability of finding such auxiliary information grows). This creates issues for the management of anonymisation, which are exacerbated not only by uncertainties about the future, but also by misunderstandings about the process(es) of anonymisation. This talk discusses these issues in relation to privacy, risk management and security, reports on recent theoretical tools created by the UKAN network of statistics professionals (on which the author is one of the leads), and asks how long anonymisation can remain a useful tool, and what might replace it.

Aplicació de gestió de rutes d'operari i incidències d'instal·lacions sobre PDA amb sincronització remota

Una empresa destinada al sector de la informàtica vol crear un nou producte basat en PDA (Personal Digital Assistant), per tal d’oferir noves prestacions als clients actuals, així com poder ampliar la cartera de clients. El producte està destinat a clients de servei tècnic d’instal·lacions (gas, llum, aigua...), els quals tenen diferents tècnics que, basant-se en una ruta establerta, realitzen tasques de manteniment i reparació de les diferents instal·lacions dels clients. Utilitzant la tecnologia .NET amb l’entorn de desenvolupament Visual Studio 2005 i base de dades SQL Server 2005, s’ha creat una aplicació per a PDA que permeti la informatització de tots els processos de gestió de rutes per part dels tècnics

Data protection at the cost of economic growth? ECRI Commentary No. 11, 16 November 2012

The Data Protection Regulation proposed by the European Commission contains important elements to facilitate and secure personal data flows within the Single Market. A harmonised level of protection of individual data is an important objective and all stakeholders have generally welcomed this basic principle. However, when putting the regulation proposal in the complex context in which it is to be implemented, some important issues are revealed. The proposal dictates how data is to be used, regardless of the operational context. It is generally thought to have been influenced by concerns over social networking. This approach implies protection of data rather than protection of privacy and can hardly lead to more flexible instruments for global data flows.

Online data processing consent under EU law: a theoretical framework and empirical evidence from the UK

This article analyses the results of an empirical study on the 200 most popular UK-based websites in various sectors of e-commerce services. The study provides empirical evidence on unlawful processing of personal data. It comprises a survey on the methods used to seek and obtain consent to process personal data for direct marketing and advertisement, and a test on the frequency of unsolicited commercial emails (UCE) received by customers as a consequence of their registration and submission of personal information to a website. Part One of the article presents a conceptual and normative account of data protection, with a discussion of the ethical values on which EU data protection law is grounded and an outline of the elements that must be in place to seek and obtain valid consent to process personal data. Part Two discusses the outcomes of the empirical study, which unveils a significant departure between EU legal theory and practice in data protection. Although a wide majority of the websites in the sample (69%) has in place a system to ask separate consent for engaging in marketing activities, it is only 16.2% of them that obtain a consent which is valid under the standards set by EU law. The test with UCE shows that only one out of three websites (30.5%) respects the will of the data subject not to receive commercial communications. It also shows that, when submitting personal data in online transactions, there is a high probability (50%) of incurring in a website that will ignore the refusal of consent and will send UCE. The article concludes that there is severe lack of compliance of UK online service providers with essential requirements of data protection law. In this respect, it suggests that there is inappropriate standard of implementation, information and supervision by the UK authorities, especially in light of the clarifications provided at EU level.