Privacy Technologies and Policy: 9th Annual Privacy Forum, APF 2021, Oslo, Norway, June 17-18, 2021, Proceedings

In: Lecture Notes in Computer Science Ser. v.12703

Abstract

Intro -- Preface -- Organization -- Contents -- I Implementing Personal Data Processing Principles -- The Right to Customization: Conceptualizing the Right to Repair for Informational Privacy -- 1 Introduction -- 2 Limitations of Consent in the Digital Environment -- 3 Privacy by Design as a Stepping Stone for a Right to Customization? -- 3.1 Codifying Privacy by Design -- 3.2 Operationalizing Data Protection by Design and Default -- 3.3 Building Upon Data Protection by Design -- 4 Technology Solutions to Enhance Online Privacy -- 4.1 The Challenges of 'Engineering-Based Regulation' -- 4.2 New Hope for 'Regulation-Based Engineering' -- 5 Right to Customization -- 5.1 Inspired by the Right to Repair: Calling for a Right to Customization -- 5.2 Technological Approaches Enabling the Customization of Consent Variants -- 5.3 Restricting a Right to Customization to 'Reasonable Customizations' -- 6 Discussion and Conclusion -- References -- A Case Study on the Implementation of the Right of Access in Privacy Dashboards -- 1 Introduction -- 2 Related Work -- 2.1 Right of Access -- 2.2 Privacy Dashboards -- 3 Methodology -- 3.1 Selection of Online Services -- 3.2 Sign-Up and Use of Online Services -- 3.3 Examination of the Right of Access -- 4 Results -- 4.1 Information in Privacy Statements -- 4.2 Information in Privacy Dashboards and Exports -- 4.3 Summary of Findings -- 5 Discussion -- 5.1 Information About Purposes, Recipients, and Sources -- 5.2 Information About Categories of Data -- 5.3 Copy of Personal Data -- 6 Ethical Considerations -- 7 Limitations and Outlook -- 8 Conclusion -- References -- Consent Management Platforms Under the GDPR: Processors and/or Controllers? -- 1 Introduction -- 2 When are CMPs Processing Personal Data? -- 2.1 Legal Definitions -- 2.2 Mapping Legal Definitions into Practice -- 3 When are CMPs Data Processors?.