Suchergebnisse

The Commission's plans to shape Europe's digital future aim at increasing the generation and availability of data. The strategy to achieve this goal is underpinned by the belief that the GDPR generates the trust required to drive more demand for data-driven technologies, as well as more data-driven competition and innovation, an outcome purportedly compatible with the protection of individuals' personal data. This article exposes the flaws in this rationale, noting that the GDPR neither generates trust nor stimulates data-driven competition. Crucially, on the most fundamental level, the protection of personal data and the promotion of consumer welfare in data-driven markets pull in opposite directions. Since the GDPR is both failing to protect individuals against the privacy risks posed by current technologies and serving as a regulatory barrier to entry that favours established dominant platforms, the EU should reconsider the current personal data protection mechanisms to arrive at normatively consistent outcomes capable of affording effective data privacy protection and improving the competitiveness of EU firms.

The COVID19 Pandemic has highlighted our dependence on online services (from government, e-commerce/retail, and entertainment), often hosted over external cloud computing infrastructure. The users of these services interact with a web interface rather than the larger distributed service provisioning chain that can involve an interlinked group of providers. The data and identity of users are often provided to service provider who may share it (or have automatic sharing agreement) with backend services (such as advertising and analytics). We propose the development of compliance-aware cloud application engineering, which is able to improve transparency of personal data use -- particularly with reference to the European GDPR regulation. Key compliance operations and the perceived implementation challenges for the realization of these operations in current cloud infrastructure are outlined.