The Dark Side of the Knowledge Graph - How Can We Make Knowledge Graphs Trustworthy?

Knowledge Graphs ◽

&#8220;We kill people based on metadata.&#8221; (Gen. Michael V. Hayden, 2014) [1]Over the past fifteen years, a number of persistent identifier (PID) systems have been built to help identify the stakeholders and their outputs in the research process and scholarly communication. Transparency is a fundamental principle of science, but this principle of transparency can be in conflict with the principles of the right to privacy. The development of Knowledge Graphs (KG), however, introduces completely new, and possibly unintended uses of publication metadata that require critical discussion. In particular, when personal data, as is linked with ORCID identifiers, are used and linked with research artefacts and personal information, KGs allow identifying personal as well as collaborative networks of individuals. This ability to analyse KGs may be used in a harmful way. It is a sad fact that in some countries, personal relationships or research in certain subject areas can lead to discrimination, persecution or prison. We must, therefore, become aware of the risks and responsibilities that come with networked data in KGs.&#160;The trustworthiness of PID systems and KGs has so far been discussed in technical and organisational terms. The inclusion of personal data requires a new definition of &#8216;trust&#8217; in the context of PID systems and Knowledge Graphs which should also include ethical aspects and consider the principles of the General Data Protection Regulation.New, trustworthy technological approaches are required to ensure proper maintenance of privacy. As a prerequisite, the level of interoperability between PID needs to be enhanced. Further, new methods and protocols need to be defined which enable secure and prompt cascading update or delete actions of personal data between PID systems as well as knowledge graphs.&#160;Finally, new trustworthiness criteria must be defined which allow the identification of trusted clients for the exchange of personal data instead of the currently practised open data policy which can be in conflict with legislation protecting privacy and personal data.[1] https://www.nybooks.com/daily/2014/05/10/we-kill-people-based-metadata/

Personal Data Protection and Access to Archives in Ukraine: From the National and International Perspective

Atlanti ◽

10.33700/2670-451x.28.2.61-70(2018) ◽

2018 ◽

Vol 28 (2) ◽

pp. 61-70

Author(s):

Maryna Paliienko

Keyword(s):

Data Protection ◽

Personal Information ◽

Public Information ◽

Personal Data ◽

International Perspective ◽

Economic Life ◽

The European Union ◽

Personal Data Protection ◽

The article is devoted to the analysis of the General Data Protection Regulation, which came into force on May 25, 2018, on the territory of the member states of the European Union, in comparison with the legislation on personal data that operates in Ukraine. The following basic concepts such as “personal data”, “personal data bases”, “information protection”, “the right to access to information”, “the right to erasure” are considered. Special attention is paid to the activities of archives in collecting, processing, storing and providing access to documents that contain personal information. It is analyzed the Laws of Ukraine “On Information”, “On Protection of Personal Data”, “On Access to Public Information”, “On the National Archival Fond and Archival Institutions”. It has been pointed out that the GDPR has very important value for European socio-political and economic life, for working out data protection standards and a new international privacy protection framework.

Can the GDPR and Freedom of Expression Coexist?

AJIL Unbound ◽

10.1017/aju.2019.77 ◽

2020 ◽

Vol 114 ◽

pp. 31-34

Author(s):

Nani Jansen Reventlow

Keyword(s):

Data Protection ◽

Data Privacy ◽

Freedom Of Expression ◽

Personal Information ◽

Personal Data ◽

Raw Material ◽

Individual Data ◽

General Data ◽

The General Data Protection Regulation (GDPR) imposes important transparency and accountability requirements on different actors who process personal data. This is great news for the protection of individual data privacy. However, given that “personal information and human stories are the raw material of journalism,” what does the GDPR mean for freedom of expression and especially for journalistic activity? This essay argues that, although EU states seem to have taken their data protection obligations under the GDPR seriously, efforts to balance this against the right to freedom of expression have been more uneven. The essay concludes that it is of key importance to ensure that the GDPR's safeguards for data privacy do not compromise a free press.

Advances in Human and Social Aspects of Technology - Human Rights and Risks in the Digital Era ◽

The Right to Privacy and the Protection of Personal Data in a Digital Era and the Age of Information

10.4018/978-1-4666-0891-7.ch004 ◽

2012 ◽

pp. 34-45

Author(s):

William Bülow ◽

Misse Wester

Keyword(s):

Empirical Evidence ◽

Personal Information ◽

Personal Data ◽

Modern Society ◽

Right To Privacy ◽

Policy Makers ◽

The Right To Privacy ◽

Digital Era ◽

The Individual ◽

As information technology is becoming an integral part of modern society, there is a growing concern that too much data containing personal information is stored by different actors in society and that this could potentially be harmful for the individual. The aim of this contribution is to show how the extended use of ICT can affect the individual’s right to privacy and how the public perceives risks to privacy. Three points are raised in this chapter: first, if privacy is important from a philosophical perspective, how is this demonstrated by empirical evidence? Do individuals trust the different actors that control their personal information, and is there a consensus that privacy can and should be compromised in order to reach another value? Second, if compromises in privacy are warranted by increased safety, is this increased security supported by empirical evidence? Third, the authors will argue that privacy can indeed be a means to increase the safety of citizens and that the moral burden of ensuring and protecting privacy is a matter for policy makers, not individuals. In conclusion, the authors suggest that more nuanced discussion on the concepts of privacy and safety should be acknowledged and the importance of privacy must be seen as an important objective in the development and structure of ICT uses.

Privacy in the 21st Century

Standards and Standardization ◽

10.4018/978-1-4666-8111-8.ch075 ◽

2015 ◽

pp. 1638-1652

Author(s):

Panagiotis Kitsos ◽

Aikaterini Yannoukakou

Keyword(s):

Public Interest ◽

Focal Point ◽

Personal Information ◽

Open Data ◽

Personal Data ◽

Common Denominator ◽

Patriot Act ◽

The Public ◽

Personal Data Protection ◽

The Common

The events of 9/11 along with the bombarding in Madrid and London forced governments to resort to new structures of privacy safeguarding and electronic surveillance under the common denominator of terrorism and transnational crime fighting. Legislation as US PATRIOT Act and EU Data Retention Directive altered fundamentally the collection, processing and sharing methods of personal data, while it granted increased powers to police and law enforcement authorities concerning their jurisdiction in obtaining and processing personal information to an excessive degree. As an aftermath of the resulted opacity and the public outcry, a shift is recorded during the last years towards a more open governance by the implementation of open data and cloud computing practices in order to enhance transparency and accountability from the side of governments, restore the trust between the State and the citizens, and amplify the citizens' participation to the decision-making procedures. However, privacy and personal data protection are major issues in all occasions and, thus, must be safeguarded without sacrificing national security and public interest on one hand, but without crossing the thin line between protection and infringement on the other. Where this delicate balance stands, is the focal point of this paper trying to demonstrate that it is better to be cautious with open practices than hostage of clandestine practices.

Use of Open Data in the Development of the Digital Economy in the Knowledge Society in the Era of Globalization

SHS Web of Conferences ◽

10.1051/shsconf/20207403008 ◽

2020 ◽

Vol 74 ◽

pp. 03008

Author(s):

Katarina Repkova Stofkova ◽

Jana Stofkova

Keyword(s):

Slovak Republic ◽

Knowledge Society ◽

Open Data ◽

Personal Data ◽

International Study ◽

Digital Economy ◽

Control Mechanisms ◽

New Information ◽

The World ◽

Process of electronization is one of the milestones in the development of technological processes that leads to an improvement in the quality of life of citizens. The process of electronization is taking place all over the world. From the world leaders in the field of digitization of processes and data it is necessary to solve many things in the Slovak Republic, the development is in the right direction. The concept of national disclosure and delivery of important information is being addressed. The implementation of new information communication technologies and the introduction of processes have improved the awareness of citizens and businesses. By introducing open data into datasets, it also helps businesses to perform their activities more effectively. Open data contains non-personal data that is accessible to all and can be freely used, reused and distributed by everyone. This means that a certain type of data is available to everyone, in order to use and publish it at their own discretion, without restricting copyright, patents, or other control mechanisms. Improving aspects include raising awareness among citizens and businesses, improving the content of institutions providing such data, and so on. As part of the International Digital Economy and Society International Study, as well as the National Digital Economy and Society Index, a number of researches have been carried out that describe information and digitization. The paper lists the results of the survey focused on the ongoing development of the digital services.

RFID Technology and its Impact on Privacy

Socioeconomic and Legal Implications of Electronic Intrusion ◽

10.4018/978-1-60566-204-6.ch005 ◽

2009 ◽

pp. 89-107 ◽

Cited By ~ 1

Author(s):

Tatiana-Eleni Sinodinou

Keyword(s):

Data Processing ◽

Personal Information ◽

Personal Data ◽

Legal Framework ◽

Special Focus ◽

Information Transparency ◽

Rfid Tag ◽

Rfid System ◽

The Individual ◽

The present chapter explores privacy issues posed by the use of RFID systems and applications. The existing legal framework for data protection is analyzed in order to discover how general privacy safeguarding principles should be applied in the case of RFIDs, with special focus on the main areas which are going to experience widespread use of such applications. The structure of the chapter is based on a chronological order which follows the consecutive phases of contact and interaction between the individual and the RFID tag. The implementation of a tag to a product or in the human body establishes the first point of contact of the individual with the RFID tag. This stage of data processing is examined in the first part of the chapter. In more particular, this part deals with the application of general principles of fair processing, such as information transparency, the debate about the necessity to require the prior consent of the individual (possible opt-in and opt-out solutions) and the precondition of a clearly defined purpose of the data processing. The symbiosis of the person with the tag is examined in the second part. Indeed, privacy concerns are equally significant during the phase of processing of personal information, even if processing is conducted lawfully, either based on the legal ground of the individual’s consent or justified on another legal basis. The requirement of data quality and the obligation to secure the RFID system against unauthorized interceptions or alterations of data by third parties constitute essential guarantees of fair data processing. Privacy protection in the activation phase of the tag is also ensured by the obligation to inform the tagged individual every time a reading takes place and by the right to verify the accuracy of the tag data, whether stored from the beginning or added at a later date. Finally, the last part of the chapter examines the legal regime of separation between the person and the tag. This phase refers to the termination of the processing either by act of the data subject or by act of the RFID system controller. The focus is given to the exercise of the right to object to the processing of personal data through RFID devices. In this context practical solutions, such as the “tag kill” or “tag sleep” command should be taken into consideration in order to the make the exercise of the right to object feasible.

Introducing Key Elements Regarding Access to Personal Data for Scientific Research in the Perspective of Developing Innovative Medicines

European Journal of Health Law ◽

10.1163/15718093-bja10011 ◽

2020 ◽

Vol 27 (3) ◽

pp. 195-212

Author(s):

Jean Herveg ◽

Annagrazia Altavilla

Keyword(s):

Data Protection ◽

Open Data ◽

Scientific Research ◽

Personal Data ◽

Private Life ◽

Fundamental Rights ◽

Future Research ◽

Public Sector Information ◽

General Data

Abstract This article aims at opening discussions and promoting future research about key elements that should be taken into account when considering new ways to organise access to personal data for scientific research in the perspective of developing innovative medicines. It provides an overview of these key elements: the different ways of accessing data, the theory of the essential facilities, the Regulation on the Free Flow of Non-personal Data, the Directive on Open Data and the re-use of public sector information, and the General Data Protection Regulation (GDPR) rules on accessing personal data for scientific research. In the perspective of fostering research, promoting innovative medicines, and having all the raw data centralised in big databases localised in Europe, we suggest to further investigate the possibility to find acceptable and balanced solutions with complete respect of fundamental rights, as well as for private life and data protection.

Automatic de-identification of data download packages

Data Science ◽

10.3233/ds-210035 ◽

2021 ◽

pp. 1-20

Author(s):

Laura Boeschoten ◽

Roos Voorvaart ◽

Ruben Van Den Goorbergh ◽

Casper Kaandorp ◽

Martine De Vos

Keyword(s):

Private Information ◽

Personal Data ◽

Identification Algorithm ◽

Social Scientists ◽

Public And Private ◽

File Formats ◽

File Structures ◽

The Right ◽

Textual Content

The General Data Protection Regulation (GDPR) grants all natural persons the right to access their personal data if this is being processed by data controllers. The data controllers are obliged to share the data in an electronic format and often provide the data in a so called Data Download Package (DDP). These DDPs contain all data collected by public and private entities during the course of a citizens’ digital life and form a treasure trove for social scientists. However, the data can be deeply private. To protect the privacy of research participants while using their DDPs for scientific research, we developed a de-identification algorithm that is able to handle typical characteristics of DDPs. These include regularly changing file structures, visual and textual content, differing file formats, differing file structures and private information like usernames. We investigate the performance of the algorithm and illustrate how the algorithm can be tailored towards specific DDP structures.

Parental Access to Children's Raw Genomic Data in Canada: Legal Rights and Professional Responsibility

Frontiers in Genetics ◽

10.3389/fgene.2021.535340 ◽

2021 ◽

Vol 12 ◽

Author(s):

Michael J. S. Beauvais ◽

Adrian M. Thorogood ◽

Michael J. Szego ◽

Karine Sénécal ◽

M'an H. Zawati ◽

...

Keyword(s):

Healthcare Professionals ◽

Personal Information ◽

Personal Data ◽

Genomic Data ◽

Public Institution ◽

Best Interests ◽

Legal Rights ◽

The European Union ◽

The Right ◽

Right Of Access

Children with rare and common diseases now undergo whole genome sequencing (WGS) in clinical and research contexts. Parents sometimes request access to their child's raw genomic data, to pursue their own analyses or for onward sharing with health professionals and researchers. These requests raise legal, ethical, and practical issues for professionals and parents alike. The advent of widespread WGS in pediatrics occurs in a context where privacy and data protection law remains focused on giving individuals control-oriented rights with respect to their personal information. Acting in their child's stead and in their best interests, parents are generally the ones who will be exercising these informational rights on behalf of the child. In this paper, we map the contours of parental authority to access their child's raw genomic data. We consider three use cases: hospital-based researchers, healthcare professionals acting in a clinical-diagnostic capacity, and “pure” academic researchers at a public institution. Our research seeks to answer two principal questions: Do parents have a right of access to their child's raw WGS data? If so, what are the limits of this right? Primarily focused on the laws of Ontario, Canada's most populous province, with a secondary focus on Canada's three other most populous provinces (Quebec, British Columbia, and Alberta) and the European Union, our principal findings include (1) parents have a general right of access to information about their children, but that the access right is more capacious in the clinical context than in the research context; (2) the right of access extends to personal data in raw form; (3) a consideration of the best interests of the child may materially limit the legal rights of parents to access data about their child; (4) the ability to exercise rights of access are transferred from parents to children when they gain decision-making capacity in both the clinical and research contexts, but with more nuance in the former. With these findings in mind, we argue that professional guidelines, which are concerned with obligations to interpret and return results, may assist in furthering a child's best interests in the context of legal access rights. We conclude by crafting recommendations for healthcare professionals in the clinical and research contexts when faced with a parental request for a child's raw genomic data.

Uchybienie przepisom o ochronie danych osobowych jako naruszenie dobra osobistego – analiza na przykładzie orzecznictwa Sądu Najwyższego

Studia Prawnoustrojowe ◽

10.31648/sp.5333 ◽

2019 ◽

pp. 245-259

Author(s):

Bernard Łukanko

Keyword(s):

Data Protection ◽

Personal Data ◽

Right To Privacy ◽

Professional Literature ◽

Personal Data Protection ◽

The Right To Privacy ◽

General Data ◽

The Right ◽

Personal Interests

The study is concerned with the issue of mutual relationship between the failure to comply with the laws on personal data protection and regulations relating to the protection of personal interests, including in particular the right to privacy. The article presents the views held by the Supreme Court with respect to the possibility of considering acts infringing upon the provisions of the Personal Data Protection Act of 1997 (after 24 May 2018) and of the General Data Protection Regulation (after 25 May 2018) as violation of personal interests, such as the right to privacy. The author shared the view of the case law stating that, if in specifc circumstances the processing of personal data violates the right to privacy, the party concerned may seek remedy on the grounds of Articles 23 and 24 of the Polish Civil Code. This position isalso relevant after the entry into force of the GDPR which, in a comprehensive and exhaustive manner, directly applicable in all Member States, regulates the issue of liability under civil law for infringements of the provisions of the Regulation, however, according to the position expressed in professional literature, it does not exclude the concurrence of claims and violation of the provisions on the protection of personal interests caused by a specifc event. In case of improper processing of personal data, the remedies available under domestic law on the protection of personal interests may be of particular importance outside the subject matter scope of the GDPR applicability.