Skip to main page content

Towards Cross-Provider Analysis of Transparency Information for Data Protection

My Session Status

What:
Panel
When:
10:00 AM, lunes 10 jun 2024 (30 minutos)
Breaks:
Coffee Break at Caffè Rosso (Track I)   10:30 AM to 11:00 AM (30 minutos)
Coffee Break at Venice Eat (Track II, III, IV)   10:30 AM to 11:00 AM (30 minutos)
Where:
Theme:
Scientific Track
Tag:
Research and Innovation
Transparency and accountability are indispensable principles for modern data protection, from both, legal and technical viewpoints. Regulations such as the GDPR, therefore, require specific transparency information to be provided including, e.g., purposes, storage periods, or legal bases for personal data processing. However, it has repeatedly been shown that all too often, this information is practically hidden in legalese privacy policies, hindering data subjects from exercising their rights. 

This paper presents a novel approach to enable large-scale transparency information analysis across service providers, leveraging machine-readable formats and graph data science methods. More specifically, the authors propose a general approach for building a transparency analysis platform (TAP) that is used to identify data transfers empirically, provide evidence-based analyses of sharing clusters of more than 70 real-world data controllers, or even to simulate network dynamics using synthetic transparency information for large-scale data-sharing scenarios. The authors also provide the general approach for advanced transparency information analysis, an open source architecture and implementation in the form of a queryable analysis platform, and versatile analysis examples. These contributions pave the way for more transparent data processing for data subjects, and evidence-based enforcement processes for data protection authorities. Future work can build upon the authors' contributions to gain more insights into so-far hidden data-sharing practices. 

My Session Status

Send Feedback

Session detail
Allows attendees to send short textual feedback to the organizer for a session. This is only sent to the organizer and not the speakers.
To respect data privacy rules, this option only displays profiles of attendees who have chosen to share their profile information publicly.

Changes here will affect all session detail pages