Operationalizing the Legal Principle of Data Minimization for Personalization

Abstract

Article 5(1)(c) of the European Union's General Data Protection Regulation (GDPR) requires that "personal data shall be [...] adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed ('data minimisation')". To date, the legal and computational definitions of 'purpose limitation' and 'data minimization' remain largely unclear. In particular, the interpretation of these principles is an open issue for information access systems that optimize for user experience through personalization and do not strictly require personal data collection for the delivery of basic service.In this paper, we identify a lack of a homogeneous interpretation of the data minimization principle and explore two operational definitions applicable in the context of personalization. The focus of our empirical study in the domain of recommender systems is on providing foundational insights about the (i) feasibility of different data minimization definitions, (ii) robustness of different recommendation algorithms to minimization, and (iii) performance of different minimization strategies.We find that the performance decrease incurred by data minimization might not be substantial, but that it might disparately impact different users-a finding which has implications for the viability of different formal minimization definitions. Overall, our analysis uncovers the complexities of the data minimization problem in the context of personalization and maps the remaining computational and regulatory challenges.

The Theory, Practice, and Ethical Challenges of Designing a Diversity-Aware Platform for Social Relations

“…At the end of the experiment (of at least two weeks), a questionnaire is distributed to student participants in order to investigate their experience as users of the application. Following the data minimization principle (Biega et al 2020), only GPS data is collected in order to implement a specific feature in the application.…”

The Theory, Practice, and Ethical Challenges of Designing a Diversity-Aware Platform for Social Relations

“…At the end of the experiment (of at least two weeks), a questionnaire is distributed to student participants in order to investigate their experience as users of the application. Following the data minimization principle [7], only GPS data is collected in order to implement a specific feature in the application.…”

Fair Inputs and Fair Outputs: The Incompatibility of Fairness in Privacy and Accuracy

“…Our proposed need-to-know property follows the similar idea: the system should use the minimum amount of information from users to provide a certain level of quality of service. In a concurrent work Biega et al [5] define the need to know principle for computational applications and tie it to concepts in data protection laws. Cost-sensitive learning and privacy as cost.…”

“…In this paper we assume a finite sample model using the given dataset. Thus our setting is an instance of transductive learning as opposed to inductive learning in which the dataset is a sample from some distribution 5. This is an extension of the Bayes optimal classifier to the settings where any subset of features can be used to make a prediction.…”