The EU General Data Protection Regulation and its Effects on Designing Assistive Environments

Abstract

On the 25th of May 2018 the EU will start to enforce the General Data Protection Regulation (EU-GDPR) [3]. This new regulation will replace the old Data Protection Act from 1998 and will disrupt common data processing practices. While the new regulation will make it easier to develop systems that comply with data protection laws all over Europe, it will change the way we design technology. With data protection a much more important factor and huge fines for data protection violations, technology vendors will demand systems where data protection was already considered during development. This will force the research community to broaden their perspective and consider how to develop and design systems in a way, that complies with data protection. This paper focuses on some of the more important parts of the GDPR for Assistive Environments. Reading the paper will not solve all your privacy related challenges but will help you to know which questions to ask. CCS CONCEPTS• Security and privacy → Privacy protections; Social aspects of security and privacy; Usability in security and privacy;

What Drives Industry 4.0 Technologies Adoption? Evidence from a SEM-Neural Network Approach in the Context of Vietnamese Firms

“…In addition to facilitating financial and communicationrelated facilitation, governments can create a more appropriate environment for businesses wishing to adopt Industry 4.0 technologies. For example, they can set legal boundaries, encourage the construction of more broadband, and promote education to deal with the industrial revolution 4.0 [114,115].…”

Information security frameworks for assisting GDPR compliance in banking industry

“…The second part is called the territorial scope. The regulation does not only apply to EU companies but also to every company selling into the EU or marketing to EU citizens (Krempel and Beyerer, 2018), this means that applies to companies outside the EU, not just because they have a website accessible to a citizen in the EU, but because compliance is required when offering of goods or services to DS. This regulation has four major focus points, namely, accountability, transparency, protection and reliability.…”

“…One of the main objectives of GDPR is to lead to consistency of DP in EU and this justifies the transition from a Directive to Regulation (Malatras et al, 2017;Randolph, 2020). The regulation challenge the way that companies process data, where our data is a product companies trade and sell (Krempel & Beyerer, 2018). Therefore, since every industry has their own specifications (for instance, financial services or healthcare), and since GDPR is not regulated by a specific sector, it requires significant time effort to understand the specific requirements of each industry (Díaz Díaz, García-Ramos, & García Olalla, 2020;Lopes, Guarda, & Oliveira, 2020;Martin et al, 2019).…”

“…The regulation challenges the way that companies process data, where our data is a product companies trade and sell (Krempel and Beyerer, 2018). Therefore, as every industry has their own specifications (for instance, financial services or healthcare) and, as GDPR is not regulated by a specific sector, it requires significant time effort to understand the specific requirements of each industry (Díaz Díaz et al, 2020;Lopes et al, 2020;Martin et al, 2019).…”

Identity Management and Protection Motivated by the General Data Protection Regulation of the European Union—A Conceptual Framework Based on State-of-the-Art Software Technologies

“…In this paper, we particularly describe and suggest technologies that support the rights of the data subject, i.e., the right of access (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure ("right to be forgotten", Article 17 GDPR), and the right to restriction of processing (Article 18 GDPR). Please note that this paper is an extended version of two other papers published in Proceedings of the 11th International Conference on PErvasive Technologies Related to Assistive Environments (PETRA 2018), Island of Rhodes, Greece, 26-29 June 2017: Erik Krempel analyzed the technical requirements and implications for data processing services according to the GDPR [1]. Pascal Birnstill addressed these requirements by introducing a conceptual framework, which integrates the interaction with state-of-the-art information security and data protection mechanisms into a next-generation privacy-dashboard [2].…”