I Agree: Customize your Personal Data Processing with the CoRe User Interface

Olha Drozd; Sabrina Kirrane

doi:10.1007/978-3-030-27813-7_2

I Agree: Customize your Personal Data Processing with the CoRe User Interface

Olha Drozd, Sabrina Kirrane

Institute for Data, Process and Knowledge Management (AE Polleres)

Publication: Chapter in book/Conference proceeding › Contribution to conference proceedings

138 Downloads (Pure)

Abstract

The General Data Protection Regulation (GDPR) requires, except for some predefined scenarios (e.g., contract performance, legal obligations, vital interests, etc.), obtaining consent from the data subjects for the processing of their personal data. Companies that want to process personal data of the European Union (EU) citizens but are located outside the EU also have to comply with the GDPR. Existing mechanisms for obtaining consent involve presenting the data subject with a document where all possible data processing, done by the entire service, is described in very general terms. Such consent is neither specific nor informed. In order to address this challenge, we introduce a consent request (CoRe) user interface (UI) with maximum control over the data processing and a simplified CoRe UI with reduced control options. Our CoRe UI not only gives users more control over the processing of their personal data but also, according to the usability evaluations reported in the paper, improves their comprehension of consent requests.

Original language	English
Title of host publication	Trust, Privacy and Security in Digital Business
Subtitle of host publication	16th International Conference, TrustBus 2019, Linz, Austria, August 26–29, 2019, Proceedings
Editors	Stefanos Gritzalis, Edgar R. Weippl, Sokratis K. Katsikas, Gabriele Anderst-Kotsis, A Min Tjoa, Ismail Khalil
Place of Publication	Cham
Publisher	Springer
Pages	17-32
Edition	1
ISBN (Electronic)	978-3-030-27813-7
ISBN (Print)	978-3-030-27812-0
DOIs	https://doi.org/10.1007/978-3-030-27813-7_2
Publication status	Published - 2019

Publication series

Series	Lecture Notes in Computer Science (LNCS)
Number	11711
ISSN	0302-9743

Austrian Classification of Fields of Science and Technology (ÖFOS)

102
102015 Information systems
502050 Business informatics
505002 Data protection

Access to Document

10.1007/978-3-030-27813-7_2

Trustbus 2019 I Agree Customize your Personal Data Processing with the CoRe User InterfaceAccepted author manuscript, 1.95 MBLicence: Other
Trustbus2019Final published version, 1.95 MBLicence: Other

Check availability

University Library Catalogue

8 Citations
1 Contribution to conference proceedings

I Agree: Customize your Personal Data Processing with the CoRe User Interface
Drozd, O. & Kirrane, S., 2019, Trust, Privacy and Security in Digital Business : 16th International Conference, TrustBus 2019, Linz, Austria, August 26–29, 2019, Proceedings. Gritzalis, S., Weippl, E. R., Katsikas, S. K., Anderst-Kotsis, G., Tjoa, A. M. & Khalil, I. (eds.). 1 ed. Cham: Springer, p. 17-32 (Lecture Notes in Computer Science (LNCS); No. 11711).
Publication: Chapter in book/Conference proceeding › Contribution to conference proceedings

Open Access
File

138 Downloads (Pure)

1 Finished

SPECIAL - Scalable Policy-awarE linked data arChitecture for prIvacy, trAnsparency and compLiance
Kirrane, S. (PI - Project head), Drozd, O. (Researcher), Fernandez Garcia, J. D. (Researcher), Havur, G. (Researcher), Polleres, A. (Researcher) & Spiekermann-Hoff, S. (Researcher)
1/01/17 → 31/12/19
Project: Research funding

Cite this

Drozd, O., & Kirrane, S. (2019). I Agree: Customize your Personal Data Processing with the CoRe User Interface. In S. Gritzalis, E. R. Weippl, S. K. Katsikas, G. Anderst-Kotsis, A. M. Tjoa, & I. Khalil (Eds.), Trust, Privacy and Security in Digital Business : 16th International Conference, TrustBus 2019, Linz, Austria, August 26–29, 2019, Proceedings (1 ed., pp. 17-32). Springer. https://doi.org/10.1007/978-3-030-27813-7_2

Drozd, Olha ; Kirrane, Sabrina. / I Agree: Customize your Personal Data Processing with the CoRe User Interface. Trust, Privacy and Security in Digital Business : 16th International Conference, TrustBus 2019, Linz, Austria, August 26–29, 2019, Proceedings. editor / Stefanos Gritzalis ; Edgar R. Weippl ; Sokratis K. Katsikas ; Gabriele Anderst-Kotsis ; A Min Tjoa ; Ismail Khalil. 1. ed. Cham : Springer, 2019. pp. 17-32 (Lecture Notes in Computer Science (LNCS); No. 11711).

@inproceedings{62f46ac5d5a846aaaeb82220fc61c19a,

title = "I Agree: Customize your Personal Data Processing with the CoRe User Interface",

abstract = "The General Data Protection Regulation (GDPR) requires, except for some predefined scenarios (e.g., contract performance, legal obligations, vital interests, etc.), obtaining consent from the data subjects for the processing of their personal data. Companies that want to process personal data of the European Union (EU) citizens but are located outside the EU also have to comply with the GDPR. Existing mechanisms for obtaining consent involve presenting the data subject with a document where all possible data processing, done by the entire service, is described in very general terms. Such consent is neither specific nor informed. In order to address this challenge, we introduce a consent request (CoRe) user interface (UI) with maximum control over the data processing and a simplified CoRe UI with reduced control options. Our CoRe UI not only gives users more control over the processing of their personal data but also, according to the usability evaluations reported in the paper, improves their comprehension of consent requests.",

author = "Olha Drozd and Sabrina Kirrane",

year = "2019",

doi = "10.1007/978-3-030-27813-7_2",

language = "English",

isbn = "978-3-030-27812-0",

series = "Lecture Notes in Computer Science (LNCS)",

publisher = "Springer",

number = "11711",

pages = "17--32",

editor = "Stefanos Gritzalis and Weippl, {Edgar R.} and Katsikas, {Sokratis K.} and Gabriele Anderst-Kotsis and Tjoa, {A Min} and Ismail Khalil",

booktitle = "Trust, Privacy and Security in Digital Business",

address = "Germany",

edition = "1",

}

Drozd, O & Kirrane, S 2019, I Agree: Customize your Personal Data Processing with the CoRe User Interface. in S Gritzalis, ER Weippl, SK Katsikas, G Anderst-Kotsis, AM Tjoa & I Khalil (eds), Trust, Privacy and Security in Digital Business : 16th International Conference, TrustBus 2019, Linz, Austria, August 26–29, 2019, Proceedings. 1 edn, Springer, Cham, Lecture Notes in Computer Science (LNCS), no. 11711, pp. 17-32. https://doi.org/10.1007/978-3-030-27813-7_2

I Agree: Customize your Personal Data Processing with the CoRe User Interface. / Drozd, Olha; Kirrane, Sabrina.
Trust, Privacy and Security in Digital Business : 16th International Conference, TrustBus 2019, Linz, Austria, August 26–29, 2019, Proceedings. ed. / Stefanos Gritzalis; Edgar R. Weippl; Sokratis K. Katsikas; Gabriele Anderst-Kotsis; A Min Tjoa; Ismail Khalil. 1. ed. Cham: Springer, 2019. p. 17-32 (Lecture Notes in Computer Science (LNCS); No. 11711).

Publication: Chapter in book/Conference proceeding › Contribution to conference proceedings

TY - GEN

T1 - I Agree: Customize your Personal Data Processing with the CoRe User Interface

AU - Drozd, Olha

AU - Kirrane, Sabrina

PY - 2019

Y1 - 2019

N2 - The General Data Protection Regulation (GDPR) requires, except for some predefined scenarios (e.g., contract performance, legal obligations, vital interests, etc.), obtaining consent from the data subjects for the processing of their personal data. Companies that want to process personal data of the European Union (EU) citizens but are located outside the EU also have to comply with the GDPR. Existing mechanisms for obtaining consent involve presenting the data subject with a document where all possible data processing, done by the entire service, is described in very general terms. Such consent is neither specific nor informed. In order to address this challenge, we introduce a consent request (CoRe) user interface (UI) with maximum control over the data processing and a simplified CoRe UI with reduced control options. Our CoRe UI not only gives users more control over the processing of their personal data but also, according to the usability evaluations reported in the paper, improves their comprehension of consent requests.

AB - The General Data Protection Regulation (GDPR) requires, except for some predefined scenarios (e.g., contract performance, legal obligations, vital interests, etc.), obtaining consent from the data subjects for the processing of their personal data. Companies that want to process personal data of the European Union (EU) citizens but are located outside the EU also have to comply with the GDPR. Existing mechanisms for obtaining consent involve presenting the data subject with a document where all possible data processing, done by the entire service, is described in very general terms. Such consent is neither specific nor informed. In order to address this challenge, we introduce a consent request (CoRe) user interface (UI) with maximum control over the data processing and a simplified CoRe UI with reduced control options. Our CoRe UI not only gives users more control over the processing of their personal data but also, according to the usability evaluations reported in the paper, improves their comprehension of consent requests.

U2 - 10.1007/978-3-030-27813-7_2

DO - 10.1007/978-3-030-27813-7_2

M3 - Contribution to conference proceedings

SN - 978-3-030-27812-0

T3 - Lecture Notes in Computer Science (LNCS)

SP - 17

EP - 32

BT - Trust, Privacy and Security in Digital Business

A2 - Gritzalis, Stefanos

A2 - Weippl, Edgar R.

A2 - Katsikas, Sokratis K.

A2 - Anderst-Kotsis, Gabriele

A2 - Tjoa, A Min

A2 - Khalil, Ismail

PB - Springer

CY - Cham

ER -

Drozd O, Kirrane S. I Agree: Customize your Personal Data Processing with the CoRe User Interface. In Gritzalis S, Weippl ER, Katsikas SK, Anderst-Kotsis G, Tjoa AM, Khalil I, editors, Trust, Privacy and Security in Digital Business : 16th International Conference, TrustBus 2019, Linz, Austria, August 26–29, 2019, Proceedings. 1 ed. Cham: Springer. 2019. p. 17-32. (Lecture Notes in Computer Science (LNCS); No. 11711). doi: 10.1007/978-3-030-27813-7_2

I Agree: Customize your Personal Data Processing with the CoRe User Interface

Abstract

Publication series

Austrian Classification of Fields of Science and Technology (ÖFOS)

Access to Document

Check availability

Other versions

I Agree: Customize your Personal Data Processing with the CoRe User Interface

Projects

SPECIAL - Scalable Policy-awarE linked data arChitecture for prIvacy, trAnsparency and compLiance

Cite this