Projects per year
The General Data Protection Regulation (GDPR) requires, except for some predefined scenarios (e.g., contract performance, legal obligations, vital interests, etc.), obtaining consent from the data subjects for the processing of their personal data. Companies that want to process personal data of the European Union (EU) citizens but are located outside the EU also have to comply with the GDPR. Existing mechanisms for obtaining consent involve presenting the data subject with a document where all possible data processing, done by the entire service, is described in very general terms. Such consent is neither specific nor informed. In order to address this challenge, we introduce a consent request (CoRe) user interface (UI) with maximum control over the data processing and a simplified CoRe UI with reduced control options. Our CoRe UI not only gives users more control over the processing of their personal data but also, according to the usability evaluations reported in the paper, improves their comprehension of consent requests.
|Title of host publication||Proceedings of the 16th International Conference on Trust, Privacy and Security in Digital Business (TrustBus 2019)|
|Place of Publication||Austria|
|Publication status||Published - 2019|
Austrian Classification of Fields of Science and Technology (ÖFOS)
- 102015 Information systems
- 502050 Business informatics
- 505002 Data protection
- 1 Finished
SPECIAL - Scalable Policy-awarE linked data arChitecture for prIvacy, trAnsparency and compLiance
Kirrane, S., Drozd, O., Fernandez Garcia, J. D., Havur, G., Polleres, A. & Spiekermann-Hoff, S.
1/01/17 → 31/12/19
Project: Research funding