Realising the right to data portability for the domestic Internet of things

Urquhart, Lachlan; Sailaja, Neelima; McAuley, Derek

Abstract

Bringing the new right to data portability (RTDP) from an abstract legal provision in Article 20 of the EU General Data Protection Regulation (GDPR) 2016 into practice requires a greater role for the IT design community. Simply put, the RTDP seeks to empower users by giving them greater control over their personal data, enabling them to both acquire their data and then move it around, for example to a different data controller. In this paper, we focus on how IT designers can use Privacy by Design (PbD) approaches to respond to these RTDP obligations. We are particularly interested in how the RTDP plays out for the technological context of the domestic Internet of things (IoT). By examining the legal, commercial and technical landscape around the RTDP, we can begin to unpack the practical roadblocks and opportunities ahead in implementing the right in practice.

Citation

Urquhart, L., Sailaja, N., & McAuley, D. (2018). Realising the right to data portability for the domestic Internet of things. Personal and Ubiquitous Computing, 22, 317-332. https://doi.org/10.1007/s00779-017-1069-2

• Journal Article Type: Article
• Acceptance Date: Jun 12, 2017
• Online Publication Date: Aug 23, 2017
• Publication Date: 2018-04
• Deposit Date: Aug 7, 2017
• Publicly Available Date: Aug 23, 2017
• Journal: Personal and Ubiquitous Computing
• Print ISSN: 1617-4909
• Electronic ISSN: 1617-4917
• Publisher: Springer Verlag
• Peer Reviewed: Peer Reviewed
• Volume: 22
• Pages: 317-332
• DOI: https://doi.org/10.1007/s00779-017-1069-2
• Public URL: https://nottingham-repository.worktribe.com/output/879062
• Publisher URL: https://link.springer.com/article/10.1007/s00779-017-1069-2