Academia.eduAcademia.edu

Outline

Data Protection: When Others Know What You Want Before You Do

2019

Abstract

Data protection is nowadays of immense importance considering the fact that more than 250 million people in the European Union alone make use of the internet daily, such as using it to deal with online transaction whilst shopping, online banking, using social media or any other form. This results in boundless amounts of data being exchanged every day between different public and private actors, be it for benevolent purposes or not. For this to occur, however, these bodies need to acquire the consent of the individual (data subject) whereby the latter has to give it in a freely, specific, informed and unambiguous form. Not only are these criteria not fully fulfilled after the adoption of the GDPR (General Data Protection Regulation), but having created a connection between autonomy and consent, it seems that they water down the fundamental right of privacy which entails even further complications in the judicial system. The acquiring of consent demands within itself several implications when it is given to private bodies. Facebook, for instance, uses this data through computational inferences to interpret and predict confidential and private information that, in the long run, goes against the GDPR and also fundamental rights. Such data may infer someone’s sexual orientation, ethnicity, religious and political views, etc. These tools can be utilised for social control, dominance, or even chaos. Moreover, consenting can be linked to nudging. This is a way to influence people’s behaviours by allowing them the freedom to choose between different options. Nudging is a seldom-legislated area in the European Union and it requires different perspectives as to how to tackle public and private bodies interfering with people’s autonomy and manipulating them into desired outcomes. Consent is not in itself the issue. The instruments exercising it are, because they create a narrow perception of what happens in the world and should be tackled in a behavioural aspect: not assuming how people behave, but by observing how they really behave.

FAQs

sparkles

AI

How does computational inference impact the concept of consent in data protection?add

The study finds that computational inference often circumvents informed consent requirements, undermining individuals' control over their data.

What role do nudges play in shaping consumer behavior according to recent findings?add

Research indicates that nudges can significantly influence consumer choices, sometimes leading to unintended manipulations of autonomy.

Why is consent considered insufficient for protecting individual privacy rights?add

The analysis reveals that consent is often given without full understanding, limiting its effectiveness in safeguarding privacy.

When did the GDPR redefine requirements around consent for data processing?add

The GDPR, enforced in 2018, introduced stricter requirements for consent, emphasizing informed and unambiguous agreements.

What implications does data modeling have for personal autonomy in social media contexts?add

Data modeling can restrict personal autonomy by predicting and manipulating user behavior, as seen in targeted advertising strategies.

References (24)

  1. P Carey, Data Protection: A Practical Guide to UK and EU law (4 th edn, OUP 2015) 1.
  2. E Kosta, Consent in European Data Protection Law (Brill 2013) 13; See for instance the early reactions of A Westin, Privacy and Freedom (6th edn Atheneum Book 1970) and P Sieghart, Privacy and computers (Latimer 1976), who discussed extensively the nature of computers and how they can put privacy at risk.
  3. See E Kosta n9 254.
  4. P De Hert and S Gutwirth, 'Data protection in the case law of Strasbourg and Luxemburg: Constitutionalisation in action' in P De Hert and S Gutwirth and others (eds), Reinventing data protection? (Springer 2009) 1.
  5. Council of Europe, Handbook on European Data Protection Law (Publications Office of the European Union 2018) 18.
  6. United Nations (UN), Universal Declaration of Human Rights (UDHR), 10 December 1948., art 12; Council of Europe, European Convention for the Protection of Human Rights and Fundamental Freedoms, as amended by Protocols Nos 11 and 14, 4 November 1950, ETS 5, art 8.
  7. Charter of Fundamental Rights of the European Union [2012] OJ 1 326/391.
  8. P De Hert and S Gutwirth, 'Making sense of privacy and data protection: A prospective overview in the light of the future of identity, location-based services and virtual residence' in Institute for Prospective Technological 98 HJ Smith and others, 'Information privacy: Measuring individuals' concerns about organizational practices' (1996) 20(2) MIS Quarterly 167.
  9. Ibid.
  10. M De Choudhury and others, 'Predicting Postpartum Changes in Emotion and Behavior via Social Media' (2013) MICROSOFT RESEARCH, available at http://research.microsoft.com/enus/um/people/horvitz/predicting_postpartum_changes_chi_2013.pdf; M De Choudhury and others, 'Predicting Depression via Social Media' (2013 128 Proceedings of The Seventh International AAAI Conference on Weblogs and Social Media available at <http://www.aaai.org/ocs/index.php/ICWSM/ICWSM13/paper/view/6124/6351> accessed 3 May 2019.
  11. Lucia Moses, 'Marketers Should Take Note of When Women Feel Least Attractive' (Adweek, 2 October 2013) <https://www.adweek.com/brand-marketing/marketers-should-take-note-when-women-feel-least- attractive-152753/> accessed 2 May 2019.
  12. 'This could be done by hiring people based on "commuting distance to work," a factor that companies working on algorithmically calculating the potential success of newly hired employees have already found to be correlated to a low-degree of employee turnover. Such a criterion would not directly target race, but given the residential segregation patterns in many cities around the United States, could easily effectively do so' -elaborated in Z Tufekci, 'Algorithmic harms beyond Facebook and Google: Emergent challenges of computational agency' (2015) 13 Colo Tech LJ 203, 217. record it and link it to your Guest ID', as elaborated in Charles Duhigg, 'How Companies Learn Your Secrets' (The New York Times Magazine, 16 February 2012)<https://www.nytimes.com/2012/02/19/magazine/shopping- habits.html> accessed 22 May 2019.
  13. Ibid.
  14. See Z Tufekci n83.
  15. The term was first coined in CR Sunstein and RH Thaler, 'Libertarian Paternalism Is Not an Oxymoron' (2003) 70(4) The University of Chicago Law Review 1159, 1160.
  16. HS Saetra, 'When nudge comes to shove: Liberty and nudging in the era of big data' (2019) Technology in Society <https://doi.org/10.1016/j.techsoc.2019.04.006> accessed 22 May 2019, 4;
  17. R Baldwin, 'From regulation to behavior change: Giving nudge the third degree' (2014) 77(6) The Modern Law Review 831, 833. Implementation/Application of Directive 2005/29/EC on Unfair Commercial Practices ' SEC (2009) 1666 , ec.europa.eu/justice/consumer-marketing/fi les/ucpd_report_en.pdf, 32), consumer rights (particularly art 22 of Directive 2011/83/EU on consumer rights [ 2011 ] OJ L304/64 , which prohibits the use of pre-ticked boxes on e-commerce websites).
  18. AL Sibony and A Alemanno, 'The emergence of Behavioural policy-making: a European Perspective' in A Alemanno and AL Sibony (eds), Nudge and the Law: A European Perspective (Hart Publishing 2015) 21.
  19. A Alemanno and A Spina, 'Nudging legally: On the checks and balances of behavioral regulation' (2014) 12(2) International Journal of Constitutional Law 429, 445.
  20. A Alemanno and A Spina, 'On the Checks and Balances of Behavioural Regulation' (2014) 12 International Journal of Constitutional Law 429.
  21. Informed consent in this section is not meant merely for data processing, but in the general manner.
  22. See CR Sunstein and RH Thaler n114, 1159-1160;
  23. R Munoz and others, 'Evidence-Based Nudging: Best Practices in Informed Consent' (2015) 15(10) The American Journal of Bioethics 43, 43.
  24. E Di Nucci, 'Habits, Nudges, and Consent' (2013) 13(6) The American Journal of Bioethics 27, 28.