Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use...
Transcript of Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use...
![Page 1: Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use of sensor data Thomas Tombal PhD Student & Researcher in ICT Law at CRIDS –UNamur](https://reader035.fdocuments.in/reader035/viewer/2022080721/5f7a776db69550646258b3d5/html5/thumbnails/1.jpg)
www.unamur.be
BEGEO
24 April 2018
Legal challenges of IoT & use of sensor data
Thomas Tombal
PhD Student & Researcher in ICT Law at CRIDS – UNamur
Member of the FLEXPUB project (www.flexpub.be)
![Page 3: Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use of sensor data Thomas Tombal PhD Student & Researcher in ICT Law at CRIDS –UNamur](https://reader035.fdocuments.in/reader035/viewer/2022080721/5f7a776db69550646258b3d5/html5/thumbnails/3.jpg)
www.unamur.be 3
Internet of Things (IoT) – (Geo) sensor data
![Page 4: Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use of sensor data Thomas Tombal PhD Student & Researcher in ICT Law at CRIDS –UNamur](https://reader035.fdocuments.in/reader035/viewer/2022080721/5f7a776db69550646258b3d5/html5/thumbnails/4.jpg)
www.unamur.be 4
Legal issues – Data protection
Principles of personal data protection
Lawful processing – GDPR, Art. 6 Purpose limitation – GDPR, Art. 5(1)(b) Data minimisation – GDPR, Art. 5(1)(c)
![Page 5: Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use of sensor data Thomas Tombal PhD Student & Researcher in ICT Law at CRIDS –UNamur](https://reader035.fdocuments.in/reader035/viewer/2022080721/5f7a776db69550646258b3d5/html5/thumbnails/5.jpg)
www.unamur.be 5
Legal issues – Data protection
Principles of personal data protection
Privacy by design & by default – GDPR, Art. 25• Take data protection into account from the very beginning of the
design of the connected product (sensor) and the service offered• By default, limit as much as possible the access to, and sharing of, the
(sensor generated) data
![Page 6: Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use of sensor data Thomas Tombal PhD Student & Researcher in ICT Law at CRIDS –UNamur](https://reader035.fdocuments.in/reader035/viewer/2022080721/5f7a776db69550646258b3d5/html5/thumbnails/6.jpg)
www.unamur.be 6
Legal issues – Open Data and “Reverse-PSI”
Open (geo sensor) Data
INSPIRE Directive 2007/2/EC Directive 2003/98/EC on the re-use of Public Sector Information (PSI
Directive – as revised by Dir 2013/37/EU)
Open Data >< Data protection
• PSI Directive: “This Directive shall not apply to (…) documents access towhich is excluded or restricted by virtue of the access regimes on thegrounds of protection of personal data” (Article 1.2.cc)
![Page 7: Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use of sensor data Thomas Tombal PhD Student & Researcher in ICT Law at CRIDS –UNamur](https://reader035.fdocuments.in/reader035/viewer/2022080721/5f7a776db69550646258b3d5/html5/thumbnails/7.jpg)
www.unamur.be 7
Legal issues – Open Data and “Reverse-PSI”
Reverse-PSI
Review of the PSI Directive – Public consultation closed in December 2017
Public bodies’ access to privately held (geo sensor) data that are of publicinterest?• Summary report (5 April 2018): 88 % of the 205 respondents to the
question considered that it should be allowed• Ex: Mobility (geo sensor) data
![Page 8: Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use of sensor data Thomas Tombal PhD Student & Researcher in ICT Law at CRIDS –UNamur](https://reader035.fdocuments.in/reader035/viewer/2022080721/5f7a776db69550646258b3d5/html5/thumbnails/8.jpg)
www.unamur.be 8
Legal issues – Cybersecurity
Security obligations – GDPR, Art. 32
Appropriate technical and organisationalmeasures
Level of security appropriate to the risk
Protect people’s physical integrity
![Page 9: Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use of sensor data Thomas Tombal PhD Student & Researcher in ICT Law at CRIDS –UNamur](https://reader035.fdocuments.in/reader035/viewer/2022080721/5f7a776db69550646258b3d5/html5/thumbnails/9.jpg)
www.unamur.be 9
Legal issues – Insurance and personal data
Health or Car insurance
Compulsory? Rethink the insurance mechanism ?
![Page 10: Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use of sensor data Thomas Tombal PhD Student & Researcher in ICT Law at CRIDS –UNamur](https://reader035.fdocuments.in/reader035/viewer/2022080721/5f7a776db69550646258b3d5/html5/thumbnails/10.jpg)
www.unamur.be 10
Legal issues – Liability
What if things go wrong?
Who is liable?
Hacked product = Defective product?
![Page 11: Legal challenges of IoT & use of sensor data · BEGEO 24 April 2018 Legal challenges of IoT & use of sensor data Thomas Tombal PhD Student & Researcher in ICT Law at CRIDS –UNamur](https://reader035.fdocuments.in/reader035/viewer/2022080721/5f7a776db69550646258b3d5/html5/thumbnails/11.jpg)
www.unamur.be 11
Legal issues – “Ownership” of data
Multiple actors in the data chain E.g. Automated cars
“Access to”, “control of” and “competing rights on” data
Data sharing is necessary for Big Data
Sharing compulsory in certain circumstances? Reverse PSI?
If not compulsory, what remedy for refusal to share? Is Competition law sufficient?