Turner, Sarah;
Tanczer, Leonie Maria;
(2024)
In principle vs in practice: User, expert and policymaker attitudes towards the right to data portability in the internet of things.
Computer Law & Security Review
, 52
, Article 105912. 10.1016/j.clsr.2023.105912.
Preview |
Text
In principle vs in practice.pdf - Published Version Download (521kB) | Preview |
Abstract
The right to data portability (RtDP) was enshrined in law with the introduction of the EU's General Data Orotection Regulation (GDPR, Article 20) in 2018. RtDP gives a user the right to obtain and transfer their data to a different service, and the data controller the obligation to facilitate this transfer. Since GDPR's implementation, RtDP has been highlighted in the Digital Markets Act (DMA; 2022) and the proposed Data Act. Despite these reinforcements, there are gaps in understanding of RtDP amongst digital service users. Additionally, many organisations struggle to facilitate data transfer, particularly when it comes to the Internet of Things (IoT). This study examines the attitudes towards IoT data portability by conducting semi-structured interviews with users of consumer IoT devices (n = 28), academics/industry experts (n = 11) and policymakers (n = 8). Results indicate that whilst policymakers and consumers value this right in principle, it is rendered meaningless without a data subject's ability to exercise it in practice. A lack of guidance for data controllers and consumers has created an atmosphere of uncertainty which urgently needs to be addressed.
| Type: | Article |
|---|---|
| Title: | In principle vs in practice: User, expert and policymaker attitudes towards the right to data portability in the internet of things |
| Open access status: | An open access version is available from UCL Discovery |
| DOI: | 10.1016/j.clsr.2023.105912 |
| Publisher version: | https://doi.org/10.1016/j.clsr.2023.105912 |
| Language: | English |
| Additional information: | Copyright © 2023 The Authors. Published by Elsevier Ltd. This is an open access article under the CC BY license (http://creativecommons.org/licenses/by/4.0/). |
| Keywords: | Data Portability; GDPR; Internet of Things, IoT; Data Subject Rights; Data Protection |
| UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science |
| URI: | https://discovery.ucl.ac.uk/id/eprint/10180609 |
Loading...
Loading...Loading...Loading...Archive Staff Only
 |
View Item |
