Multi application smart card schemes: Data protection: multi-application smart cards: the use of global unique identifiers for cross-profiling purposes — Part I

Abstract

This article, consisting of three parts, will comment on how the opportunities offered by multi-application smart card schemes can be reconciled with data protection requirements. In the first part, the focus will be on the regulatory framework of the smart card manufacturer and the legal requirements to develop less privacy-killing technologies. Hereafter, some technical solutions will be proposed to demonstrate that multi-application smart card technology can be reconciled with the principles of personal data protection legislation. In the third and final part, the communication of personal data through electronic communications networks will be analysed. In relation hereto, it must be indicated that intelligent servers will become increasingly important to assure the interoperability between different application providers and different smart card schemes.