Handling Of Personal Data Research Articles

Ethical Challenges in Digital Communications: Online Privacy, Security, and Responsibility

Social media and online communication platforms have increased significantly in today's digital era. However, these developments raise ethical challenges regarding online privacy, security and responsibility. These issues include data breaches, misuse of personal information, and the spread of inappropriate or misleading content. This research aims to identify and analyze the main ethical challenges in digital communication. Specifically, this research focuses on privacy, data security, and responsibility in sharing and using the information on the Internet. This research aims to develop a framework to address these ethical issues to increase trust and security in digital communications. This research uses a qualitative approach by collecting data through in-depth interviews and document analysis. The results of the study show that there are significant concerns regarding the handling of personal data by large and small platforms. Respondents emphasized the importance of transparency and clarity in privacy policies and the need for user education about online security. The research also identified the need for stricter ethical standards and more effective regulations to protect users. The conclusion of this research is to confirm that ethical challenges in digital communication require severe attention and coordinated action. The proposed framework includes increasing user awareness, strengthening regulations, and developing technologies that support privacy and security. Implementing these recommendations is expected to increase integrity and trust in digital communications and protect individuals' rights online.

Navigating compliance and regulations in marketing analytics: Upholding ethical standards and consumer trust

This paper delves into the multifaceted marketing analytics compliance and regulation landscape across diverse business sectors and legal frameworks. It discusses a spectrum of norms with respect to overseeing data collection, processing and utilisation in marketing endeavours. Stringent global laws govern the handling of personal data, necessitating strict adherence. The paper scrutinises pivotal compliance elements like consent, transparency and data security alongside pivotal legislation like the California Consumer Privacy Act and the General Data Protection Regulation. It assesses the implications for marketing analytics, emphasising rights regarding personal data access, erasure anonymisation methods and ethical data use. Non-compliance repercussions, encompassing legal and financial risks and reputational harm, are highlighted, as many industries are facing distinct regulatory challenges. The paper details the essential components of policies, training, monitoring and enforcement that are crucial to ensuring marketing compliance. It stresses the role of technology, advocating for marketing compliance software to streamline processes, monitor compliance and adapt swiftly to regulatory shifts. It elucidates the collaborative nature needed within marketing teams to achieve effective compliance management. The conclusion highlights how compliance software helps with regulatory updates, data privacy, monitoring and content assessment. This paper emphasises the dynamic nature of marketing analytics compliance, urging vigilance with regard to legislative alterations and technological advancements. The paper provides a comprehensive insight into managing compliance challenges in this evolving field while upholding ethical standards and fostering consumer trust.

Handling of Personal Data by Smart Home Equipment: an Exploratory Analysis in the Context of LGPD

This paper presents an exploratory research that analyzed the Privacy and Security Policies and the Instruction Manuals of 59 home automation equipment for Smart Home in order to verify which personal data was handled and how these documents were providing information about processes performed in personal data. The analysis was conducted with a quantitative approach followed by a qualitative analysis, using content analysis. The surveys identified the following types of personal data: Identification, Financial, Devices and Location. The results presented greater interest in identification data, although financial and location are also used in specific cases. We also concluded that the Privacy and Security Policies present several information that meets the LGPD’s guidelines, especially regarding the purpose of using the data and which personal data is used. However, there is a visible lack of information about the benefits provided to data subjects and about sharing data with third parties, such as recipient data and the legal basis for sharing data.

АКТУАЛНИ ПРОБЛЕМИ В РЕДАКЦИОННИТЕ И ИЗВЪНРЕДАКЦИОННИТЕ СЪДЪРЖАНИЯ НА БЪЛГАРСКИТЕ МЕДИИ В КОНТЕКСТА НА GDPR

The paper analyzes current problems in the handling of personal data in the media and the attempt of the Bulgarian legislation to synchronize the requirements under Regulation (EU) 2016/679 for the handling of personal data with the constitutional framework of the communication rights for freedom of expression and information, provided in Art. 39, 40 and 41, which also affect the freedom of media. Emphasis is placed on the latest amendment to the Bulgarian Personal Data Protection Act of 2019, which, among others, covers the requirements for the processing of personal data in journalistic content. In this regard, in relation to the Bulgarian media environment, several particularly broad problem areas which await their solution are commented on.

Balancing ChatGPT and Data Protection in Germany: Challenges and Opportunities for Policy Makers

In the last few months there has been widespread discussion about the remarkable progress made in the field of artificial intelligence, specifically large language models such as "ChatGPT". The ethical implications of AI, particularly concerning data protection, have sparked discussions on the necessity of robust regulations. This article examines the intersection of data protection, ChatGPT, and the ethics of AI, it explores Germany's ongoing efforts to strike a balance between harnessing the potential of large language models as ChatGPT and ensuring responsible and transparent use of AI technology in the policy-making realm. The GDPR serves as a guiding framework, necessitating careful consideration of privacy rights and secure handling of personal data when deploying ChatGPT in Germany's policy-making processes. The study draws on analysis on the current laws and regulations of data protection in Germany while studying Germany's commitment to safeguarding personal information through the active presence of The German Federal Commissioner for Data Protection and Freedom of Information. The first section provides a context and presents the policy problem. The second section looks at the available policy options on the role of policymaking in establishing comprehensive regulations regarding the use of ChatGPT and generative AI. The third section provides recommendations on how Germany can ensure the responsible management of ChatGPT, through strengthening data protection laws and regulations, simultaneously, restricting ChatGPT usage to private users and government, also, embracing appropriate usage of generative AI while developing ethical guidelines and best practices to harness its benefits, fostering innovation and advancement.

Prawo do bycia zapomnianym w perspektywie przetwarzania danych osobowych

Nowadays, effective protection of personal data is one of the fundamental issues of a democratic state under the rule of law. Therefore, the legislator should be very precise about the principles and standards of data processing. In the last few decades, in particular, the development of new technologies, digitalisation and the increase in the need for electronic communication has become evident, which leads to the adoption of appropriate regulations for the handling of personal data. In addition, the EU legislator has introduced the General Data Protection Regulation (GDPR) in order to harmonise the regulations of EU Member States regarding the protection of personal data. This provides a framework for the proper functioning of legal provisions across the European Union regarding the handling of personal data of its citizens.The aim of the article is to identify the legal changes resulting from the Personal Data Protection Regulation, with a particular focus on the persons to which they apply and then to analyse the regulation of ‘the right to be forgotten’. In the first part of the article, attention is drawn to the way personal data are processed and the scope of obligations incumbent on data controllers. This is because data controllers are, together with the personal data protection officer, responsible for recording data processing activities, including ongoing monitoring and responding to situations of inaccurate data processing. The second part focuses on the right to be forgotten and the assessment of this entitlement in the perspective of Regulation 2016/679. The research methods include an analysis of legal acts, at the same time using the subject literature.

PROVIDER'S RESPONSIBILITY FOR CONSUMER PERSONAL DATA IN STARTER PACK REGISTRATION

To mitigate issues related to phone number starter pack registration, the Government has enacted Regulation of the Minister of Communication and Information Number 12 of 2016, in conjunction with Regulation of the Minister of Communication and Informatics Number 14 of 2017, which mandates that consumers provide personal data such as National Identity Number, Family Card Number, or biological mother's name to telecommunications operators. Despite these regulations, concerns arise regarding the misuse of personal data by unauthorized parties or due to electronic system failures. This research aims to explore the legal relationship between providers and consumers, the provider's responsibilities concerning personal data in starter pack registration, and the legal remedies available to consumers in cases of personal data protection failures. Employing a normative method, the study involves a review of relevant laws, regulations, and literature related to the topic. Findings indicate that the legal relationship between providers and consumers is established through the registration process, where the provider formulates the agreement, and the consumer consents to and complies with the terms. The provider is responsible for ensuring the legitimacy, accuracy, and proper handling of personal data, including its collection, processing, storage, and disposal, in accordance with legal provisions. In cases of data protection failures, consumers have several legal recourse options, including filing complaints, pursuing civil lawsuits through the courts, engaging in alternative dispute resolution, or seeking prosecution of the providers.

Uso y manejo de desinfectantes por odontólogos de San Luis Potosí, México durante la pandemia Covid-19

Introduction: Chlorine, ethyl alcohol, and quaternary ammonium are disinfectants with antiviral activity against SARS-Cov2. However, there are no previous reports of their use and handling for cleaning and disinfection in dental offices. Objetive: To determine the use and management of disinfectants in critical and non-critical areas used by dentists in San Luis Potosí, Mexico, during the COVID-19 pandemic. Material and Methods: A validated cross-sectional survey was applied online to 100 dentists in San Luis Potosí between February and June 2021. Participants were informed about the handling of personal data according to the standard DOF regulations (DOF 07-05-2010). Results: A total of 100 dentists were included in the study, 63% female and 37% male, with a mean age of 26 years. The most widely used disinfectants during the pandemic in critical areas were Lysol® and 0.1% sodium hypochlorite in non-critical areas. Eighty-five percent of dentists know the adverse effects of inappropriate use of disinfectants, 72% did not have any sign or symptom associated with the use of disinfectants. The most used protection barrier was gloves (97%). Sixty-seven per cent of dentists disposed of disinfectant waste down the drain. Conclusion: Sodium hypochlorite and quaternary ammonium compounds and/or ethanol are used to clean non-critical and critical areas in dental offices. However, appropriate measures for their management are not adopted. It is necessary to implement educational strategies to improve the use and management of disinfectants in dental practice.

Data cart – designing a tool for the GDPR-compliant handling of personal data by employees

ABSTRACT Employees who process personal data as part of their job play a critical role in protecting privacy. They are expected to follow strict data protection guidelines and protect personal data adequately. However, few studies have addressed the needs of these employees in terms of appropriate tools to assist them in complying with privacy laws. To develop a suitable tool, we used a human-centred design approach and held a series of eight workshops with 19 employees from two German public institutions. Based on the metaphor of a data cart, we developed a concept for a tool that supports employees in data management and data protection compliance. Qualitative usability testing revealed that participants expected the tool to raise their data protection awareness, reduce errors, and increase work efficiency. Our findings also suggest that if Privacy by Design becomes an integral part of digitalisation, employee perceptions of data protection may be positively altered. Employers, IT engineers, and researchers benefit from gaining insights into ways to improve the usability of data protection compliant personal data management tools. Simultaneously, we highlight how they can improve and promote compliance.

Group Privacy: An Underrated but Worth Studying Research Problem in the Era of Artificial Intelligence and Big Data

Introduction: Recently, the tendency of artificial intelligence (AI) and big data use/applications has been rapidly expanding across the globe, improving people’s lifestyles with data-driven services (i.e., recommendations, smart healthcare, etc.). The synergy between AI and big data has become imperative considering the drastic growth in personal data stemming from diverse sources (cloud computing, IoT, social networks, etc.). However, when data meet AI at some central place, it invites unimaginable privacy issues, and one of those issues is group privacy. Despite being the most significant problem, group privacy has not yet received the attention of the research community it is due. Problem Statement: We study how to preserve the privacy of particular groups (a community of people with some common attributes/properties) rather than an individual in personal data handling (i.e., sharing, aggregating, and/or performing analytics, etc.), especially when we talk about groups purposely made by two or more people (with clear group identifying markers), for whom we need to protect their privacy as a group. Aims/Objectives: With this technical letter, our aim is to introduce a new dimension of privacy (e.g., group privacy) from technical perspectives to the research community. The main objective is to advocate the possibility of group privacy breaches when big data meet AI in real-world scenarios. Methodology: We set a hypothesis that group privacy (extracting group-level information) is a genuine problem, and can likely occur when AI-based techniques meet high dimensional and large-scale datasets. To prove our hypothesis, we conducted a substantial number of experiments on two real-world benchmark datasets using AI techniques. Based on the experimental analysis, we found that the likelihood of privacy breaches occurring at the group level by using AI techniques is very high when data are sufficiently large. Apart from that, we tested the parameter effect of AI techniques and found that some parameters’ combinations can help to extract more and fine-grained data about groups. Findings: Based on experimental analysis, we found that vulnerability of group privacy can likely increase with the data size and capacity of the AI method. We found that some attributes of people can act as catalysts in compromising group privacy. We suggest that group privacy should also be given due attention as individual privacy is, and robust tools are imperative to restrict implications (i.e., biased decision making, denial of accommodation, hate speech, etc.) of group privacy. Significance of results: The obtained results are the first step towards responsible data science, and can pave the way to understanding the phenomenon of group privacy. Furthermore, the results contribute towards the protection of motives/goals/practices of minor communities in any society. Concluding statement: Due to the significant rise in digitation, privacy issues are mutating themselves. Hence, it is vital to quickly pinpoint emerging privacy threats and suggest practical remedies for them in order to mitigate their consequences on human beings.

Personal Data as a Market Commodity in the GDPR Era: A Systematic Review of Social and Economic Aspects

With the development of modern data processing, mining and collection technologies, various companies and institutions will have more opportunities to make these data operations faster and more efficiently. From the economic perspective, processing personal data is evidently lucrative and companies would therefore like to obtain as much data as possible. This paper analyses and summarizes existing and emerging social and economic trends, implications and issues caused by clashes between European legislation on personal data protection (the GDPR) and current data processing practices. Utilizing both quantitative and qualitative data, the article attempts to scrutinize the implications of the conflict between the rising demand for privacy and personal data protection on the one hand and the ever-growing need to process and store personal data, especially by commercial organizations, on the other. Analysing databases, legislation, reports, statistical data and surveys, the paper attempts to provide an estimate of the value of personal data and the consequences of poor handling of personal data.

General Data Protection Law

Technological advances make it possible to quickly access and share personal data and information, which demands greater security and requires conscious attitudes from the different professionals who deal with these issues. Accounting professionals stand out in this universe for being responsible for customer, supplier, and employee data. The information insecurity scenario led to the creation of the General Data Protection Law (GDPL), a specific legislation for personal data handling. Driven by this context, this research aimed to analyze the GDPL compliance determinants among accounting professionals. In order to achieve this purpose, we conducted a quantitative, descriptive, survey study. For data collection, we developed and applied an online questionnaire addressed to accounting professionals. The final surveyed sample totaled 194 respondents. We performed the data analysis through Structural Equation Modeling. The validated model showed the dimensions of personal behaviors and attitudes and governance mechanisms as determinants, explaining 26.3% of GDPL compliance. This research contributes to the understanding of behavioral aspects of accounting professionals in face of the new legislation. It is an unprecedented approach and fills a gap in the accounting area, presenting useful contributions for educational institutions, class associations, and companies in the area.

The Transformation of Data Marketing: How an Ethical Lens on Consumer Data Collection Shapes the Future of Marketing

With a mass of customer data at our fingertips and the ability to use it to individualize promotion strategies, marketing communications, and product offerings, marketing activities are becoming more and more tailored to the individual customer. However, as concerns about online privacy and the handling of personal data take on an ever-increasing significance, marketers must increasingly evaluate and adapt their personalization and data collection methods. As a result, there is an increasing demand to take a critical look at the collection of data for personalization processes from an ethical perspective and to consider implications for further initiatives to maintain consumers’ trust. This research study utilizes a systematic literature review approach to investigate the current state of knowledge on the tradeoff between personalization and customer privacy by synthesizing and integrating extant knowledge. From the results of the present study’s search process, 20 articles were selected and analyzed for this review. Findings emphasize the importance of strengthening consumer relationships by increasing consumer trust, loyalty, confidence, and emotional attachment through specific organizational activities. The adaptation of marketing-related activities can thereby create a competitive advantage for data-collecting companies, as consumer backlash and privacy concerns decrease, and the willingness to disclose data increases. The current research contributes to the field of marketing by reviewing the issue of increasing personalization at the cost of customer privacy and explores how the resulting ethical considerations may affect the future of marketing practices. It thereby serves to help marketeers to implement effective strategies to ensure customer relationships and the resulting willingness to disclose personal data for personalization processes.

Artificial Intelligence in Biomedicine: A Legal Insight.

The involvement of artificial intelligence in biomedicine promises better support for decision-making both in conventional and research medical practice. Yet two important issues emerge in relation to personal data handling, and the influence of AI on patient/doctor relationships. The development of AI algorithms presupposes extensive processing of big data in biobanks, for which procedures of compliance with data protection need to be ensured. This article addresses this problem in the framework of the EU legislation (GDPR) and explains the legal prerequisites pertinent to various categories of health data. Furthermore, the self-learning systems of AI may affect the fulfillment of medical duties, particularly if the attending physicians rely on unsupervised applications operating beyond their direct control. The article argues that the patient informed consent prerequisite plays a key role here, not only in conventional medical acts but also in clinical research procedures.

The impact of the General Data Protection Regulation on internet interconnection

The Internet comprises thousands of independently operated networks, interconnected using bi-laterally negotiated data exchange agreements. The European Union (EU)'s General Data Pro-tection Regulation (GDPR) imposes strict restrictions on handling of personal data of European Economic Area (EEA) residents. A close examination of the text of the law suggests signifi-cant cost to application firms. Available empirical evidence confirms reduction in data usage in the EEA relative to other markets. We investigate whether this decline in derived demand for data exchange impacts EEA networks' decisions to interconnect relative to those of non-EEA OECD networks. Our data consists of a large sample of interconnection agreements between networks globally in 2015–2019. All evidence estimates zero effects: the number of observed agreements, the inferred agreement types, and the number of observed IP-address-level inter-connection points per agreement. We also find economically small effects of the GDPR on the entry and the observed number of customers of networks. We conclude there is no visible short run effects of the GDPR on these measures at the internet layer.

‘To be on the safe side’: a qualitative study regarding users’ beliefs and experiences of internet-based self-sampling for Chlamydia trachomatis and Neisseria gonorrhoeae testing

ObjectivesIn Sweden, an increasing number of tests for sexually transmitted infections are conducted. Self-sampling services are provided free of charge at the national eHealth website. Our aim was to obtain...

The Impact of the General Data Protection Regulation on Internet Interconnection

The Internet comprises thousands of independently operated networks, interconnected using bilaterally negotiated data exchange agreements. The European Union (EU)’s General Data Protection Regulation (GDPR) imposes strict restrictions on handling of personal data of European Economic Area (EEA) residents. A close examination of the text of the law suggests significant cost to application firms. Available empirical evidence confirms reduction in data usage in the EEA relative to other markets. We investigate whether this decline in derived demand for data exchange impacts investment in interconnection by networks in the EEA relative to networks in non-EEA OECD countries. Our data consists of a large sample of interconnection agreements between networks globally in 2015–2019. All evidence estimates precisely zero effects: the number of observed agreements, the inferred agreement types, and the number of observed IP-address-level interconnection points per agreement. We also find economically small effects of the GDPR on the entry and the observed number of customers of networks. We conclude there is no visible short run consequence of the GDPR at the internet layer. Institutional subscribers to the NBER working paper series, and residents of developing countries may download this paper without additional charge at www.nber.org.

The Realization of Mutual Adequacy Recognition Between Japan and the EU and Issues Raised in the Process

On 23 January 2019, the safe and smooth transborder transfer of personal data was realized between Japan and the European Union (EU). This mutual adequacy decision was the first in the world, and Japan was the first to be certified under Article 45 of the General Data Protection Regulation (GDPR). The EU and European Economic Area (EEA) (Iceland, Liechtenstein and Norway) were also the first in the world to be certified by Japan under Article 24 of the 2015 Amended Act on the Protection of Personal Information (APPI). It is the first mutual adequacy decision in the world and in the history of data protection. The PPC’s dialogue and cooperation with the European Commission started in 2016 and further dialogue continued in 2017. In the first half of 2018, two important issues were raised. One was how to bridge differences between two systems, and the other was how to deal with access and use of personal data transferred from the EU by public authorities in Japan. The APPI only covers the private sector and the PPC does not deal with the handling of personal data by public authorities. These solutions are explained in the article. adequacy decision, mutual recognition, cross-border data flows, independent institution, Personal Information Protection Act, Waseda University, Benesse Data Breach

A Dynamic Intelligent Policies Analysis Mechanism for Personal Data Processing in the IoT Ecosystem

The evolution of the Internet of Things is significantly affected by legal restrictions imposed for personal data handling, such as the European General Data Protection Regulation (GDPR). The main purpose of this regulation is to provide people in the digital age greater control over their personal data, with their freely given, specific, informed and unambiguous consent to collect and process the data concerning them. ADVOCATE is an advanced framework that fully complies with the requirements of GDPR, which, with the extensive use of blockchain and artificial intelligence technologies, aims to provide an environment that will support users in maintaining control of their personal data in the IoT ecosystem. This paper proposes and presents the Intelligent Policies Analysis Mechanism (IPAM) of the ADVOCATE framework, which, in an intelligent and fully automated manner, can identify conflicting rules or consents of the user, which may lead to the collection of personal data that can be used for profiling. In order to clearly identify and implement IPAM, the problem of recording user data from smart entertainment devices using Fuzzy Cognitive Maps (FCMs) was simulated. FCMs are an intelligent decision-making system that simulates the processes of a complex system, modeling the correlation base, knowing the behavioral and balance specialists of the system. Respectively, identifying conflicting rules that can lead to a profile, training is done using Extreme Learning Machines (ELMs), which are highly efficient neural systems of small and flexible architecture that can work optimally in complex environments.

Reflection of GDPR by the Czech Population

Abstract Nowadays, personal data is becoming both increasingly relevant and extensively shared over the internet. Individual privacy is often at risk as personal and contact information are a frequent object of commercial transactions. This situation recently triggered the implementation of a new data-protection regulation: General Data Protection Regulation (GDPR). This study analyses privacy protection from the citizens’ and consumers' points of view. The authors apply quantitative methods to primary data sampled from the population of the Czech Republic (aged 15+). Individual willingness to share personal data is evaluated along with the spectrum of situations where such data is requested and along with corresponding GDPR-related individual stances. According to the data analyzed, Czech population perceives GDPR measures as mostly useful yet somewhat bothersome. Also, individuals are not convinced that the regulation could deliver any fundamental changes to processes that involve handling of personal data. In general, respondents feel concerned by the intensification of demands for signing data sharing consents and by similar data processing interactions. However, individual levels of willingness to share various types of personal and contact information are sound and stable.