Collection Of Personal Data Research Articles

A Research on the Protection of Personal Information in the Context of Face Recognition Technology

The rapid development of science and technology, coupled with the extensive use of the Internet, has led to the emergence of face recognition technology as a prominent high-tech power, which has become an integrated part of people’s daily life. While facilitating convenience in life, face recognition technology also presents a multitude of legal risks and challenges. The diversity and opacity of the Internet provide an optimal environment for those engaged in illicit activities to exploit its shortcomings for a range of illegal and criminal pursuits. As restrictions on the use of face recognition technology are lifted and its scope of application expands, the risk of data leakage and violations of individual privacy, as well as its potential use as a tool for crimes, continues to rise. China still has deficiencies and vulnerability in the implementation of face recognition technology. For instance, the pertinent legislation and regulatory frameworks governing the face recognition industry and the collection and utilization of personal data remain somewhat ambiguous and incomplete, which may result in the infringement of privacy rights. It would be prudent for China to draw upon the experiences and solutions that have been developed domestically and abroad to improve and tailor the existing legal system and regulations to the country's specific circumstances. This approach would serve to reinforce the protection of personal information, facilitate the more effective utilization of the technology for the benefit of the nation and society, enhance convenience for citizens, and reinforce their sense of security and well-being.

Actual Issues of Reform of Georgian National Security Sector’s Accountability and Oversight System

By its nature and specific obligations, the security assurance system contradicts external control, oversight and accountability principles, because its significant part and decisions are related to secret activities and documents. Therefore, in the democratic governance of national security and oversight of the activities of security institutions, the role of the Parliament, as the highest standing political authority, acting for the interests of the people is extremely important. The Parliament, as the highest legislator sets scopes for the activity, accountability and control of security institutions. Efficient parliamentary oversight increases the quality of accountability of security institutions and protects the society from arbitrary, inappropriate or repressive governance. A democratic governance system requires efficient oversight of secret activities. This objective can be achieved, first of all, via independent, powerful institutions and the system that provides oversight of personal data collection. The oversight is not limited to parliamentary oversight only, the development of governmental, judicial and independent institutions is not less important. This Paper presents experience and analysis of the development of the oversight system over the activities of the security institutions of Georgia and other democratic countries. The Paper provides the comparative analysis of experiences of Georgian and foreign countries about the oversight of the activities of security institutions and personal data protection in secret activities. The Paper puts some issues for discussion concerning the actual matters of the reform of the control system over the activities of security institutions, providing the considerations about establishing new, independent oversight institutions.

Ethical considerations related to personal data collection and reuse: trust and transparency in language and speech technologies

Ethical considerations related to personal data collection and reuse: trust and transparency in language and speech technologies

Data Protection Considerations in Competition Law Assessments: A Qualitative Document Analysis of EU Decision Texts

Abstract Personal data are both protected by a fundamental right and serves as a source of market power. As such, a complex interplay between data protection and competition law arises, sparking debate among policymakers and scholars on whether to incorporate data protection considerations (DPCs) in competition law assessments. Proponents argue that competition cases involving such an interplay require a normative contribution from data protection law, while opponents emphasize the practical challenges of considering data protection as a non-economic public policy objective. We identify nine ways in which data protection might ultimately surface in competition law assessments, categorized into five areas: (i) competition enforcement actions, (ii) existing legal and regulatory framework, (iii) personal data collection, (iv) exclusionary abuses, and (v) alleviation of competition concerns. Using a multiple-step approach for qualitative document analysis, we explore how these considerations have surfaced in the European Commission’s decisional practice through a dataset of 2.041 EU competition decision texts based on articles 101 TFEU and 102 TFEU and the EU Merger Regulation. We identify 53 decisions where DPCs have surfaced, especially in the information and communication industry, where they are more frequently subjected to commitments. In line with the evolving literature, we observe an increasingly integrationist trend as these considerations surface more frequently, particularly since the adoption of the General Data Protection Regulation in 2016 and the Digital Markets Act proposal in 2020. We also find a pattern where data protection provisions are included in commitments as a ‘tick-the-box’ exercise. Several influential alleviations of competition concerns suggest that the Commission is more comfortable using data protection to approve transactions unconditionally rather than as a substantive argument for commitments. We conclude by making a case for a more collaborative approach based on the European Court of Justice’s recent Meta Platforms (2023) judgment. Data protection should be considered in competition law assessments if its normative contribution is required. Such a stance would simply align with the internal logic of competition law without unlawfully expanding its material scope.

Consumer Data Collection Strategies in Two-Sided Platforms: The Role of Data Ownership Assignment and Privacy Concerns

Recognizing data as the new oil of the digital economy, two-sided platforms have invested heavily in collecting consumer data. However, issues surround privacy concerns and conflicts over data ownership. More importantly, should consumers retain ownership of their personal data? This paper models a two-sided platform under different data ownership structures and explores the effect of data ownership assignment, consumer privacy concerns, and network externalities on Consumer Data Collection (CDC) strategies. Game theoretic results suggest that, with a low data collection compensation, leaving data ownership with consumers increases the platform's inclination toward investing in CDC strategies when the cost of personal data protection is low and the loss of consumer data ownership is high. However, in cases with high data collection compensation, this inclination diminishes, indicating a decreased desire for CDC investment. Interestingly, when data ownership is assigned to consumers, heightened consumer privacy concerns lead to consumers providing less personal data, but the platform may be more incentivized to invest in CDC. Further, allowing consumers to hold on to data does not always increase consumer surplus, as the latter depends on the trade-off between the costs of data ownership shift (i.e., both personal data protection costs and data collection compensation) and the benefits attached to the data. When data collection compensation is relatively low, conflicting views on data ownership may arise between the platform and consumers.

The Privacy/Antitrust Curse: Insights from GDPR Application in Competition Law Proceedings

In response to the emergence of large online platforms whose business model revolves around the collection and processing of personal data, it is usually suggested that competition and data protection are synergistic, hence requiring an integrated approach. In this respect, Europe represents the testing ground for evaluating how privacy breaches may inform antitrust investigations. Indeed, the General Data Protection Regulation (GDPR) on the one side and the German Facebook antitrust decision on the other side are considered the benchmarks of this new stance aimed at linking market power and data power. This paper tests the concrete viability of such an approach, analyzing how data protection rules and principles have been applied in antitrust proceedings by the European Commission and national competition authorities. Notably, the paper aims at demonstrating the fallacy of the narrative which describes the relationship between privacy and antitrust in terms of synergy and complementarity. Furthermore, the paper maintains that the principles recently affirmed by the European Court of Justice in Meta do not appear conclusive in addressing the issue. The strategic use of privacy as a business justification to pursue anticompetitive advantages currently addressed in the numerous Apple ATT investigations indeed shows the tension between these areas of law. Therefore, rather than strengthening the antitrust enforcement against gatekeepers and their data strategies, the inclusion of privacy harms in antitrust proceedings turns out to be a potential curse for competition authorities, providing players with an opportunity for regulatory gaming to undermine the antitrust enforcement. JEL Codes: D83, K21, L12, L4

Using Wearable Technology to Detect, Monitor, and Predict Major Depressive Disorder—A Scoping Review and Introductory Text for Clinical Professionals

The rising popularity of wearable devices allows for extensive and unobtrusive collection of personal health data for extended periods of time. Recent studies have used machine learning to create predictive algorithms to assess symptoms of major depressive disorder (MDD) based on these data. This review evaluates the clinical relevance of these models. Studies were selected to represent the range of methodologies and applications of wearables for MDD algorithms, with a focus on wrist-worn devices. The reviewed studies demonstrated that wearable-based algorithms were able to predict symptoms of MDD with considerable accuracy. These models may be used in the clinic to complement the monitoring of treatments or to facilitate early intervention in high-risk populations. In a preventative context, they could prompt users to seek help for earlier intervention and better clinical outcomes. However, the lack of standardized methodologies and variation in which performance metrics are reported complicates direct comparisons between studies. Issues with reproducibility, overfitting, small sample sizes, and limited population demographics also limit the generalizability of findings. As such, wearable-based algorithms show considerable promise for predicting and monitoring MDD, but there is significant room for improvement before this promise can be fulfilled.

Data vulnerability and privacy risk among hotel guests who share personal data

This research explores the guests’ perception toward data vulnerability and its impact on the privacy risk, privacy concern, and the perceived benefits of sharing personal data with hotels, which is in response to rising concerns about the personal data collection for service facilitation in hotels. A proposed research framework that explains the antecedents and outcomes of hotel guests’ privacy risk and privacy concern that is related to personal data sharing was examined using the generalized structured component analysis with measurement errors incorporated (GSCAM), the necessary condition analysis (NCA), and a fuzzy-set qualitative comparative analysis (fsQCA). The results expand the antecedents → privacy concerns → outcomes (APCO) model by determining a set of salient variables, such as data access, data breach vulnerabilities, privacy risk, and concern in regards to determining hotel guests’ perceived benefits of sharing personal data. This study provides valuable insights into privacy dynamics, enabling hotel professionals to develop targeted marketing strategies prioritizing both data utilization and guest privacy. It also suggests enhancing data security measures to mitigate concerns and foster trust among guests.

Putting Interests of Digital Nagriks First: Digital Personal Data Protection (DPDP) Act 2023 of India

The increasing application of artificial intelligence (AI) and the extensive collection, storage and analysis of personal data by service providers have heightened privacy concerns. To address unauthorised use and potential misuse of personal information, the Government of India introduced the Digital Personal Data Protection (DPDP) Act on 11 August 2023 aimed at enhancing the living standards of its digital citizens, termed as ‘digital nagriks’ in this study. This research evaluates the DPDP Act’s impact on digital nagriks across six sections, starting with an introduction to the necessity of privacy legislation and an overview of global privacy laws from countries like Singapore, the European Union and China. It then explores the origin and fundamental aspects of the DPDP Act, leveraging the literature to critically analyse its implications for privacy. The study presents observations on the Act’s current state, recommends adjustments for balancing privacy with innovation and security and highlights the need for stronger enforcement mechanisms to protect digital nagriks effectively. It concludes that while the DPDP Act is a positive advancement, explicit exceptions in future regulations could further refine this balance.

The Digital Personal Data Protection Act, 2023: An Ambitious Government Step Towards Ensuring Its Wide Reach

This article is divided into three major segments. The initial section offers a concise overview of the requisite data protection laws in India, aiming to regulate and oversee the collection, processing and utilisation of personal data. The second section delves into an in-depth examination of the Digital Personal Data Protection Act, 2023 (the Act), accompanied by illustrative examples and its scope of applicability. The concluding part presents an analysis of the Act, focusing on its efforts and challenges in safeguarding wide reach as well as its implications for rural populations.

Perspective of Sharia Economic Law and Positive Law for Non-Cash Payment Qris Users in Indonesia According to The SDG

Objective: In the practice of digital payment method transactions using QR codes, it is necessary to be careful about counterfeiting QR codes by parties who violate the law or are irresponsible. Theoretical Framework: This research aims to explain and analyze legal protection for consumers in non-cash payment transactions based on QRIS (Quick Response Code Indonesian Standard) Positive Legal Perspective and Sharia Economic Law Perspective with a normative juridical approach. Method: In this research the author uses a statutory approach in carrying out normative research. This approach relies on various legal bases studied, which in this case relate to regulations regarding legal protection for consumers in QRIS (Quick Response Code Indonesian Standard) based non-cash payment transactions, Positive Law and Sharia Economic Law Perspectives. Results and Discussion: Research results Analysis of Legal Protection for Consumers in Non-Cash Payment Transactions Based on QRIS (Quick Response Code Indonesian Standard) Positive Legal Perspective relates to preventive legal protection, apart from the general regulations regarding consumer protection contained in the Consumer Protection Law no. 8 of 1999, for QRIS consumers there are significant regulations that govern. Bank Indonesia has issued Regulations for Members of the Board of Governors 21/18/PADG/2019 concerning Implementation of the National Standard Quick Response Code, Bank Indonesia Regulation Number 22/20/PBI/2020 concerning Bank Indonesia Consumer Protection, Bank Indonesia Regulation Number 18/40/PBI/ 2016 concerning Implementation of Payment Transaction Processing, Bank Indonesia Regulation Number 20/6/PBI/2018 concerning Electronic Money. Research Implications: Then, based on the Sharia Economic Law Perspective, it is reviewed from the sadd dzari'ah theory regarding the collection of personal data, which was originally permitted because it contained benefits, but in terms of the goals to be achieved, it could potentially end in loss and harm if there was no protection from the Government. Originality/Value: Efforts to protect personal data are very important because if it is not regulated by law, there is a possibility of personal data being leaked. Therefore, it is potentially dangerous when the protection of personal data is not regulated in law which is very detrimental to consumers due to the risk of unintentional breaches.

Transparency and consent as the main principles of personal data protection in Ukraine

The rapid digitization of the modern world has led to an increase in the collection and processing of personal data. The principles of transparency and consent have become crucial for citizens to understand how their data is being used and to be able to give their voluntary consent to its processing. Ukraine is actively adapting its legislation to EU standards in the field of personal data protection. In particular, the General Data Protection Regulation (GDPR) affects approaches to data collection and processing. Examining transparency and consent in the context of these changes can help identify which aspects of the law need special attention. Citizens are becoming increasingly cautious about who they trust with their data. This article analyzes and evaluates the role and impact of the principles of transparency and consent on the effective mechanism of personal data protection in Ukraine, taking into account modern technological and legislative challenges. Studying these principles demonstrates their importance and relevance in today’s digital society. The principle of transparency determines the need for accessible and understandable information for data subjects regarding the processing of their data. Openness is a fundamental requirement for maintaining trust between organizations and citizens. Providing the ability to control and regulate their data allows data subjects to play a more active role in the processing and use of their personal data. The principle of consent, in turn, emphasizes the voluntary and informed nature of consent to data processing. The consent of the data subject determines the basis for the legal processing of personal data, ensuring harmony between the rights of citizens and the interests of organizations. As technology advances and legislation changes, transparency and consent become even more important aspects. They help build trust between organizations and citizens, ensure responsible use of personal data, and empower individuals to control their own information.

The relationship between nurses' burnout status and their intention to leave during the COVID-19 pandemic process.

The aim of this research is to determine the relationship between nurses' burnout status and their intention to leave the job during the COVID-19 pandemic. The population of the descriptive study, which seeks a relationship, consists of nurses working in State Hospital, the sample consists of 213 nurses who agreed to participate in the research between April 2021 and August 2021. Data were collected using the 'Personal Data Collection Form', 'Burnout Scale' and 'Intention to Leave Scale'. Ethics committee approval was obtained for the study. Of the participants, 75.6% were women, 91.1% cared for patients with a diagnosis of COVID-19. The participants' Burnout Scale mean score was 4.34 ± 1.10, and the Intention to Leave Scale mean score was 2.94 ± 1.04. The relationship between burnout and age, gender, marital status, income status, unit of work, professional experience, choosing the profession voluntarily, being happy to do the joband caring for a patient with COVID-19 was found to be statistically significant (p < 0.05). It has been concluded that age, income status, unit of work, professional experience, choosing the profession willingly and being happy to do the job affect the intention to leave the job. A positive and significant relationship was found between the mean scores of the Burnout Scale and the mean scores of the Intention to Leave Scale. This study determined that as nurses' burnout level increased, their intention to quit their jobs increased.

Navigating GDPR Compliance: The Intersection of Data Governance, Accountability, and Organizational Culture

This Abstract highlights the GDPR's important role in shaping data protection practices within the EU and its broader implications for data governance. The GDPR harmonizes data protection laws across EU, establishing comprehensive guidelines for the collection, processing, storage, and transfer of personal data. The GDPR directs significant penalties for non-compliance, thereby reinforcing the importance of adhering to data protection standards. Additionally the GDPR also validates the principles of lawfulness, fairness, transparency, and accountability in the processing of personal data.

Enhancing privacy policy comprehension through Privacify: A user-centric approach using advanced language models

As the digital age advances, the collection, usage, and dissemination of personal data have become critical concerns for users, regulators, and the cybersecurity community. Questions surrounding the extent of identifiable data collection, its usage, sharing, selling, and the mechanisms of consent are increasingly central to discussions on user data privacy. These issues highlight the need for effective management and comprehension of privacy policies. To this end, this paper introduces Privacify— a production-ready web application designed to enhance the accessibility and understandability of privacy policies, thus empowering users to make more informed decisions about their data. At its backend, Privacify leverages a combination of text segmentation, summarization using Large Language Model (LLM), and map-reduce technologies to facilitate BASE analysis for single-document insights and WRT and REV for comprehensive cross-document analysis. Designed with a user-centric approach, Privacify features an intuitive interface that presents all relevant user privacy information in easy-to-understand language, complete with a detailed explainability component. This design not only simplifies privacy policies but also aids users in effortlessly navigating complex privacy terms, significantly boosting their ability to protect and manage their personal information. Our evaluation employs robust methodologies, including reliability and accuracy assessments, alongside rigorous functionality verification through ROUGE metrics and human analysis, validating the system’s efficacy and performance. Privacify’s architecture promotes scalability, replicability, and seamless deployment, advancing the domain of user data protection through improved privacy comprehension.

Data Privacy Vis- A- Vis the Digital Personal Data Protection Act, 2023

The right to privacy is an essential human entitlement that involves an individual's independence and authority over their personal data. In an era dominated by digital interactions and data-driven technologies, the right to privacy has become increasingly pertinent. The concept of data privacy encompasses the protection of personal information from unauthorized access, use, and disclosure. With the proliferation of online platforms and digital services, individuals are generating vast amounts of data, raising concerns about its misuse and exploitation. Data privacy in India has become a significant issue with the increasing digitization of services and the proliferation of personal data collection by both government and private entities. In 2023, the digital data protection act was enacted to specifically deal with Data privacy as well as Data protection. This paper attempts to analyse the right to privacy vis-à-vis the digital data protection act, 2023 and this analysis explores how these regulatory provisions address the emerging challenges to the protection of sensitive personal data.

Legal regulation of protection personal data in a special period

The paper reveals the role and problems of determining the peculiarities of solving the problems of legal regulation of personal data protection in a special period as one of the conditions for the development of a modern democratic society. A detailed study of this issue was conducted, aspects of the regulatory environment and levels of personal data protection in such complex conditions were considered. Acceleration of the scale and intensity of collection and use of personal data by state bodies and economic entities to achieve the goals of their activities, as well as the expansion of opportunities and strengthening of incentives for unauthorized access to personal data and their abuse, causes the need for the state to use the most effective means and methods guarantee the right of individuals to protect their personal data. In a special period, the protection of personal data should be a priority task for the state, legal entities and individuals. Not only the information security of the state and its citizens depends on this, but also their rights and freedoms. The basic legal act regulating the protection of personal data in our country is the Law of Ukraine "On Personal Data", which aims to protect the rights and freedoms of citizens of Ukraine against improper use of their personal data. The law establishes rules for the collection, storage, processing and transfer of personal data, as well as responsibility for their improper use. In today's special conditions in Ukraine, a significant number of changes and innovations have been made to the current legislation in the field of personal data protection, a significant part of which restricts the activities of citizens. Only some of them are progressive measures aimed at the future, while others act only as a means of correcting modern uncoordinated norms and unresolved problems, which in the future may significantly hinder the building of a democratic and legal state in Ukraine, because, as historical experience shows, in special periods it is quite easy to introduce certain restrictions, but it is quite difficult to remove them afterwards. Special attention was paid to the need to develop and implement specialized legal acts that would regulate the protection of personal data in such emergency situations.

Legislative mechanisms of personal data protection in the health care system

Human rights and freedoms, guarantees of their observance and protection should be the basis of the activities of any democratic country in the world. The issue of information security becomes particularly relevant in modern conditions, because medical institutions collect and store personal data of persons who contact them, the results of laboratory and instrumental research, diagnoses, medical histories, etc. Endless reforms, changes in legislation, introduction of an electronic system in the field of health care cause a lot of discussions about individual mechanisms of its functioning and ensuring the protection of personal data. The collection of personal data must be lawful, subject to strict requirements and for a legitimate purpose. In addition, persons or organizations engaged in the collection and processing of personal information must protect it from abuse and respect the rights of data owners guaranteed by law. The reform of legislation in the field of data protection should take place in parallel with the dynamic process of development of Internet technologies, including the creation of a formalized system of legislation in the field of privacy. In addition, considerable attention should be paid to the level of awareness of citizens about how their personal data may be collected and used. In particular, the request for consent to the processing of personal data must be clear; access to own data should be simplified and their mobility should be increased for easier transfer of data from one service to another; companies and organizations must report serious security breaches in a timely manner. And of course, ensuring the appropriate level of responsibility and reporting of all those involved in personal data processing. Health care is increasingly reliant on information technology. More and more hospitals and healthcare institutions are using information and communication technologies to support and improve their work. Digital technologies are widely used in the public health care sector, including electronic prescriptions, appointments with a family doctor, records of services rendered, hospitalization, hospital discharge, etc. In this context, a wide range of eHealth tools and services have emerged. Electronic medical records are created in such a way that it is possible to transfer patient data between different medical professionals. Although digital health technologies have so many important functions, their high dependence on sensitive patient health information can cause information security issues. At the same time, a significant part of personal health data is often collected without informing patients about it.

Personalised Advertising in Social Networks: Ethical Challenges and Threats

The article provides a comprehensive analysis of the phenomenon of personalised advertising on social media, emphasising identifying and considering the ethical challenges and potential threats arising in this context. Personalisation of social media advertising raises significant ethical concerns related to privacy, data security, consumer manipulation, moral dilemmas, bias and discrimination. The study shows that while personalised advertising can increase the effectiveness of advertising campaigns and consumer satisfaction, it also compromises consumers’ anonymity and may lead to misuse of personal data. The purpose of the article is to analyse the ethical challenges and potential threats associated with personalised advertising on social media. The author examines the impact of personalised advertising on the anonymity of Internet users, their freedom of choice and other rights. The research methods are based on a comprehensive approach that includes a theoretical review of the available literature, and case studies, as well as logical analysis and synthesis of the data obtained. A comparative analysis was used to compare different approaches to the regulation of personalised advertising. This allows us to better understand the mechanisms of personalised advertising and assess its impact on individual rights and freedoms. The scientific novelty lies in the extended analysis of the relationship between personalised advertising and ethical principles in the context of digital technologies. Considerable attention is paid to the study of the impact of personalisation on the privacy and anonymity of users, as well as the potential risks and threats that may arise from the uncontrolled collection and use of personal data. There is a lack of research in this area, which necessitates the development of new theoretical approaches and practical recommendations that meet the current challenges of the digital age. Conclusions. The article emphasises the need to strike a balance between the commercial efficiency of advertising campaigns and the protection of users’ rights. Recommendations are offered to strengthen security measures, ensure transparency in the collection and use of data, and develop ethical norms and standards in this area. The author highlights the critical need to develop effective mechanisms for regulating and controlling personalised advertising. The article proposes the introduction of clear ethical standards and legal restrictions governing the collection, processing and use of personal data, and emphasises the importance of raising awareness of users about their rights and protection mechanisms. The author emphasises the importance of establishing ethical, transparent and responsible practices in the field of digital advertising in order to ensure respect for the privacy and rights of users.

On data minimization and anonymity in pervasive mobile-to-mobile recommender systems

Data minimization is a legal principle that mandates limiting the collection of personal data to a necessary minimum. In this context, we address ourselves to pervasive mobile-to-mobile recommender systems in which users establish ad hoc wireless connections between their mobile computing devices in physical proximity to exchange ratings that represent personal data on which they calculate recommendations. The specific problem is: How can users minimize the collection of ratings over all users while only being able to communicate with a subset of other users in physical proximity? A main difficulty is the mobility of users, which prevents, for instance, the creation and use of an overlay network to coordinate data collection. Users, therefore, have to decide whether to exchange ratings and how many when an ad hoc wireless connection is established. We model the randomness of these connections and apply an algorithm based on distributed gradient descent to solve the distributed data minimization problem at hand. We show that the algorithm robustly produces the least amount of connections and also the least amount of collected ratings compared to an array of baselines. We find that this simultaneously reduces the chances of an attacker relating users to ratings. In this sense, the algorithm also preserves the anonymity of users, yet only of those users who do not establish an ad hoc wireless connection with each other. Users who do establish a connection with each other are trivially not anonymous toward each other. We find that users can further minimize data collection and preserve their anonymity if they aggregate multiple ratings on the same item into a single rating and change their identifiers between connections.