Mai 2018 : de nouvelles exigences Ethiques pour les Data Management Platform (DMP) Mr David ROBERT 12 Octobre 2016

Transcription

1 Mai 2018 : de nouvelles exigences Ethiques pour les Data Management Platform (DMP) Mr David ROBERT 12 Octobre 2016

2 General data Protection Regulation The New European General Data Protection Regulation (GDPR) which aim to give citizens back control of their personal data and create a high, uniform level of data protection across the EU fit for the digital era was given their final approval by European Parliament on the 14 th April The reform also sets minimum standards on use of data for policing and judicial purposes.

3 The Specification Matrix StakeHolders Citizens Citizens Citizens + Enterprise & Institutions Citizens + Enterprise & Institutions Citizens + Enterprise & Institutions Citizens + Enterprise & Institutions Enterprise & Institutions The GDPR requirements GDPR Requirements Digital Identity Private data Ownership and linkability Data Portability / Data transfer Binding Corporate Rules (BCRs) Right to Forget / to Erasure Informed consent Minor Child Protection Data breach Responsability & Accountability Privacy By default, Privacy by Design 3 Data Protection Agencies European Data Protection Board Tools for Data Protection Officers One stop shop for complaints & Enforcement Sanctions Management

4 What the main digital services required by the GDPR? BLOCKCHAIN PASSPORT - PROOF OF EXISTENCE & WORLD CITIZENSHIP E51D1 5. Dispute resolution management and utomated Audit by the Data Protection Agencies 2. Linking Self- Sovereign Digital Identities with Enterprise DataLakes (Compatible with Zero Knowledge Proof ) 1. Self-Sovereign Digital Identities for all Citizens SMART CONSENT 3. Data Ownership and Access control managed by clear Informed consent (Opt In / Opt Out) GIVEN NAME SATOSHI KYC with Zero Knowledge Proof FR1ROBERTDAVID FR1ROBERTDAVID Data logistic Watermarking &tracking 4 Enterprise A ENTERPRISE S DATA LAKE 4. Data Portability and traceability with/without Erasure Enterprise B ENTERPRISE S DATA LAKE

5 The benefits What are the benefits for the Citizens? Reconnecting Citizens with the Ownership of their Information galaxie. 5

6 The benefits But There are Benefits for the all stakeholders! The Private & Public sector will be permissioned to deliver 6 trusted advanced data Services to their Consumer and Fellow Citizens SINGLE DIGITAL MARKET!!!

7 CEN Workshop 84 Self-Sovereign Identifier(s) for Personal Data Ownership and Access Control How to make the General Data Protection Regulation ACTIONABLE for all Stakeholders?

8 The DNS What happens when you type « in your browser? Your browser will ask different servers until one of them finds your answer DNS query where is ain.org? Don t know Don t know is at ! 8 Ask them Ask them Ask them

9 My data What if we could have the same service for our personnal data? Where are my data? Who is using it? Who DNS DataCenter Country Identity Level Last Usage Consentment (OptIn/ OptOut) AOK AOK.de Munich eidas 2 12 April 2016 FULL Paypal Paypal.com Luxembourg eidas 2 01 April 2016 TACIT BNP Paribas Bnpparibas.com Paris eidas 3 Basel 3 12 April 2016 FULL Neckerman neckermann.de Hamburg Partial 01 April 2016 PARTIAL TESCO Tesco.co.uk Manchester Partial 01 January 2016 REVOKED 9..

10 My data What if we could have the same service for our personnal data? Where are my data? Who is using it? Who DNS DataCenter Country Identity Level Last Usage Consentment (OptIn/ OptOut) AOK AOK.de Munich eidas 2 12 April 2016 FULL Paypal Paypal.com Luxembourg eidas 2 01 April 2016 TACIT Global Data Positioning System BNP Paribas Bnpparibas.com Paris eidas 3 Basel 3 GDPS 12 April 2016 FULL Neckerman neckermann.de Hamburg Partial 01 April 2016 PARTIAL TESCO Tesco.co.uk Manchester Partial 01 January 2016 REVOKED 10..

11 Promoting the first Smart Data & Privacy Standard Individual personal data Auditable address Number THE BLOCKCHAIN MAIN COMPONENTS 11 Designed to serve GDPR s principles Paving the road to the Global Data Positioning System on the Blockchain

12 12 The standardization bodies and the promoters

13 Joint the Standarization Group Contact point +33 (0) (0)

14 Big Data & Privacy The EU Passenger Named record

15 True Story Zero Security in a Thalys Trip from Paris Brussels Brussels to Eindhoven When a non dematerialized ticket is lost, the train manager has zero knowledge about who was traveling on seat 32- Coach 16 on Train number : THA Anyone can travel with the paper based ticket with fake identity. 15

16 Any test Pilot? EU Passenger Name Record (PNR) EURONET Consumer Database 1. Generate Identities 5. ANY Dematerialized Smart documents Contracts Tickets, Invoices, certificate of Payment, proof of travel, Insurance, refund forms. 2. Know You Customer Federation of Digital ID providers but also capture of passport, ID Via scanner or mobile App Blockchain Notarisation of Information Federation of Digital ID providers but also capture of passport, ID Via scanner or mobile App 3. Certified Blockchain Personal Address BLOCKCHAIN PASSPORT - PROOF OF EXISTENCE & WORLD CITIZENSHIP E51D1 GIVEN NAME SATOSHI

17 Authentication 1 Blockchain Access to the ÆVATAR is strictly controlled to enforce your privacy. Authentication can be performed using multiple mechanisms 17

18 QR Code Blockchain The Address Hash is stored on user device as QR Code Registration without transmitting clear text attributes ÆVATAR Address QR Code Blockchain 18 This QR code can be scanned by merchants or other providers to initiate requests for personal data : agh2e2tt2eet22eee2ty5ee4r54te54te454te

19 Travel Search Blockchain Direct Dialog with Zero Private information exchange 19

20 Travel Basket Blockchain Purchase & Payment Blockchain 20 THALYS 9993 Seat 45 Coach 9 7 Th October 2016 Blockchain address : agh2e2tt2eet22eee2ty5ee4r54te54te454te This is the correct purchased Geoloc The traveller is European and over 18 yrs

21 Scan your Seat Self-Checking Blockchain ÆVATAR Blockchain CARRIER 21 Self checking on THALYS 9993 Seat 45 Coach 9 7 Th October 2016 Authenticated Blockchain address used: agh2e2tt2eet22eee2ty5ee4r54te54te454te This is the correct purchased Geoloc The traveller is European and over 18 yrs Police forces time-limited controlled (not readable after 6 months)

22 Integrated control by Travel Assistant Blockchain 22 Scan QR Blockchain CARRIER CONTROL Self checking on THALYS 9993 Seat 45 Coach 9 SYSTEM 7 Th October 2016 Authenticated Blockchain address used : agh2e2tt2eet22eee2ty5ee4r54te54te454te This is the correct purchased Geoloc The traveller is European and over 18 yrs Police forces time-limited controlled (not readable after 6 months)