“Identity Management by Design” with a Technical Mediator Under the GDPR - Privacy and Identity Management
Conference Papers Year : 2021

“Identity Management by Design” with a Technical Mediator Under the GDPR

Abstract

The Charter of Fundamental Rights of the European Union (CFR) and the GDPR refer to the protection of personal data and personal identities. In the General Data Protection Regulation (GDPR) the term of personal data contains the protection of the physical, physiological, genetic, psychological, economic, cultural and social identities, Art. 4 para. 1 GDPR. This legal definition introduces the understanding of “identity” in a pluralistic sense. Thus, the notion of pluralistic and dynamic identities should be translated in a “privacy by design” mechanism. This notion of pluralistic identities would mirror a differentiated protection for personal identities based the right of informational self-determination, Art. 7, 8 CFR. Thus, the data subject should be enabled to develop the personal identity in an online-context in the same manner as it is done in an offline-context. This includes the opportunity for the data subject to control personal identities in their static “Idem-part” such as the name and their dynamic “Ipse-part” realized by the behavior (based on the philosophical theory by Ricœur). These parts of the personal identity should be visualized with a “dashboard” that allows the data subject to control and manage the personal identities. This “dashboard” should include an impartial technical mediator that embodies an effective, non-discriminatory and structured process. Such a technical mediator should be specified in an “identity management by design” mechanism based on Art. 25 GDPR in order to achieve an effective privacy protection in the era of Big Data.
Fichier principal
Vignette du fichier
498598_1_En_10_Chapter.pdf (312.84 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03703759 , version 1 (24-06-2022)

Licence

Identifiers

Cite

Anne Steinbrück. “Identity Management by Design” with a Technical Mediator Under the GDPR. 15th IFIP International Summer School on Privacy and Identity Management (Privacy and Identity), Sep 2020, Maribor, Slovenia. pp.169-186, ⟨10.1007/978-3-030-72465-8_10⟩. ⟨hal-03703759⟩
35 View
14 Download

Altmetric

Share

More