Presentation for CPDP 2015

forbrukerrådet.no

Video: https://www.youtube.com/watch?v=xYZtHIPktQg

forbrukerrådet.no

forbrukerrådet.no

forbrukerrådet.no

Others on the issue of consent

“The framework for notice and consent is also becoming unworkable as a useful foundation for policy…

Only in some fantasy world do users actually read these notices and understand their implications before clicking..”

«Report to the President on Big Data and Privacy: a technological perspective» May, 2014.

forbrukerrådet.no

Outline

1. “Consent situations”

from a consumer

point of view

2. The consequences

of situation today

3. What should

be done?

forbrukerrådet.no

Type 1:

Classic user agreement

Opaque terms

with explicit consent

forbrukerrådet.no

The study

7 services selected based on market share and unique features

Purposely kept the study short as we did not want to replicate the length of

the Terms and Conditions

forbrukerrådet.no

Content ownership and protection against data loss

forbrukerrådet.no

Privacy: 2014 review

forbrukerrådet.no

Privacy: 2015 review

forbrukerrådet.no

Type 2: sharing information with third parties

forbrukerrådet.no

Type 2: sharing information with third parties

forbrukerrådet.no

Type 2: sharing information with third parties

forbrukerrådet.no

Type 3: no consent

forbrukerrådet.no

forbrukerrådet.no

forbrukerrådet.no

Consequences of lack of consent

• Basic privacy principles breached every day

• Consumers lack control over their own data

• Leads to chilling effect, people modify their activity online

• Mistrust is created, threatens the future of the internet

forbrukerrådet.no

What could be done?

1. Self regulation is not an option

2. The terms and conditions could be improved as well

3. Different levels of privacy must be possible

– Privacy by design and default

– Much more transparency and real opt-in and opt-out mechanisms

4. Interoperability and data portability is key

5. Enforcement of existing rules

6. The EU Data Protection Regulation

7. Better cross border legislation (Safe Harbour) and preferably global standards

8. At the end of the day, a new deal on data is necessary. Many different models proposed;

1. Data protection zones online such as the one proposed by Opera Chief Technology Officer, Håkon Wium Lie, can help, but not solve the structural problem.

2. New business models that benefit the consumers for the use of their data.

forbrukerrådet.no

Consent now

is not consent

in the future

forbrukerrådet.no http://youtu.be/FzSiQF_Y_cg

forbrukerrådet.no

Tnx! :D