There is a newer version of this record available.

Conference paper Open Access

Personal Data Stores and the GDPR's lawful grounds for processing personal data

Janssen, Heleen; Cobbe, Jennifer; Norval, Chris; Singh, Jatinder

Dublin Core Export

<?xml version='1.0' encoding='utf-8'?>
<oai_dc:dc xmlns:dc="" xmlns:oai_dc="" xmlns:xsi="" xsi:schemaLocation="">
  <dc:creator>Janssen, Heleen</dc:creator>
  <dc:creator>Cobbe, Jennifer</dc:creator>
  <dc:creator>Norval, Chris</dc:creator>
  <dc:creator>Singh, Jatinder</dc:creator>
  <dc:description>Personal Data Stores (‘PDSs’) entail users having a (physical or virtual) device within which they themselves can, in theory, capture, aggregate, and control the access to and the transfer of personal data. Their aim is to empower users in relation to their personal data, strengthening their opportunities for data protection, privacy, and/or to facilitate trade and monetisation. As PDS technologies develop, it is important to consider their role in relation to issues of data protection. The General Data Protection Regulation requires that the processing of user data be predicated on one of its defined lawful bases, whereby the Regulation does not favour any one basis over another. We explore how PDS architectures relate to these lawful bases, and observe that they tend to favour the bases that require direct user involvement. This paper considers issues that the envisaged architectural choices surrounding the lawful grounds may entail. </dc:description>
  <dc:subject>data protection</dc:subject>
  <dc:subject>lawful grounds for processing</dc:subject>
  <dc:subject>personal data stores</dc:subject>
  <dc:title>Personal Data Stores and the GDPR's lawful grounds for processing personal data</dc:title>
All versions This version
Views 28724
Downloads 26541
Data volume 43.8 MB2.0 MB
Unique views 24423
Unique downloads 2029


Cite as