Conference paper Open Access

Personal Data Stores and the GDPR's lawful grounds for processing personal data

Janssen, Heleen; Cobbe, Jennifer; Norval, Chris; Singh, Jatinder

Citation Style Language JSON Export

  "publisher": "Zenodo", 
  "DOI": "10.5281/zenodo.3234902", 
  "language": "eng", 
  "title": "Personal Data Stores and the GDPR's lawful grounds for processing personal data", 
  "issued": {
    "date-parts": [
  "abstract": "<p><em>Personal Data Stores&nbsp;</em>(&lsquo;PDSs&rsquo;)&nbsp;entail users having a (physical or virtual) device within which they themselves can, in theory, capture, aggregate, and control the access to and the transfer of personal data. Their aim is&nbsp;to empower users&nbsp;in relation to their personal data, strengthening their opportunities for data protection, privacy, and/or to facilitate trade and monetisation. As PDS technologies develop,&nbsp;it is important to consider their role in relation to issues of&nbsp;data protection.&nbsp;The General Data Protection Regulation requires that the processing of user data be predicated on one of its defined lawful bases, whereby the Regulation does not favour any one basis over another.&nbsp;We explore how PDS architectures relate to these lawful bases, and observe that they tend to favour the bases that require direct user involvement. This paper considers issues that the envisaged architectural choices surrounding the lawful grounds may entail.&nbsp;</p>", 
  "author": [
      "family": "Janssen, Heleen"
      "family": "Cobbe, Jennifer"
      "family": "Norval, Chris"
      "family": "Singh, Jatinder"
  "version": "1.0", 
  "type": "paper-conference", 
  "id": "3234902"
All versions This version
Views 285261
Downloads 258218
Data volume 42.7 MB40.7 MB
Unique views 242232
Unique downloads 195192


Cite as