Data portability as a tool for audit

Zoe Zwiebelmann; Tristan Henderson

doi:10.1145/3460418.3479343

Data portability as a tool for audit

Zoe Zwiebelmann, Tristan Henderson

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

4 Citations (Scopus)

5 Downloads (Pure)

Abstract

Pervasive systems are almost omnipresent in their collection andprocessing of personal data. Understanding what these systems ar edoing is essential for trust, and to ensure that data being collected are accurate. Auditing these systems can help to determine the accuracy of these data. Such audit may take place internally by systems designers, but external audit is important for accountability.

In this paper we explore whether users can conduct their own external audit of the systems with which they interact. In particular, we use the Right to Data Portability afforded to data subjects through the General Data Protection Regulation. Using fitness trackers, we collect and upload running data to a set of data controllers. By using data portability to then obtain a copy of our data, we compare the data held by the controllers with our ground-truth data. We find some inaccuracies in the data, but also that audit can be impeded by insufficient explanations from data controllers.

Original language	English
Title of host publication	UbiComp '21: Adjunct Proceedings of the 2021 ACM International Joint Conference on Pervasive and Ubiquitous Computing and Proceedings of the 2021 ACM International Symposium on Wearable Computers
Publisher	ACM
Pages	276–280
Number of pages	5
ISBN (Electronic)	9781450384612
DOIs	https://doi.org/10.1145/3460418.3479343
Publication status	Published - 21 Sept 2021
Event	Workshop on Reviewable and Auditable Pervasive Systems (WRAPS) - Virtual Duration: 25 Sept 2021 → 25 Sept 2021 https://wraps-workshop.github.io/

Workshop

Workshop	Workshop on Reviewable and Auditable Pervasive Systems (WRAPS)
Abbreviated title	WRAPS
Period	25/09/21 → 25/09/21
Internet address	https://wraps-workshop.github.io/

Keywords

GDPR
Data portability
Activity tracking
Audit

Access to Document

10.1145/3460418.3479343Licence: Other

wraps21-portability-audit
Copyright © 2021 held by the owner/author(s). Publication rights licensed to ACM. This work has been made available online in accordance with publisher policies or with permission. Permission for further reuse of this content should be sought from the publisher or the rights holder. This is the author created accepted manuscript following peer review and may differ slightly from the final published version. The final published version of this work is available at https://doi.org/10.1145/3460418.3479343.
Accepted author manuscript, 88 KBLicence: Other

Cite this

@inproceedings{c358d6d4585d40ffaee98faec10dffc5,

title = "Data portability as a tool for audit",

abstract = "Pervasive systems are almost omnipresent in their collection andprocessing of personal data. Understanding what these systems ar edoing is essential for trust, and to ensure that data being collected are accurate. Auditing these systems can help to determine the accuracy of these data. Such audit may take place internally by systems designers, but external audit is important for accountability. In this paper we explore whether users can conduct their own external audit of the systems with which they interact. In particular, we use the Right to Data Portability afforded to data subjects through the General Data Protection Regulation. Using fitness trackers, we collect and upload running data to a set of data controllers. By using data portability to then obtain a copy of our data, we compare the data held by the controllers with our ground-truth data. We find some inaccuracies in the data, but also that audit can be impeded by insufficient explanations from data controllers.",

keywords = "GDPR, Data portability, Activity tracking, Audit",

author = "Zoe Zwiebelmann and Tristan Henderson",

year = "2021",

month = sep,

day = "21",

doi = "10.1145/3460418.3479343",

language = "English",

pages = "276–280",

booktitle = "UbiComp '21: Adjunct Proceedings of the 2021 ACM International Joint Conference on Pervasive and Ubiquitous Computing and Proceedings of the 2021 ACM International Symposium on Wearable Computers",

publisher = "ACM",

address = "United States",

note = "Workshop on Reviewable and Auditable Pervasive Systems (WRAPS), WRAPS ; Conference date: 25-09-2021 Through 25-09-2021",

url = "https://wraps-workshop.github.io/",

}

Zwiebelmann, Z & Henderson, T 2021, Data portability as a tool for audit. in UbiComp '21: Adjunct Proceedings of the 2021 ACM International Joint Conference on Pervasive and Ubiquitous Computing and Proceedings of the 2021 ACM International Symposium on Wearable Computers. ACM, pp. 276–280, Workshop on Reviewable and Auditable Pervasive Systems (WRAPS), 25/09/21. https://doi.org/10.1145/3460418.3479343

Data portability as a tool for audit. / Zwiebelmann, Zoe; Henderson, Tristan.
UbiComp '21: Adjunct Proceedings of the 2021 ACM International Joint Conference on Pervasive and Ubiquitous Computing and Proceedings of the 2021 ACM International Symposium on Wearable Computers. ACM, 2021. p. 276–280.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Data portability as a tool for audit

AU - Zwiebelmann, Zoe

AU - Henderson, Tristan

PY - 2021/9/21

Y1 - 2021/9/21

N2 - Pervasive systems are almost omnipresent in their collection andprocessing of personal data. Understanding what these systems ar edoing is essential for trust, and to ensure that data being collected are accurate. Auditing these systems can help to determine the accuracy of these data. Such audit may take place internally by systems designers, but external audit is important for accountability. In this paper we explore whether users can conduct their own external audit of the systems with which they interact. In particular, we use the Right to Data Portability afforded to data subjects through the General Data Protection Regulation. Using fitness trackers, we collect and upload running data to a set of data controllers. By using data portability to then obtain a copy of our data, we compare the data held by the controllers with our ground-truth data. We find some inaccuracies in the data, but also that audit can be impeded by insufficient explanations from data controllers.

AB - Pervasive systems are almost omnipresent in their collection andprocessing of personal data. Understanding what these systems ar edoing is essential for trust, and to ensure that data being collected are accurate. Auditing these systems can help to determine the accuracy of these data. Such audit may take place internally by systems designers, but external audit is important for accountability. In this paper we explore whether users can conduct their own external audit of the systems with which they interact. In particular, we use the Right to Data Portability afforded to data subjects through the General Data Protection Regulation. Using fitness trackers, we collect and upload running data to a set of data controllers. By using data portability to then obtain a copy of our data, we compare the data held by the controllers with our ground-truth data. We find some inaccuracies in the data, but also that audit can be impeded by insufficient explanations from data controllers.

KW - GDPR

KW - Data portability

KW - Activity tracking

KW - Audit

UR - https://wraps-workshop.github.io/

U2 - 10.1145/3460418.3479343

DO - 10.1145/3460418.3479343

M3 - Conference contribution

SP - 276

EP - 280

BT - UbiComp '21: Adjunct Proceedings of the 2021 ACM International Joint Conference on Pervasive and Ubiquitous Computing and Proceedings of the 2021 ACM International Symposium on Wearable Computers

PB - ACM

T2 - Workshop on Reviewable and Auditable Pervasive Systems (WRAPS)

Y2 - 25 September 2021 through 25 September 2021

ER -

Data portability as a tool for audit

Abstract

Workshop

Keywords

Access to Document

Other files and links

Fingerprint

Cite this