Prifina released open-source standard data profiles and personal data licenses
Prifina has today released an open standard data profile and other developer tools in the open-source GitHub repository called “Liberty. Equality. Data.”
The announcement about this release was first made at the International Cyber-Security Forum in Lille (France) on January 28, 2020, where Kimmo and Valto, Prifina’s CTO and CXO respectively, are speaking about user-held data models and showcasing the types of use cases that can be built on top of user-held data profiles, with examples in the media and consumer finance.
Open-Source Standard Data Profile
Open-source standard data profile tools are tailored specifically for developers who are interested in user-centric and user-held data models. With Prifina’s tools, developers will be able to build applications that enable accessing data directly from individuals, under the individual’s prior explicit consent and knowledge, and without any exchange of raw data.
Prifina will continue to release more developer tools and products to the open-source domain, and collaborate with global developer communities and consumer-focused companies in building the best in class future applications that introduce a new paradigm in data, where users gain more direct value in exchange for access to their data and their privacy and right to choose is respected.
The released open-source data profile standard is based on the user-held data approach: individuals have tools that enable granting access to a third party, with certain provisions. For instance, individuals can determine the duration of third-party access and the extent of rights given to a third party. Individuals can also manage these permissions and revoke them.
This data profile standard is released in order to provide developers more visibility into what types of data they can be expected to retrieve, what types of queries they can be expected to run and, more generally, what types of use cases can be built on top of the user-held data standards. The open source repository includes a GraphQL endpoint that can be downloaded and queried, which returns dummy data for testing purposes. The repository can be found here.
System of Permissions to Access Personal Data Profiles
Prifina also released a proposal for a unified system of permissions (licenses) to access personal data profiles. Such permissions will play an important role in determining the scope of rights which individuals can grant in their relations with third-party service providers. They will be also used in order to help individuals realize the value of their personal data and with whom that data is shared.
Read full Proposal for Personal Data Licenses published in Harvard Journal of Law and Technologies here.
Prifina’s proposed system of permissions differentiates various levels of anonymity: from the most restrictive license (where the individual interacts with third-party service providers anonymously) to most free (where the third-party service provider is given rights to track the individual, store, bundle individual customer’s data, and with individual’s permission share that data with third-parties or even sell it.
The graph below provides a quick overview of the types of data sharing licenses:
As we are entering the next generation of the Internet which will be based on the use of such commodities as personal data, labor, resources, services, while the interaction between individuals will be based on trust, automated agreements and personal AI tools that help maximize individual utility. Therefore, licenses for the use of personal data will be of an ex ante nature and the scope of permissions to access personal data will be determined by the individual herself. In other words, the individual will be able to communicate the terms of access and use of personal data profiles before or at the time when access to their personal data profiles is provided.
This will provide more legal certainty and clarity. In addition, individuals will be able to change data access conditions at any time. User-held data models are likely to play an important role in facilitating competition between service providers in order to provide valuable services that are as close as possible to the interests and expectations of service users.