ESR Tommaso Crepax at Panel on Data Portability organised by the SoBigData++ project.

On November 28th, ESR Tommaso Crepax was invited to participate as speaker to an Awareness Panel on Data Portability organised by the SoBigData++ project.

The speakers Dr. Denise Amram (SSSA), Kyle Mc Kibbin (University of Ghent) and our Tommaso Crepax (SSSA) discussed issues of portability as embedded in relevant pieces of regulations. Opening with an explanation on article 20 GDPR from Dr. Amram, Mc Kibbin discussed the interplay between portability in GDPR in respect to the Data Governance Act and Data Act. Closing the debate, Tommaso highlighted that, contrary to what most data scientist would believe –that is, data protection and governance laws are obstacles to research—there are plenty of cases where laws such as the Open Data Directive or the Free flow of Non-Personal Regulation actually open up or give access to useful datasets – according to some specific conditions. Re- searchers, it seems, have more opportunities to access data than they think they have!

 

The recording of the event can be found here.

LeADS and LiderLab co-organize Workshop on ethical and legal issues in technology

The LeADS project will co-organize a workshop with the LiderLab titled “Dealing with ethical legal issues in technology development: the current approaches adopted in ongoing projects” in a hybrid format at the Aula Magna Storica – Scuola Superiore Sant’Anna, Pisa Italy on March 3rd 2023 12.00 – 13.30.

Program:

12.00 – 12.10 – Greetings and introduction to the workshop, D. Amram

12.10 – 12.20 – The VALKYRIES ecosystem and the ethical-legal issues, D. Amram & G. Comandé

12.20 – 12.30 5GSOSIA Proof of concept and ethical-legal remarks, V. Lionetti & M. Gagliardi & L. Valcarenghi

12.30 – 12.40 The RESCUER toolkit, E. Keremidou

12.40 – 12.50 The FACILITATE project and its challenges, J. M. C. Blom & D. Mascalzoni

12.50 – 13.20 Hands up Session: Q&A and Discussion, All

13.20 – 13.30 Conclusions: LeADS and the legality attentive generation of data scientists, G. Comandé

Please register to the event here and the link for event can be found here

 

ESRs in Podcasts: Xengie Doan on Interdisciplinary Research

ESR Xengie Doan got invited on the Ethical allies podcast that aims to uncover what really happens with ethical tech, digital rights, and more. In the episode “Data Science & Law: How Interdisciplinary Research Addresses Future Challenges”, Xengie addresses various questions on the importance of an interdisciplinary perspective in data science and law – despite both being fundamentally different.

Professionals from both fields would benefit from having a deeper understanding of the other perspective: data scientists should understand the fundamentals of the GDPR to find better and more flexible ways of implementing it and to be more ethical within those guidelines. Lawyers, on the other hand, should have a deeper understanding of the complexity of evolving technologies to find and develop an appropriate legal framework.

The Podcast can be listened to on the website of the Ethical Commerce Alliance.

ESR Qifan Yang participation at Symposium on Frontier of Smart Nomocracy & China Economic Law Annual Conference

Early-Stage Researcher Qifan Yang (ESR 1) presented her work about personal data value and protection systems in the Symposium on Frontier of Smart Nomocracy jointly sponsored and hosted by the Journal of Xi’an Jiaotong University (Social Science), Journal of the East China University of Politics & Law, SJTU Law Review, and Journal of Cyber and Information Law in Xi’an (China) on the 12th-13th of November.

As a part of the panel “Data Property Rights and Data Trading System”, she analyzed the value distributions of personal information among different subjects and across various transaction parties in the data collection, processing, and analysis process from the perspectives of communication and information economics.

Unlike ordinary trading objects, data has both basic use value “information collection” (eliminating the information asymmetry between the parties in the transaction) and potential use value “data analysis and prediction”. Personal data have little use value for information producers but have exchange value for other parties in the transaction to achieve information symmetry or expand the advantages of information asymmetry. Other available data in the market have basic use value for individual users to obtain information, but it is difficult to generate exchange value through individual collection or analysis because of its openness and accessibility. The company or platform can realize both the basic value and the potential value through data aggregation, data fusion, etc.

On the 3rd-4th of December, ESR1 Qifan Yang’s research “Personal Data Wavering between Privacy and Efficiency: Is Propertization a Good Answer?” won the third prize at the China Economic Law Annual Conference organized by China Economic Law Society in Wuhan (China). It illustrated the causes for de facto property rights in personal data, the attribution of de facto property rights in the free market, and its endogenous flaws through the Coase theorem and property theory based on law and economics.

Data sharing as a tool to enhance transparency in short-term accommodation rentals apps: EUCOM proposes a new Regulation

Short-term rental applications, such as Airbnb, have revolutionized the real estate market and tourism sector. By acting as an intermediary, the application offers peer-to-peer accommodation for a short period, growing exponentially. However, tout n’est pas rose dans la vie. Airbnb business model became a source of concern both for the traditional tourism accommodation sector and the real estate market of destinations. Labelled as a “disruptive innovation”, Airbnb has helped to construct an informal tourism accommodation sector which has impacted many cities. Lisbon is a good example of Airbnb’s impact, in a movement to renovate buildings, the Portuguese national rental law was modified, facilitating evictions and boosting the short holiday rentals market.

 

Looking at this problem, the European Commission has adopted a Proposal for a Regulation to enhance transparency in short-term accommodation rentals. With the objective of helping public authorities to ensure balance in a developing tourism sector, the Proposal aims to create a data-sharing framework between hosts and platforms to inform effective and proportionate local policies. Furthermore, reducing bureaucracy for hosts, impacting the market and facilitating the development of urban planning plans through data harmonization. Thus, the Proposal fits into the already existing policy provisions, such as GDPR, Digital Services Act, e-Commerce Directive, Platform to Business Regulation, and Data Act Proposal.

Hereinafter, I will focus this blog post on a few aspects of the Proposal which are connected to data protection, data sharing and data portability.

In an effort to create a harmonized database, Article 5 (b) sets that where hosts are natural persons, they must submit their name, national identification number, or any other identification information, address, telephone number, and mail address in order to insert their rental on the platform. Member States may require that the information provided is accompanied by supporting documents, however, it leaves it to the Member States to further regulate the format of this documentation. Article 5 (5) defines that Member States must ensure that the information and documentation submitted are retained in “a secure and confidential manner and only for a period which is necessary for the identification of the unit”, establishing the data can only be kept up until 1 year after the host’s request to remove the unit from the application’s registry.

Another very interesting section of the Proposal is the second part of Article 5 (5), which mentions that the Member States must ensure the documentation is “only used to ensure compliance with the applicable rules of the Member State concerning access to and provision of short-term accommodation rental services”. This statement opens the door to a myriad of suppositions: would it be possible to process this data for tax purposes related to short-term accommodation rental services? Article 12 of the Proposal seems to answer yes, by setting that access to information shall be granted to the competent authority responsible for “implementing rules governing the access to and the provision of short-term accommodation rental services”.

Lime e-scooter red zone example

When it comes to urban planning and public policy, Article 7 establishes that platforms must design and organize their interface in a way that makes it possible for hosts to self-declare where the rental service is located. This determination is a big step towards the regulation of the short-term rental market by the Public Sector, allowing the creation of a “short-term services map”, with “red zones” areas in which short-term rentals are forbidden similar to the ones implemented by e-scooters.

Ratio between the number of listings and the number of residences per neighborhood in the Reykjavík Capital Area.

Article 12 (3) (a) and (b) emphasizes that anonymized activity data might be shared with other public authorities tasked with developing laws, regulations and administrative provisions concerning access to and provision of short-term accommodation. This data can also be shared with entities and persons who carry out scientific research, analytical activities or develop new business models. Therefore, the Proposal removes power from platforms, giving the Public Sector the possibility to further share this data for research purposes.

Chapter III, related to “Data Reporting” creates an obligation for online platforms to share activity data and registration numbers on a monthly basis with Member States. Each Member State will create a “Single Digital Entry Point”, which will be the data entry point for the receipt and forwarding of activity data (Article 10). Each Member State will designate an authority responsible for the operation of the Single Digital Entry Point.

Article 10 also lays out a series of technical considerations related to the Single Digital Entry Point which evolves data portability. It regulates that Member States must provide a technical interface which enables platforms to provide machine-to-machine and manual transmission of activity data to the Digital Entry Points. They also must facilitate checks by platforms and competent authorities and guarantee data interoperability between the Single Digital Entry Point and with State’s documental registries for check purposes. Digital Entry Points also must guarantee data re-use, if the same information or documentation is requested by multiple registries within the same Member State.

Thus, although this is the first version of this Proposal, this future Regulation will be an interesting step forward in many aspects which include data protection, data sharing, data portability and urban public policies.

ESR Fatma Sümeyra Doğan at workshop “Towards Health Futures: Innovating with Health Data”

 

ESR Fatma Sümeyra Doğan attended a conference workshop held in Copenhagen on 11th December 2022 titled: Towards Health Futures: Innovating with Health Data as part of the International Conference on Information Systems (ICIS). The program had three parts and the first part started with two presentations from professionals who working on health data. The first presentation was given by Katharina Lauer from COVID-19 Data Portal by the ELIXIR project. In her presentation, we received insights about challenges they faced during the pandemic, for instance, lack of standardization and different interpretation of law across data-sharing infrastructures. The second presentation was given by Nikolas Molyndris from Decentriq which is a newly founded company to enable secure data connections between different partners by using privacy-enhancing technologies such as confidential computing and federated learning.

The program continued with the panel session with esteemed scholars Elizabeth J. Davidson, Katharina Lauer, Silvia Masiero, Aleksi Aaltonen and Daniel Fürstenau in moderation of Hannes Rothe. During the panel session discussion continued around the different aspects of health data in numerous disciplines. Aleksi Aaltonen pointed out that clinicians’ main focus is on the treatment of the patients however, we should shift our focus also to data collection and interpretation as this will benefit us more in the future so clinicians should be educated in this manner. Silvia Masiero mentioned that from health data, we can learn about society as well as the patient. In this sense, being discriminated against while receiving health services will also have a secondary effect. She also talked about this concept, which she defines as data injustice, and that we need to make efforts to reduce this effect. Katharina Lauer remarked on the different layers of health data and a novel area called ‘planetary health’ which we will be hearing more about in the future as a result of climate change and migrations due to these changes. Elizabeth J. Davidson referred that health data is integrated into every part of human existence and thus has enormous importance. In this regard, while technology is advancing and sharing data is getting easier day by day, hesitations around sharing must be evaluated carefully. Daniel Fürstenau flagged up the inconstant nature of health data and this feature must not be disregarded while collecting and processing health data.

After the panel session, Fatma presented her work in the roundtable session. Her study titled: Secondary Use of Health Data: A Comparative Analysis of GDPR and European Health Data Space. She focused on provisions of secondary use in the European Health Data Space and how these provisions will interplay with GDPR and made a comparison of the two legislations. Her starting point was as being a newly introduced term, how should we interpret the secondary use under GDPR and EHDS proposal. The fact that even EHDS does not offer us a definition was the main point of her discussion and she received valuable feedback after her presentation from the other participants of the roundtable.

Participation of ESR Aizhan Abdrassulova in Conferences in December 2022

Early Stage Researcher 12 Aizhan Abdrassulova presented her research at the International scientific and practical conference State, Security and Human Rights in the Digital Era” hosted by the University of Warsaw on December 8-9 2022.

Aizhan presented her topic “Data privacy and data trust – how to find a balance”, in which she raised the issue to find the best way to comply with the principle of where data is “as open as possible, as closed as necessary”.

Also on December 19, Aizhan visited Kozminsky University in Warsaw, where she was a speaker at the international conference Legal Comparatistic in Legislative-Political Discourse. Legality or Abuse”.

Aizhan’s topic “Comparative legal analysis of digitalization of the political space of Poland and Kazakhstan” was interesting from the point of view of comparing the political spaces of Poland and Kazakhstan according to such criteria as the legal framework, information awareness of citizens of both countries and digital capabilities in the political space.

LeADS Year in Review: 2022

As the year 2022 is coming to an end it is a good point in time to look back at the first LeADS year of our 15 ESRs. In November 2021 their collective research journey started to become Legality Attentive Data Scientists and to engage in research in four crossroads, i. e. major challenges that still need to be addressed in data-driven societies: 1. Privacy vs Intellectual Property 2. Trust in Data Processing & Algorithmic Design 3. Data Ownership 4. Empowering Individuals.

More than 7 Weeks of Intensive Interdisciplinary Training

On four occasions the ESRs met to attend a cross-interdisciplinary training program which constitutes a fundamental part of the LeADS project. Being capable of fully understanding the challenges posed by the digital transformation and data economy requires knowledge in different fields such as computer science, law, and economics. The project has therefore been structured around various training modules that together aim at training a new generation of researchers that become experts in both law and data science capable of working within and across the two disciplines.

Between November-December 2021, the ESRs first met each other in Pisa at Scuola Superiore Sant’Anna for their first three weeks of training focusing on a variety of topics ranging from big data analytics and applications, data mining and machine learning, or research ethics and methodology.

Between March and April 2022, the ESRs met again for two weeks Pisa. Whereas the first training modules involved mainly subjects related to computer and data science, this training module focussed more on the legal perspective. The ESRs were taught various topics such as EU cybersecurity law, data protection law, and how AI technology challenges the regulatory framework of intellectual property.

The next training module brought the ESRs to the beautiful island of Crete. In addition to courses on law and data science, the ESRs were divided into interdisciplinary groups for practical sessions to deploy a smart contract and to analyse and identify weaknesses in a security protocol.

Finally, the last module brought the ESRs together in Kraków at Jagiellonian University in September. The last training module concluded with reflections on data and ownership as well as discussions on problems the ESRs have encountered throughout their first year of research.

ESRs on their first day in Kraków

ESRs on their first day in Kraków

Throughout all training modules, the ESRs benefitted from the combined academic expertise that is available at the 7 beneficiaries of the Leads project (Scuola Superiore Sant’Anna, University of Luxembourg, Université Toulouse III – Paul Sabatier, Vrije Universiteit Brussel, Jagiellonian University, University of Piraeus, and Italian National Research Council (CNR)). In addition to courses taught by academics, the ESRs also had the chance to get insights into how problems and current discussions in the data economy are perceived by businesses, thanks to the active participation of the LeADS partners (Innov-Acts, ΒΥΤΕ COMPUTER S.A., Intel, the Italian Data Protection Authority, the Italian Competition Authority, Tellu, INDRA, and MMI).

Finally, in addition to these conventional learning practices, the ESRs also met at IRIT, Toulouse for the Technology Innovation in Law Laboratories (TILL) workshop. These two-part workshop series in the LeADS training program present the ESRs with the opportunity to do hands-on exploration of practical cases. Three different groups of ESRs had to solve challenges that were provided by LeADS partners (Indra, TELLU, and the Italian Competition Authority). The workshop provided the ESRs with the opportunity to translate their knowledge to concrete cases and receive feedback on the solutions which they developed.

The First year of Research

One of the first tasks of the ESRs consisted of drafting an individual personal career and skills development plan circlewhere they had to individually outline their planned activities and an evaluation of training needs and career goals for the upcoming years. Furthermore, the ESRs launched their research by drafting a research plan where they detailed research questions, methods, and proposed a first state-of-the-art analysis of the field of their own topic. During periodic meetings in the four crossroads of the LeADS project, the researchers presented their individual advances and discussed potential challenges. These early discussions allowed the ESRs to identify synergies and how their individual research could contribute to these four overarching challenges.

In addition to their individual research, the ESRs started collaborating closely together within the four crossroads since the beginning of their research journeys. The ESRs engaged with each other’s topics to create a collective report that has been nourished from the individual and collective research. Since the crossroads are composed of researchers from different academic backgrounds, discussions surrounding the different topics were interdisciplinary involving diverse perspectives from law, computer and data science, and economics. During regular meetings the Crossroads were therefore shaped through different perspectives. The result of this intensive process has been a 180-pages long report that constituted the first scientific output of the LeADS project and functions as a backbone for the upcoming research activities. Currently, the ESRs are working in inter-crossroads groups to collectively write working papers on diverse topics such as data governance models, data portability, or data ownership by design that will be published during the second trimester of 2023.

The First Year of Discussing and Presenting Research

Throughout 2022, several conferences have been organised by the LeADS consortium to discuss the latest developments in regulating the data economy. For Data Privacy Day an awareness conference on the explainability of AI was organised in collaboration with Brussels Privacy Hub and involved a panel of distinguished speakers such as Paul Nemitz of the European Commission, and Fosca Giannotti of Scuola Normale Superiore and CNR.

On two occasions in Crete and Toulouse, the ESRs had the opportunity to present their research at conferences during collective poster sessions. Further conferences and awareness panels were oftentimes organised with active participation of ESRs, such as the SoBigData++ and LeADS joint awareness panel on dynamic consent.

At the annual Computers, Privacy and Data Protection conference (CPDP), ESRs were participating in a dissemination and public engagement activity and many of the LeADS project beneficiaries’ contributed to the conference during panels and talks. During Researchers’ Night ESRs participated in various events in different countries, such as in Greece, Italy, Poland, or France. ESRs also individually applied and went to international conferences to present their research like in WarsawSeoul, Roskilde, Madrid, or Utrecht. ESRs filmed research pitches and used the LeADS blog to communicate on diverse topics such as critical reflections on Europol, European Health Data Spaces, predictive justice, data property, the data act, or data portability.

Finally, the research by ESRs got published in journals on topics such as consent, child protection in online games, the Data Act and B2G data sharing or consumer protection.

The first year of the ESRs research journey has been an exciting, challenging, and rewarding experience for all participating researchers. It brought together academics from different scientific and cultural backgrounds who are united in their passion on doing research across disciplines. We are very much grateful for the commitment of the multitude of people who have been actively contributing to the advancement and ongoing success of the LeADS project. We are looking forward to the upcoming year which is shaping up to be an even more productive year, with further opportunities for research and new collaborations.

 

LeADS Organises TILL Workshop and Conference on Data Sciences & EU Regulations

On the 6th and 7th of December 2022, the 15 Early Stage Researchers (ESRs) met again for the Conference on Data Sciences and EU Regulations and for the Technology Innovation in Law Laboratories (TILL) workshop in Toulouse, France. The events took place under the auspices of IRIT, Université Toulouse III – Paul Sabatier, one of the beneficiaries of the LeADS project.

 

Conference on Data Sciences and EU Regulations

The two-day LeADS event kicked off with the Conference on Data Sciences and EU Regulations organised by IRIT.The conference was divided into three sessions. The opening session consisted of two keynote talks. The first keynote was entitled “Technological Barriers & Opportunities for Data Sciences” by Jean-Michel Loubes from IMT-ANITI who presented his research on algorithmic bias. The second keynote, entitled “Barriers and opportunities for Data Sciences brought by EU Regulations” by Emanuel Weitschek from the Italian Competition Authority made an analysis of the current EU Regulations that provide opportunities for data sciences, such as the Data Markets Act.

The conference continued with the LeADS ESRs’ poster session, where they presented the development of their research.

The third and final session was a panel discussion on “Best practices for digital technology development in the era of big regulation” with Gabriele Lenzini from University of Luxembourg, Jessica Eynard from Université Toulouse 1 Capitole, Nicolas Viallet from Université de Toulouse, and Teesta Bhandare from Art Garde. The panel covered many topics such as AI for art tokens, online age verification and children’s safety on the internet, and the relevant EU policy and regulatory measures.

 

Technology Innovation in Law Laboratories (TILL) Workshop

On the second day, the ESRs gathered at IRIT again for the Technology Innovation in Law Laboratories (TILL)workshop. These two-part workshop series in the LeADS training program present the ESRs with the opportunity to do hands-on exploration of practical cases. The goal of the TILL workshops is to go beyond the conventional learning practices and focus on horizontal interactions and collaborative learning. TILLs also aim to prepare the ESRs for their upcoming secondments (at companies and regulators) in terms of knowledge transfer and in a more general pedagogical context seeking to reconcile the different vocabularies and practices around technology and law. 

The first one of the TILL workshops was co-organised by the LeADS beneficiaries Vrije Universiteit Brussel (VUB) and University of Luxembourg. The practical cases to be worked on were provided by the LeADS partners TELLU, Italian Competition Authority (AGCM) and INDRA.

The workshop kicked off with an introduction by Imge Ozcan from VUB and Arianna Rossi and Marietjie Botes from University of Luxembourg. Following this introductory session, the workshop continued in breakout sessions where the ESR teams worked on the practical cases.

 

Team 1 was composed of ESRs Xengie Doan, Fatma Sumeyra Dogan, Aizhan Abdrassulova, and Soumia Elmestari. They worked on a use case on health personnel access to e-health data provided by TELLU. Supported by their mentors Arianna Rossi (University of Luxembourg) and Katarzyna Południak-Gierz (Jagiellonian University), the group of ESRs discussed solutions and proposed a health data management prototype that offers read access only to patient data, 2F authentication, encryption, and easy opt-out solutions.

Team 2, formed of ESRs Tommaso CrepaxBarbara LazarottoMitisha GaurQifan Yang, and Louis Sahiworked on a practical case related to data portability provided by the Italian Competition Authority. With the support of their mentors, Marietjie Botes (University of Luxembourg) and Ali Mohamed Kandi (Toulouse III-Paul Sabatier University), the team worked on an Instagram story as a case study and came up with a data portability proposal, covering several crucial aspects such data protection, IP Law, technical standards and economic implications.

 

 

Team 3, formed by ESRs Armend Duzha, Onntje Hinrichs, Cristian Lepore, Maciej Zuziak, and Robert Poe, worked on a practical case on biometrics deployment in security systems provided by INDRA. Supported by their mentors Gloria González Fuster (VUB) and Gabriele Lenzini (University of Luxembourg), the team proposed a holistic solution providing innovative technical recommendations in line with the security rules for attaining Facility Security Clearance (FSC) and data protection rules embodied in the GDPR​.

In the late afternoon, the ESR teams presented their findings in an interactive session and received questions and feedback from the LeADS members and other participants. Claudia Castillo Arias (INDRA), José Francisco Suárez Mulero(INDRA), Liubov Kokorina (TELLU) and Emanuel Weitschek (AGCM) also joined the interactive session to provide feedback on behalf of the partners that provided the practical cases.

The ESRs were encouraged to build on the work developed during this workshop and were offered further collaboration opportunities by LeADS partners and beneficiaries. The second TILL workshop will take place in December 2023.

ESRs Bárbara and Onntje at Digital Legal Talks 2022

On November 24th 2022, ESRs Bárbara Lazarotto and Onntje Hinrichs participated in the Digital Legal Talks in Utrecht. The event was the third annual conference organised by the Digital Legal Lab, which is a research network that is constituted of Tilburg University, University of Amsterdam, Radbound University Nijmegen, and Maastricht University. The topic of the conference was dedicated to law and technology and focused on a wide variety of topics such as responsible data sharing, enforcement and the use of technology, the recently proposed and passed EU data laws, and involved as keynote speakers Sandra Wachter from the Oxford Internet Institute and Thomas Streinz from NYU School of Law (for more information consult the program of the conference). Onntje and Bárbara both presented their research in relation to the Data Act Proposal (DA proposal). However, each focussed on different aspects. Whereas Onntje discussed what the DA does or does not do for consumers, Bárbara focused on the Business-to-Government data sharing aspects of the proposal.

In his presentation “The Data Act Proposal: A Missed Opportunity for Consumers”, Onntje presented his perspective on why the DA might fail its objective of “empowering individuals with regard to their data” (a more extensive version of his findings has been published in Privacy in Germany 06/2022 (PinG)). His presentation therefore focussed on the B2C data sharing provisions in chapter II of the proposal. The DA contains various provisions that are supposed to strengthen consumer protection such as (i) an obligation to design IoT products in a way that data are accessible by default (ii) pre-contractual information obligations on data generated by IoT products (iii) obligation for data holders to make data available free of charge upon request by consumers (iv) data holders can only use any non-personal data generated by IoTs on basis of a contract (v) right to share data with third parties (including various provisions that offer protection to consumers in their relation to third-parties). 

Onntje concluded, however, that these provisions might not be sufficient to empower consumers with regard to ‘their’ data as claimed by the proposal – instead, they might strengthen (or at least confirm) the position of data holders as de-facto owners of IoT-generated data in B2C relations: First, the access rights are likely to be designed in a very restrictive way. Instead of allowing consumers to port data, data holders will likely only be obliged to ‘make data available’. Second, the obligation imposed on data holders to conclude a contract as the basis for use of any non-personal data generated by IoT devices would not provide any meaningful protection to consumers. Due to the complete lack of any safeguards with regard to that contract, it would not solve any problems related to control but only legitimize them. By confirming the de facto ownership position of data holders as de facto owners of IoT data, the DA would therefore fail to create any incentives for data holders to design their products in a more privacy-friendly way. To provide more meaningful protection, the DA could have introduced, for instance, provisions that sanction unfair contract terms with regard to devices that excessively collect and process data which are entirely unrelated to the product or the services it provides.

In her presentation “The implications of the Proposed Data Act to B2G data sharing in smart cities”, Barbara made an analysis of how business-to-government data sharing provisions of the DA can be applicable to smart cities contexts. Chapter V creates a general obligation to make privately held data available based on “exceptional needs”, highlighting the circumstances in which those needs would exist, namely public emergencies and situations in which the lack of data prevents the public sector from fulfilling a specific task in the public interest. In a general analysis of Chapter V, Barbara expressed that some recent modifications made by the Czech Presidency gave the Proposal a different dimension especially when it comes to the possibility of the development of smart cities. The adoption of a more detailed Recital 58, which now defines guidance on what can be considered lawful tasks in the public interest, opens the path to a discreet development of smart cities. The modifications also have enhanced the connections of the Act with other regulations, especially with the GDPR, demanding stricter personal data protection measures by the public sector, a matter that was a source of criticism by many opinions on the Proposal.

Overall, Bárbara concluded that the recent changes can be considered a good step when it comes to enhancing personal data protection in business-to-government data sharing and also creating a lawful basis for the sharing of data in the public interest which can benefit the development of smart cities. Nevertheless, she highlighted that the Proposal still falls short of having a broad impact on these contexts since it does not fight against the power imbalance between municipalities and the private sector, nor creates measures against the “silo mentality” that infiltrates data-sharing provisions between the businesses and governments in smart cities contexts. Bárbara was also invited to participate in a Panel on “Transparency Rules for Digital Infrastructures” organized by Max van Drunen and Jef Ausloos. The Panel started with a general comparison between the Data Act and Digital Services Act on access to data for research purposes. The issues with labeling “vetted researchers” and what it means to be a researcher was topic of discussion. At last, the “dependence on data” to conduct research was debated.