GDPR

Why data portability option matters to users

In December 2019, India kick-started a novel experiment in redefining the ownership of personal data. The Personal Data Protection (PDP) Bill, 2019, was one of the world’s first legislations to define the rights individuals have over their personal data, and the responsibilities of entities accessing user data.While regulations such as the General Data Protection Regulation…

In December 2019, India kick-started a novel experiment in redefining the ownership of personal data. The Personal Data Protection (PDP) Bill, 2019, was one of the world’s first legislations to define the rights individuals have over their personal data, and the responsibilities of entities accessing user data.While regulations such as the General Data Protection Regulation (GDPR) in Europe have emphasised protecting personal data, India has pressed forward further to unlock the value inherent in personal data. Data portability is a key aspect of the PDP Bill. The account aggregator (AA) framework operationalises data-sharing and portability through unlocking value from personal data. It creates a well-defined and secure mode for users to share their personal financial data with other eligible entities. At its heart lies a robust consent system that allows users to pick and choose the type of data they share, and the entities who can access this data.Under a consent-based system of data sharing, the user trust will literally make or break the AA framework. And users are more likely to trust when they understand what is being asked of them, and why. Honouring the spirit of personal data protection requires that user-facing applications actively help users understand the implications of their actions — a tough challenge in a country where over a quarter of adults have not even heard of insurance.Facebook’s and D91 Labs’ ‘Future of Data Sharing’ initiative delves deeper into understanding goals, motivations and challenges in sharing personal data with financial institutions. The insights derived from the research were poised as challenges to the fintech community in the form of an online design jam where teams developed solutions around solving data-sharing using the AA framework. The artefacts from the design jam were later tested with target users to understand the acceptability of the solutions.The results have been dissimilated into seven design principles for anyone developing data-sharing workflows using AAs. These design principles cover the seven critical areas of trust, choice architecture, nudges, data control, customer redressal, feedback and data testing. The design principles created from the research are addressed to the product, business and design teams at fintech startups, to help build trustworthy financial products for emergent users backed up by field research.Kumar is co-founder-chief evangelist, Setu, and Ba leads research and strategy, D91 Labs.
Read More

Be the first to write a comment.

Leave a Reply

Your email address will not be published. Required fields are marked *

GDPR

Germany asks Google, Apple to remove DeepSeek AI from app stores

The Berlin Commissioner for Data Protection has formally requested Google and Apple to remove the DeepSeek AI application from the application stores due to GDPR violations. …

The Berlin Commissioner for Data Protection has formally requested Google and Apple to remove the DeepSeek AI application from the application stores due to GDPR violations. …
Read More

Continue Reading
GDPR

Mistral just updated its open source Small model from 3.1 to 3.2: here’s why

The fact that it is made by a French startup and compliant with EU rules and regulations such as GDPR and the EU AI Act also helps its appeal…

The fact that it is made by a French startup and compliant with EU rules and regulations such as GDPR and the EU AI Act also helps its appeal…
Read More

Continue Reading
GDPR

UK passes updated data bill, without AI copyright provisions

If it gets Royal approval, the DUA Act will become law and herald a significant change to the U.K.’s data protection framework since GDPR. The post UK passes updated data bill, without AI copyright provisions appeared first on CoinGeek…

If it gets Royal approval, the DUA Act will become law and herald a significant change to the U.K.’s data protection framework since GDPR.
The post UK passes updated data bill, without AI copyright provisions appeared first on CoinGeek…
Read More

Continue Reading
GDPR

8 steps to ensure data privacy compliance across borders

As organizations expand internationally, IT leaders must navigate a maze of regulations, from the General Data Protection Regulation (GDPR), to the California Consumer Privacy Act (CCPA), as well as other region-specific privacy laws. So to stay compliant, they should have strong plans that cover data mapping…

As organizations expand internationally, IT leaders must navigate a maze of regulations, from the General Data Protection Regulation (GDPR), to the California Consumer Privacy Act (CCPA), as well as other region-specific privacy laws. So to stay compliant, they should have strong plans that cover data mapping…
Read More

Continue Reading