Insights European Data Protection Supervisor publishes Opinion on Personal Information Management Systems.

The General Data Protection Regulation (GDPR) provides individuals with increased control over how their personal data is collected and used online, but more can and should be done to ensure that individuals are able to take back control of their online identities, the European Data Protection Supervisor (EDPS) said, as he published his Opinion on Personal Information Management Systems (PIMS).

Giovanni Buttarelli, EDPS, said: “Our online lives currently operate in a provider-centric system, where privacy policies tend to serve the interests of the provider or of a third party, rather than the individual.  Using the data they collect, advertising networks, social network providers and other corporate actors are able to build increasingly complete individual profiles.  This makes it difficult for individuals to exercise their rights or manage their personal data online.  A more human-centric approach is needed which empowers individuals to control how their personal data is collected and shared.

The Opinion states that the recently adopted GDPR provides for increased transparency, powerful rights of access and data portability, giving individuals more control over their data.  However, it is not the final step in this process.  Instead, it should be seen as the foundation for further efforts to improve how people enforce control over their online identities.

In his recent Opinion on the coherent enforcement of fundamental rights in the age of Big Data, the EDPS noted that current market conditions and business practices make it difficult for individuals to exercise their right to the protection of personal data and to other fundamental rights.  In his Opinion on PIMS, the EDPS outlines his vision of a new reality, in which individuals, rather than online service providers, are able to manage and control their online identity.

The basic idea behind PIMS is that individuals would be able to store their personal data in secure, online storage systems and decide when and with whom to share it.  As an emerging technology, a variety of designs and business models currently exist.  However, they all share the idea of strengthening fundamental rights in the digital world, whilst creating new business opportunities for PIMS providers.

PIMS technology may help to give individuals and consumers more control over their personal data, the Opinion states, and the EDPS encourages the Commission to support the development of innovative digital tools such as this and take policy initiatives that inspire the development of economically viable business models to facilitate their use.  For a link to the Opinion, click here.