Losing your rights in a legal cloud: Data Fiduciaries a (temporary) solution ?
La stragrande maggioranza dei cittadini, attirati dai vantaggi nell'affidare la gestione dei loro dati e la sincronizzazione dei fra i loro device, pone i propri dati personali nei cloud. Spesso non hanno le conoscenze per riflettere sulle implicazioni sulla loro privacy, nè che loro stessi diventano una merce, merce che permette a questi oligopoli di rafforzare la loro egemonia sul mercato. Il cittadino medio non ha gli strumenti per opporsi e non ha alcuna alternativa. L'Articolo "Losing your rights in a legal cloud" pubblicato *on Science Node: **https://sciencenode.org/feature/losing-your-rights-in-a-legal-cloud.php***(c... anche in fondo alla mail), di Kristina Irion, the Marie Curie fellow at the Institute for Information Law (IViR) <http://www.ivir.nl> at the University of Amsterdam <http://www.uva.nl/en/home>, riassume l'attuale deriva e ripropone il concetto di "Data fiduciaries". *Che ne pensate dei Data fiduciaries ? Può essere una soluzione (almeno temporanea) ? Un dibattito su questa soluzione potrebbe creare un minimo di coscienza? )* Francesco Nachira P.S. La situazione diventa ancora più drammatica considerando che siti web e gestori del cloud per le loro analisi, si affidano quasi esclusivamente agli strumenti di analisi di Google+ . Ad esempio il sito ufficiale del Consiglio Europeo per le sue analisi si affida a Google Analytics, usa i suoi cookie così arriviamo al paradosso che : /"The information generated by the cookies about your use of this web site - standard Internet log information (including your lP address) and visitor behaviour information in an anonymous form - will be transmitted to and stored by Google including on servers in the United States. Google will anonymize the information sent by removing the last octet of your lP address prior to its storage. According to Google Analytics terms of service, Google will use this information for the purpose of evaluating your use of the web site and compiling reports on web site activity for the Council."/ but / *"The Council will not use, and will not allow any third party to use the statistical analytics tool to track or to collect any personally Identifiable Information of visitors to this site."*/*** *while* **/"Google may transfer the information collected by Google Analytics to third parties where required to do so by law ..." /*(vedi screenshot in allegato)*/ ---------- ---------- qui l'articolo linkato /* *Losing your rights in a legal cloud* Many of us assume the hard-won individual rights we enjoy in our democracies extend to our digital selves as well. This is a naive expectation, says Kristina Irion, because there is no legal paradigm to protect consumers when our data is held by cloud service providers. Don't panic: There is a solution to be found, she assures us. Speed read * Intellectual property rights are eroding in the digital age. * Terms of service agreements do not benefit the end user. * Data fiduciaries can restore confidence and individual rights. Do you give up certain legal protections when your personal records wind up in the cloud? Have personal property and privacy rights transformed in the advent of cloud computing? Yes and yes, says Kristina Irion, the Marie Curie fellow at the _Institute for Information Law (IViR)_ <http://www.ivir.nl/> at the _University of Amsterdam_ <http://www.uva.nl/en/home>. “Intuitively, most people think that their data belongs to them,” she observes. “They have a very natural idea about what property is, and will become aware only late that by storing their data in the cloud they are giving up the most important means of control and are fully at the mercy of the cloud service provider (CSP).” *What's a little data between friends?* Irion lumps personal digital data into two categories: 1) Personal documentation and management: Birth or identification cards, biographical records (education and employment history, for example), contracts, receipts, and more. 2) Ideational and intellectual explorations: Private memories — diaries, correspondence, images — as well as creative expressions, book annotations, music, and films. Your identity is virtually represented in these personal records, and is what remains and forms your legacy once you're gone. Global cloud traffic will exceed _6.5 zettabytes (541 exabytes per month)_ <http://www.wikiwand.com/en/Zettabyte> by 2018, with 53% of internet users (2 billion people) opting for cloud-based storage, according to _a Cisco estimate_ <http://www.cisco.com/c/en/us/solutions/collateral/service-provider/global-cl...>. No longer housed in your desk or on your mantel, these personal effects are on a server many miles away — abstracted and alienated from their source. The difficulty with cloud computing – and what makes it distinct from other communication intermediaries (say, the post office or phone company) – is that “there is no comparable legal paradigm that protects individuals’ personal records when at rest under the control of a third party,” Irion says. The private individual and the CSP share control over these digital artifacts. Moreover, most terms of service (TOS) favor the CSP's interests and “reinforce the client’s dependency on the service provider and thus only entrench the loss of control over her data,” Irion says. A cloud service provider can effect immediate change to the standard terms of service, in many cases without notice. They have unfettered permission to use your data, including sharing it with another party. In an article published September in /_International Journal of Law and Information Technology_/ <http://ijlit.oxfordjournals.org/content/early/2015/09/25/ijlit.eav015.short?...>, Irion worries that, absent a strong legal protection, consumers run the risk of exploitation as data is increasingly commodified. As CSPs move to make money from advertising, they’ll have little obstacle to pilfering your information (_as Google has, for instance_ <http://www.theguardian.com/technology/2014/apr/15/gmail-scans-all-emails-new...>) in order to find more effective methods of marketing to you. Given the consumer’s lack of negotiation power, Irion believes the solution may be a data _fiduciary_ <http://www.wikiwand.com/en/Fiduciary>, a concept that's gaining traction _among legal scholars lately_ <http://balkin.blogspot.co.uk/2014/03/information-fiduciaries-in-digital-age....>. Much like a trust fund or lending institution, a data fiduciary would take care of consumer information, and respect the concepts of sovereignty and privacy we’ve come to expect in our modern democracies. Like other fiduciaries, information fiduciaries would work on our behalf, writes Jack Balkin, director of the _Information Society Project_ <http://isp.yale.edu/> at Yale University. Lawyers, doctors, and accountants already function in a similar capacity — wielding our personal information with our best interests placed first. *First Databank & Trust. *Terms of service agreements typically do not benefit the end users of cloud computing. Kristina Irion points a way to renewed trust: Data fiduciaries. With a data fiduciary acting in our interest, we could rest easy knowing our personal effects, now digitized and stored elsewhere, remain our own property. If data fiduciaries were installed, then TOS agreements would reflect the rights consumers expect: CSPs, if structured as a data fiduciary, would be limited in what information they could collect, use, and sell. We would regain our confidence that our data is protected, yet fluid enough to enable the modern information marketplace. We could expect our data to remain in our sole possession, and not be handed over to a third party without a warrant. But until a data fiduciary legal framework is created, we yield control when agreeing to the TOS. Want to delete the data you’ve stashed in the cloud? That’s up to the CSP. Want to decide where your data resides? Forget about it — that’s up to the CSP. What happens to your data if you declare bankruptcy and your service relationship terminates? Do you even know how many copies there are? You probably don’t, since that’s the purview of the service provider. So in what sense do you control your own data? And in what meaningful sense is it yours if you can’t control it?
Secondo me fino a quando continueremo a esternalizzare (e il fiduciario e' pur sempre un terzo), non avremo risolto niente. Conoscete il progetto HAT? http://hubofallthings.com/ On 15 October 2015 at 08:29, Francesco Nachira <francesco.nachira@skynet.be> wrote:
La stragrande maggioranza dei cittadini, attirati dai vantaggi nell'affidare la gestione dei loro dati e la sincronizzazione dei fra i loro device, pone i propri dati personali nei cloud. Spesso non hanno le conoscenze per riflettere sulle implicazioni sulla loro privacy, nè che loro stessi diventano una merce, merce che permette a questi oligopoli di rafforzare la loro egemonia sul mercato. Il cittadino medio non ha gli strumenti per opporsi e non ha alcuna alternativa.
L'Articolo "Losing your rights in a legal cloud" pubblicato *on Science Node: ** <https://sciencenode.org/feature/losing-your-rights-in-a-legal-cloud.php>https://sciencenode.org/feature/losing-your-rights-in-a-legal-cloud.php <https://sciencenode.org/feature/losing-your-rights-in-a-legal-cloud.php>* (copiato anche in fondo alla mail), di Kristina Irion, the Marie Curie fellow at the Institute for Information Law (IViR) <http://www.ivir.nl> at the University of Amsterdam <http://www.uva.nl/en/home>, riassume l'attuale deriva e ripropone il concetto di "Data fiduciaries".
*Che ne pensate dei Data fiduciaries ? Può essere una soluzione (almeno temporanea) ? Un dibattito su questa soluzione potrebbe creare un minimo di coscienza? )*
Francesco Nachira
P.S. La situazione diventa ancora più drammatica considerando che siti web e gestori del cloud per le loro analisi, si affidano quasi esclusivamente agli strumenti di analisi di Google+ . Ad esempio il sito ufficiale del Consiglio Europeo per le sue analisi si affida a Google Analytics, usa i suoi cookie così arriviamo al paradosso che :
*"The information generated by the cookies about your use of this web site - standard Internet log information (including your lP address) and visitor behaviour information in an anonymous form - will be transmitted to and stored by Google including on servers in the United States. Google will anonymize the information sent by removing the last octet of your lP address prior to its storage. According to Google Analytics terms of service, Google will use this information for the purpose of evaluating your use of the web site and compiling reports on web site activity for the Council."*
but * "The Council will not use, and will not allow any third party to use the statistical analytics tool to track or to collect any personally Identifiable Information of visitors to this site."* while
*"Google may transfer the information collected by Google Analytics to third parties where required to do so by law ..." *(vedi screenshot in allegato)
* ---------- ---------- qui l'articolo linkato * *Losing your rights in a legal cloud* Many of us assume the hard-won individual rights we enjoy in our democracies extend to our digital selves as well. This is a naive expectation, says Kristina Irion, because there is no legal paradigm to protect consumers when our data is held by cloud service providers. Don't panic: There is a solution to be found, she assures us. Speed read
- Intellectual property rights are eroding in the digital age. - Terms of service agreements do not benefit the end user. - Data fiduciaries can restore confidence and individual rights.
Do you give up certain legal protections when your personal records wind up in the cloud? Have personal property and privacy rights transformed in the advent of cloud computing? Yes and yes, says Kristina Irion, the Marie Curie fellow at the *Institute for Information Law (IViR)* <http://www.ivir.nl/> at the *University of Amsterdam* <http://www.uva.nl/en/home>. “Intuitively, most people think that their data belongs to them,” she observes. “They have a very natural idea about what property is, and will become aware only late that by storing their data in the cloud they are giving up the most important means of control and are fully at the mercy of the cloud service provider (CSP).” *What's a little data between friends?* Irion lumps personal digital data into two categories: 1) Personal documentation and management: Birth or identification cards, biographical records (education and employment history, for example), contracts, receipts, and more. 2) Ideational and intellectual explorations: Private memories — diaries, correspondence, images — as well as creative expressions, book annotations, music, and films. Your identity is virtually represented in these personal records, and is what remains and forms your legacy once you're gone. Global cloud traffic will exceed *6.5 zettabytes (541 exabytes per month)* <http://www.wikiwand.com/en/Zettabyte> by 2018, with 53% of internet users (2 billion people) opting for cloud-based storage, according to *a Cisco estimate* <http://www.cisco.com/c/en/us/solutions/collateral/service-provider/global-cl...>. No longer housed in your desk or on your mantel, these personal effects are on a server many miles away — abstracted and alienated from their source. The difficulty with cloud computing – and what makes it distinct from other communication intermediaries (say, the post office or phone company) – is that “there is no comparable legal paradigm that protects individuals’ personal records when at rest under the control of a third party,” Irion says. The private individual and the CSP share control over these digital artifacts. Moreover, most terms of service (TOS) favor the CSP's interests and “reinforce the client’s dependency on the service provider and thus only entrench the loss of control over her data,” Irion says. A cloud service provider can effect immediate change to the standard terms of service, in many cases without notice. They have unfettered permission to use your data, including sharing it with another party. In an article published September in *International Journal of Law and Information Technology* <http://ijlit.oxfordjournals.org/content/early/2015/09/25/ijlit.eav015.short?...>, Irion worries that, absent a strong legal protection, consumers run the risk of exploitation as data is increasingly commodified. As CSPs move to make money from advertising, they’ll have little obstacle to pilfering your information (*as Google has, for instance* <http://www.theguardian.com/technology/2014/apr/15/gmail-scans-all-emails-new...>) in order to find more effective methods of marketing to you. Given the consumer’s lack of negotiation power, Irion believes the solution may be a data *fiduciary* <http://www.wikiwand.com/en/Fiduciary>, a concept that's gaining traction *among legal scholars lately* <http://balkin.blogspot.co.uk/2014/03/information-fiduciaries-in-digital-age....>. Much like a trust fund or lending institution, a data fiduciary would take care of consumer information, and respect the concepts of sovereignty and privacy we’ve come to expect in our modern democracies. Like other fiduciaries, information fiduciaries would work on our behalf, writes Jack Balkin, director of the *Information Society Project* <http://isp.yale.edu/> at Yale University. Lawyers, doctors, and accountants already function in a similar capacity — wielding our personal information with our best interests placed first.
*First Databank & Trust. *Terms of service agreements typically do not benefit the end users of cloud computing. Kristina Irion points a way to renewed trust: Data fiduciaries. With a data fiduciary acting in our interest, we could rest easy knowing our personal effects, now digitized and stored elsewhere, remain our own property. If data fiduciaries were installed, then TOS agreements would reflect the rights consumers expect: CSPs, if structured as a data fiduciary, would be limited in what information they could collect, use, and sell. We would regain our confidence that our data is protected, yet fluid enough to enable the modern information marketplace. We could expect our data to remain in our sole possession, and not be handed over to a third party without a warrant. But until a data fiduciary legal framework is created, we yield control when agreeing to the TOS. Want to delete the data you’ve stashed in the cloud? That’s up to the CSP. Want to decide where your data resides? Forget about it — that’s up to the CSP. What happens to your data if you declare bankruptcy and your service relationship terminates? Do you even know how many copies there are? You probably don’t, since that’s the purview of the service provider. So in what sense do you control your own data? And in what meaningful sense is it yours if you can’t control it?
_______________________________________________ nexa mailing list nexa@server-nexa.polito.it https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa
-- *Guido* Dr. Guido Noto La Diega <http://www.law.qmul.ac.uk/staff/notoladiega.html>, Postdoctoral Research Assistant in Cloud Computing Law <http://www.cloudlegal.ccls.qmul.ac.uk/project/researchers/index.html> - Queen Mary University of London <http://www.mccrc.eu/Pages/Research-Team.aspx> President of Ital-IoT <http://italiot.altervista.org/about-us/> - Centre of Multidisciplinary Research on the Internet of Things Avvocato <http://www.studioperrino.it/intro/index.asp> (Commercial and IP/IT Lawyer) Cultore della materia in Civil Law and Intellectual Property <http://www.unipa.it/persone/docenti/n/guido.notoladiega> - University of Palermo 67-69 Lincoln's Inn Fields London WC2A 3JB g.notoladiega@qmul.ac.uk +44(0)2078823386 @gui_notoladiega https://it.linkedin.com/pub/guido-noto-la-diega-ph-d/6/614/669 This e-mail and any attachment hereto are strictly confidential and are exclusively intended for the person above identified. Without intended recipient’s entitlement, use, copy and dissemination of this e-mail is prohibited. If you have received it in error, please advice us immediately by telephone and return the documents received to the above address, deleting the files. Thank you. Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestaettet. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Danke. Il presente messaggio di posta elettronica ed ogni eventuale allegato contengono informazioni strettamente riservate e sono indirizzati esclusivamente al soggetto sopra indicato. In mancanza di autorizzazione del destinatario, ne sono vietati l’uso, la riproduzione e la divulgazione. Se avete ricevuto questo messaggio per errore, siete pregati di avvisarci immediatamente per telefono e di restituirci i documenti ricevuti all’indirizzo sopra indicato, distruggendo i file. Grazie. *BE ECO-FRIENDLY: Unless necessary, please do not print this e-mail *
participants (2)
-
Francesco Nachira -
Guido Noto La Diega