mesinfos.fing.org
“WHAT IF CITIES TOOK A CENTRAL ROLE IN RETURNING CITIZENS’ PERSONAL DATA TO THEM?”
2020 THE “MESINFOS - SELF DATA ACKNOWLEDGEMENTS: CITIES” TEAM AT FING: Special thanks to Virginie Steiner (La Rochelle), Manon Molins, Chloé Friedlander, Guillaume Jacquart, Sylvie Turck (Nantes Métropole), and Maria-Inés Léal Fanny Maurel // Sarah Medjek for MyData France. (Grand Lyon), as well as to Guillaume Chanson, Cécile What if cities took a central role in returning > an analysis of the relevant governance models Christodoulou, Aurialie Jublin, and Mathilde Simon. citizens’ personal data to them, so their citizens can when considering how to share personal data with individuals; TRANSLATION: Jianne Whelton use personal data to make their lives easier, get to know each other better, contribute to territorial > a survey of cities efforts to share data, including decision making or participate in public interest some examples to draw inspiration from (and some CREATIVE COMMONS projects? to avoid); > illustrated methodologies you can use to This document is available under a Creative Commons Attribution 4.0 License (France): For the past year, Fing has been working with three https://creativecommons.org/licenses/by/4.0/deed.fr. implement a Self Data initiative in your region major French cities — Nantes Métropole, (the energy (plus examples drawn from our work with Nantes You are free to share — copy and redistribute the material in any medium or format — and adapt — remix, transform, and build upon the material for transition), La Rochelle (sustainable mobility), and Métropole, La Rochelle and Greater Lyon): identify any purpose, even commercially — under the following terms: attribution — you must give appropriate credit, provide a link to the license, and indicate Greater Lyon (social welfare) — to enable them to the relevant personal data, imagine use cases if changes were made. You may do so in any reasonable manner, but not in any way that suggests that Fing endorses you or your use. You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits. implement a Self Data experiment of their own as that utilize these data, look towards governance early as 2020. This playbook is the fruit of our work models to frame your use cases, and select your together. Its central objective is to put Fing methods experimental scenario(s); FING IS SUPPORTED BY into the hands of other metropolitan areas looking PARTENAIRES > some advice born of our experience working with to dive into Self Data, so they can do so feeling Self Data since 2011, which we would have loved to suitably equipped. In this kit you will find: have ourselves when we first started experimenting with Self Data at Fing. > an introduction to the notion of Self Data — sharing personal data with the individuals they Happy experimenting with Self Data in your region! pertain to — and the major issues that Self Data PARTENAIRES ASSOCIÉS implies for cities; Mathieu Drouet
La Fing a le soutien de ses grands partenaires GRAPHICS AND LAYOUT: “MESINFOS: SELF DATA CITIES” — WHAT IF CITIES TOOK A CENTRAL ROLE IN RETURNING CITIZENS’ PERSONAL DATA TO THEM? 01
P - 02 >> Self Data: the concept P - 07 >> Can Self Data be a lever for metropolitan innovation? P - 09 >> Sharing personal data: governance models
“CITIES AND PERSONAL DATA” — OVERVIEW OF GLOBAL INITIATIVES 19 P - 20 >> Cities and personal data, what ways ahead for citizens? P - 26 >> A closer look at cities’ personal data initiatives
“SELF DATA DIY” — CREATE A LOCALIZED, RELEVANT SELF DATA INITIATIVE FOR YOUR REGION: THE EXAMPLES OF THE CITY OF NANTES, LA ROCHELLE, AND GREATER LYON. 39
P - 40 >> Understanding the stakes associated with Self Data and choosing an appropriate project P - 42 >> Defining the data parameters P - 43 >> Potential use cases and relevant models of governance P - 66 >> In practice: outline an experimental scenario for your region
“SHALL WE BEGIN?” — PROTIPS FROM EXPERT SELF DATA ACTORS 71 P - 74 >> A Self Data experiment: 10 questions to ask P - 76 >> A Self Data experiment: 10 levers to activate P - 78 >> A Self Data experiment: 7 pitfalls to avoid P - 80 >> A Self Data experiment: 10 cardinal rules to respect
APPENDICES — READY-MADE METHODOLOGIES 82 P - 84 >> 1) The seminar P - 88 >> 2) The datablitz P - 92 >> 3) The use cases P - 96 >> 4) The governance models P - 100 >> 5) The experimental scenarios “MESINFOS: SELF DATA CITIES” — WHAT IF CITIES TOOK A CENTRAL ROLE IN RETURNING CITIZENS’ PERSONAL DATA TO 01 THEM? “MesInfos: Self Data Cities” — What if cities took a central role in
returning citizens’ personal data to them? P These efforts will grantfinally individuals identify the vendor contract offers that are offers contract vendor the identify - accor their individual needs to most suited ding to the data in plustheir easily profile, etc. insurers, suppliers, power telcos, switch which launched the Self Data re- — Fing cross food consumption data with a car- consumption cross food Ademe’s such as system, bon benchmarking car- their diet’s assess to Base Carbone®, health data (al- or with their bon footprint, lergies, specific diets, etc.) and Open Food closely more lists shopping create to Facts their needs; tailored to - Social Secu (invoices, sources from other - unwel avoid help people which might rity), surprises; financial come » » » » are nume- emerging concepts and The ideas rous. which their data, over mastery of some form trust and redress the balance reestablish could organizations and indivi- between power of Self Data from the our notion of all, After duals. use can we “If is, organizations of perspective please.” you however . . can too. you data, your those three can do people few very Today, many been there have Nevertheless, things. Self the realm of in promising developments world. in the and elsewhere Data in France » » people derive from their data? Why Why their data? from derive people get smart(er) bank statements that make make that statements smart(er)get bank bank their line of Each easier. lives their a mea- into placed be would statements with data if triangulated ningful context » technical skills are developing personal tools personal tools are developing skills technical their and correlate visualize to can use they the ma- But for establish correlations. data and are the services third-party individuals, of jority Self sense of will make they means with which that services reuser third-party Therefore, Data. their value from derive to enable individuals asked having explicitly After data are needed. third-parties would consent, individuals’ for them data and offer private individuals’ process having without necessarily — services relevant the data themselves. to access So what can Self Data see want to even individuals would and benefitmight how fromthey itemerge, in- MesInfos our During collectively? or dividually per- of variety a wide explored have we years, grouped have which we sonal data use cases, better easier; life making categories: seven into - informa what to has access who controlling tion; getting to know each other better; living - values (gree with personal in closer alignment more to ethical contributing consumption); ner, shared knowledge creation; making - well-infor med decisions; or simply changing things up. example: for could, People » - to can gather they where control, fully they give would This their data. gether (aggregate) similar to system information own them their and increasingly systems, CRM organizations’ and analyze manage to use they tools powerful not many, Although there are hold. the data they take may They are emerging steadily. such tools Mana- Information a PIMS (Personal of the form in- contenders whose market gement System), Tim Berners-Lee or Inrupt by Digime, clude Cozy, mi- they project); SOLID his with connection (in integrate can that "safe" digital a resemble ght data sharing logic (like France’s DigiPoste); or actors, trusted by is offered perhaps the space who po- Fair & Smart example, for and Onecub the transfer of as guarantors sition themselves to personal data from one data controller of another. 3) Reuse their data to lives, everyday contribute to public enhance and their #thirdpartyproviders etc. life, collective aggre- and retrieved been has data the Once time it’s in the personal space, securely gated use through Only it! reuse rather, or — it use to Ear- itself. the data reveal value of does the full already and (social) activists are adopters ly a respond to to ability organizations’ testing data in and generate rights request portability while others with a machine-readable format, 1) Obtain a copy of their personal data #API data personal their of a copy 1) Obtain #GDPR #dataportability individuals enabling is Data Self of keystone The which at their personal data, of obtain a copy to - infor various organizations’ in is stored present ope- telephone providers, (energy systems mation "data holders" These etc.). social networks, rators, data channels. build the necessary therefore, must, personal making — data portability This right to is guaranteed — "data subjects" data available to - Regu Article the General Data Protection 20 of by 2018. in May force which came into lation (GDPR), the of component an essential Data portability, type any applies to necessarily Self Data concept, personal individuals’ Returning personal data. of get them to it possible for will make them data to perform tasks they the not only of a 360° overview doing generate they the data all also but online, sen- speaking on the telephone, their shopping, on the turning the car, taking message, text ding a single data every of It is in the interest etc. lights, a reality! Self Data make holding organization to data their and manage store Personally 2) #PIMS #PDS #PODs securely. it possible make Self Data imperative: The second and manage their perso- store individuals to for them a offering be by This may nal data securely. personal space personal digital home: an online,
For more than seven years, within its wider Me- within its years, For more than seven working Fing has been research trajectory, sInfos the data to returning personal of on the subject concept and a practice — concern individuals they what crossing After Data.” "Self dubbed have we the like seems it threshold, a major to amounts you. on to pass the torch right time to Self Data a pro- make to been Our goal has never to. hold the secrets we that only concept prietary share to always wanted have we On the contrary, to initiatives data personal enable and work our al- that obvious it’s later, years Seven multiply. Self Data is remains unique, though the concept This yesterday. of concept no longer the unknown it further effortsvia the democratize kit aims to of capable uniquely are believe, we that, players key propelling Self Data dynamics: cities. of Self-data — which we define as "the collection, indivi- for and by data personal of sharing and use and designed control under their complete duals, implies — aspirations" and needs own their fulfil to their of masters the be should individuals that do things should be able to and that they data, For this their personal needs. with it that serve things: do three individuals must be possible, to SELF DATA: THE THE SELF DATA: CONCEPT THEM? PERSONAL DATA TO TO DATA PERSONAL CITIZENS’ ROLE IN RETURNING ROLE TOOK A A CENTRAL TOOK WHAT IF CITIES IF WHAT DATA CITIES” — DATA “MESINFOS: SELF SELF “MESINFOS: “MesInfos: Self Data Cities” — What if cities took a central role in
returning citizens’ personal data to them? P stored on different on different stored recorded devices, ap- across several and so- plications, metimes misplaced The aca- at Google". on is working demy that an experiment particiwill provide - pants with personal Cloud) clouds (Cozy their of and a copy personal education More on this data. its members with a perso- provides In line with the MesInfos pilot, insurer Maif pilot, In line with the MesInfos now of where it shares the details nal cloud, policies with them. their home insurance Health "My Fing’s of context the in Likewise, health care and disease prevention Data" Self Group is concepting Vyv the efforts, personal health data that use Data services Fair&Smart by and a solution implemented meaning — that enables data reversibility consent their withdraw can individuals that immedia- erased is data their all have and an individual’s the services, of In terms tely. can be used example, for results, blood test be file, prevention disease their augment to with air cross-referencing enriched after experiment in the next chapter. chapter. next in the experiment » » - - - Other good news on the Self Data front: Other good news conduct those we beyond — experiments In Brit are emerging everywhere. — at Fing is conduc de Rennes Académie the tany, helping national education ting a project mastery gain to teachers and students their data throughout their learning over Oli- to According trajectories. and career personal data is scat lot of "a Adam, vier in the digital education ecosystem, tered trate the value of reusing what is shared shared is what reusing of value the trate In companies. linking up with innovative by a white has published a collective France, pre- have which they paper on portability, and seeks Assembly, the National to sented consortium on the a cross-sector create to governance). of form (a new subject » » - - , the Open Bank now seeks to demons- to seeks now Bank Open the , a way to create value that establishes a vir- a that establishes value create to a way tuous cycle. in data also are the advances Noteworthy across entire sec taking place portability long have institutions health France’s tors, à la fran- "Blue Button a calling for been of the sharing facilitate would that çaise" in- organizations and health data between course, of would, which dividual patients, - Re Shared Medical France’s to be linked With the Digital Health (DMP) system. cord the by existence into voted (ENS), Space individuals in 2019, Assembly National from platform a have potentially might share to their consent manage which to re- their treatment and prescription data, and other manual- and reuse these cords, services trusted data thanks to entered ly has sector telecom The third-parties. and ef- to related initiatives launched several in conjunc procedures portability fective Cooperation tion with the Data Portability in England On the banking side, project. where — the firstworld’s initiativefor per- the MiData program, sonal data portability, lets Project the Open Bank — was born data with third par- banks share customers’ of benefit the for and control the under ties, The program is similar to those customers. a rocky After directive. "DSP2" the European start » » , Data Protection Data Protection , Energy providers Enedis and GRDF have have GRDF and Enedis providers Energy (Enedis Data and projects set up processes with individuals allow Adict) to GRDF Connect, recover to Gazpar) (Linky, meter a connected better identify to — them their data and reuse their consumption, manage better contracts, - compa These services. via third-party — etc. vanguard among data the form nies presently rather unique: be- Their position is holders. them required regulations code cause energy the data sharing long before contemplate to and given effect, came into portability right to not service — distributors their role as energy share more inclined to were they — providers en- with individuals in ways that data directly emerge. to market service abled a third-party making are sectors and organizations Other for reality a concrete portability the right to French on- startedAn initiative by their users. line classified advertisingLeBonCoin is giant "data takeout its rarity: for worth mentioning, and download to you that allows is a feature - Accor personal data autonomously". your view Damien Dégremont ding to the when 25, May "Since LeBonCoin, at Officer been have we operational, became feature per- for thousand requests several receiving the handful we versus sonal data per week, is Curiosity it." before year per receiving were reuse ! Enabling individuals to . . spreading is services via third-party their personal data » » » » "Data takes 4th edition takes an officially-recognized Finnish non-profit hundred members. more than four comprising indivi- making wider goal of the Fueled by the personal data, their of masters duals the MyData movement became a fully-fledged non-profit organization based Its local hubs around the world. with twenty in Helsinki, whose — conference annual catalyst. acts as its principal — in 2019 place the of hands in the lies Data Self to key The proper chan- establish the They data holders. data transmission and facilitate data nels for docu- the correct observe reuse when they generate to and work mentation practices Self Data these, Without datasets. synthetic thanks alive kept but a concept, be would - data scraping tech permissible vaguely to are jockeying actors few very Today, niques. hitters heavy digital’s Some of position. for data transmis- the ones with longstanding — are — and Google Facebook sion channels like coalitions and forming launching initiatives portability to right the address to actors of position to or seeking ), Project (Data Transfer to ready as experts on the subject, themselves Facebook’s (see other sectors to advice give entitled report 2019, from September however, are, There ). Privacy" and Portability and invested, some data holders who are truly example. who are leading by » » search track in France — has been carrying the carrying been has — in France search track is project MesInfos and its 2011, since torch support the to thanks of year, in its sixth now exploring by began We partnersits allies. and at what others were Self Data and looking Buttons Green (the Blue and doing elsewhere the MiData in England, States, in the United the re- testing before etc.), community, VRM 300 participants personal data with turn of in a — 2013 worldwide We first. worked on the challenges re- and legal economic technical, the on specifically then and Data, Self to lated The issue and health data. energy sharing of then spun off we self-data health-related of into the "My Data, My Health" project. Natu- at closely spent time looking have we rally, worked have We data portability. the right to - wor our Dataccess with members of closely Pilot stu- and across an expansive king group, 2016 and 2018, between place that took dy 2000 testers over with collaborated we where the demonstrate and multiple data holders to Self Data. of scaling potential a into MyData has evolved Internationally, all collaborators, of community worldwide generated benefits the recalibrate to working more towards the personal data economy by network the 2018, of In October individuals. a small - group launched inte of in 2015 by — Fin- including Open Knowledge actors rested was reborn as MyData Global, — land and Fing » » “MesInfos: Self Data Cities” — What if cities took a central role in
returning citizens’ personal data to them? P avert the ongoing Therecrisis is of confidence. lay could These actors however. an alternative, with relationship a new for the foundations the same At and inhabitants. customers users, data for frameworks new building by time, could they control, sharing under individuals’ garner for and be partrevolution, the data of in the emerging a solid position themselves applications, (platforms, market data services indivi- can transform Self Data practices etc.). and enrich the traditional apprehensions duals’ creation, (service actors regional activities of etc.). production, knowledge planning, per- on based services where contexts urban In cities and citizens yet and sonal data are legion, a them, value from of way in the obtain little the turn well very might approach Data Self protect to it seeks because only not — tables but although that is crucial, privacy, people’s individual and it is sustained by because largely use. through data empowerment collective at Fing on ci- work of years more than 10 After pro- 2.0" "Cities from our 2008 — ties & digital Governing "Audacities: recent the more to gram, one thing — (in French) digital city" a real-world in- urban that is over and over seen have we cities at the helm to need initiatives novation open things big questions, ask guide processes, mul- models of new and imagine debate, to up "a is are seeing What we governance. ti-actor - tors do, individuals would be able to produce, produce, be able to individuals would do, tors personal and and retrieve collect capture, share choose to could They data. non-personal - contri or even themselves use them for them, production studies and knowledge them to bute perso- based on their In short, the region. for to the agency have individuals would nal data, — services new of participate in the emergence a part play — or collaboratively independently environments in planning their metropolitan - contri urban fabrics, cities’ of and the weaving collective advance decisions, political to bute creation… knowledge gain from retur- also stand to actors Regional are People Individuals. ning personal data to ill at ease about the increasingly becoming are pro- organizations and private ways public legislative while data, personal their cessing Mere and tighter. tighter are getting restrictions will not be enough to with the law compliance source of value creation not only at the indi- the at not only creation value of source and wider (public but also at the vidual level, be Self Data could level. metropolitan private) transition, energy region’s the of service the at questions, mobility to answers generate could private) and (public new for be the springboard This is what a data . . inhabitants. for services where data is shared like, might look commons all parties between concerned. equally ac metropolitan and regional Just as massive - So who will So who will take it? Who is capable of managing the scope managing the scope of Who is capable it? take one that project, this kind of of and complexity (sometimes competing) private brings together lay- researchers, entities, public organizations, We ecosystem? plus an entire innovation men, have become increasingly confident in our- fee the pilot that months of these last few ling over in the future of play to role a special cities have Self Data. are fa- authorities a time when regional At challenges on an unprecedented cing complex - deve social, economic, scale (environmental, is emerging revolution "smart" the lopmental), sys- more intelligent there are more and apace: tems and service that optimize flows, Is there perhaps . reduce . risk. mitigate consumption, and one that is less integrated another way, and re- inhabitants one that offers more open, What if explore? to some space gional actors the Self an entire metropolitan area adopted Data concept, and then managed the flow of and from ac and methods to tools information, fos pilot during all these years, we have proven proven have we years, these pilot during all fos Data ini- a Self implementing of capable are we to intended never we grand scale, on a tiative indefinitely. torch Data Self the carry - all contri that they in order small, big and tors as a matter work, making the project to bute pro- data are often Personal interest? public of them crossing context; metropolitan a in duced a powerful create with local Open Data would exchange best practices, sometimes compete and compete sometimes best practices, exchange cooperate. sometimes DATA SELF CAN FOR LEVER A BE METROPOLITAN INNOVATION? has years the last 7 over on MesInfos Our work in an incredibly actor central a made France development, culture digital of wave powerful and one of the pioneers in the fieldof personal in the preceding All the good news data sharing. maybe causes us (or us happy paragraphs makes make we can how but in practical terms, worry), to Between widespread? more the concept of uptake project carried out a major pilot we 2016-2018, data-holding organizations, together that brought one of and government the citizens a platform, - ecosys and an entire innovation in France region of the hidden potential explore concretely to tem The data holder partner organizations Self Data. regain to 2000 individuals than more enabled holding, were data they the personal of control however . . reuse it. so that the individuals could pleased. they the MesIn- in our role coordinating though, Even
"Industry "Industry is seeking . And in England, the And in England, program. open innovation studio, and lauded the studio, open innovation Supporting the emergence of data mar- data Supporting of the emergence digm shift" that "enable individuals to regain regain to individuals "enable that digm shift" explicitly and has their data", over control Tenders support. European Union called for for H2020 project proposals are appearing (eg: which most of — ) and the data economy kets the head of Finland, oriented. "Self Data" are European Union at the time of the of Council a create to "need has embedded the writing, where individuals data economy, competitive in- promoting access, seat, are in the driving data while res- use of and the teroperability individuals" of rights and privacy the pecting in its official in consumers Putting "Smart Data Review: enabling innovation" their data and of control led by Her Majesty’s Government in can play understand the role they better to - develop and services technology data-driven company Development State Finland’s ment. launched a Self Data-themed Vake Hack" national Post Office for its newly-designed of a series Launching steps? Its next PIMS. - will enable thou that studies pilot MyData their data. of control regain Finns to sands of What all these initiatives have in common is that in common have What all these initiatives — frameworks accountability tabling new are they are gone Long about them. thinking at least or services isolated of minor examples the days of each other, to talk All these actors and platforms. " is supporting the " looking at facilitating looking at facilitating startup garage MyData pilot study emergence of services at various points on at services of emergence so are many and — spectrum the data control the 2016, October In administrations! public Supervisor (EDPS) European Data Protection - "para represent a that PIM systems estimated Growth in the PIMS market is also very pro- very is also the PIMS market in Growth not launched, when MesInfos In 2011, mising. of dozens Today, operational. one was truly Di- position: for entrepreneurs are jockeying Onecub, Fair&Smart, Matchupbox, Cozy, gime, the of the granddaddy — Tim Berners-Lee etc. has launched a personal — Web Wide World Even called Solid. hub/platform data control with is jumping on the bandwagon, Microsoft in France, Back as Bali. known PIMS, its own " Facebook’s mobility data sharing, and the Finnish Natio- and sharing, data mobility avenues is considering Agency nal Education sharing education data. toward quality data or other benchmarks, serve as a serve benchmarks, data or other quality their of the state their monitoring means of know get to to help them overall, health and better. themselves hap- experiments There are also large-scale - Digime and the Ice Iceland’s pening abroad. are setting up a health data Ministry landic the Finnish individuals, for sharing service Department spearheading is Transportation a » » » » “MesInfos: Self Data Cities” — What if cities took a central role in
returning citizens’ personal data to them? P WHAT IS THE BEST WAY TO SHARE SHARE TO WAY BEST THE IS WHAT DATA 5 SELF DATA? PERSONAL MODELS GOVERNANCE and explored we on MesInfos, During our work gained experience with a specific typeof data it While cloud. model: the personal sharing that no believe we advantages, many does offer rendering capable of uniquely single model is are at There their data. over individuals masters perso- including models, shelf" the "off five least - modi which can be hybridized, all of nal clouds, one-size-fits-all a isn’t there that Given etc. fied, support the po- solution that can unilaterally public the local the role of Self Data, of tential guide will be to the movement, leader of entity, one or another personal towards collaborators model. data sharing governance describe here are models we The governance of differing orders of The magnitude. first two standpoint from a technical different very are which is not to cloud), personal transfer, (direct depends everything — are neutral that they say etc. their use, who drives are used, they on how third party trusted — models The other three data trust and civic data co-operative, platform, in that can operate are organizing principles — detailed providing By two. first the with tandem - gover these models of each of of explanations public inspire metropolitan to seek we nance, - struggle between proponents of privacy protec privacy of proponents between struggle gain on the and economic one hand, tion on the other. "who is allowed the question of to The answer who has i.e., — do things with personal data" to personal value from deriving of the privilege point our was It absolutely. important, is — data to departure research: how of the MesInfos for utility derive personally to individuals enable - neces "who" question But the from their data. —"to sarily entails reflection about thepurpose purpo- is in the realm of it because — what end" se that the risks and abuses reside. exclusive? mutually strategies So are these two which goggles, "tech the remove Or can we pri- between trade-off suggest a binary falsely that author Ben Green and innovation" vacy A The Smart Enough City? describes in his book, medium is what Self Data points toward: happy of control that puts individuals in a framework time al- and at the same their personal data, emerge in value-creating uses to new for lows so- and civil collective individual, response to cial challenges. SHARING PERSONAL PERSONAL SHARING GOVERNANCE DATA: MODELS research programmes, studies, "The publications, the agendas evincing interest tank and think But protecting personal . . . . legion are smart city these of much the poor relation very data is still problems that worst, at Individuals remain, efforts. 1.0. smart city were in as they just — solving need and participative promoters of for some At best, are treated like they cities at least, contributive data is essential to whose mobile smartphones urban affairs.” of the proper conduct (in French; CNIL - LINC ville. Plateforme d’une La in English) summary, project and conferences attended have we often All too to ques- finding answers to devoted workshops do get we share to people "How their tions like "Which le- better, the slightly or, data with us?" data sharing approaches will gal and technical privacy?" people’s also protect heard ques- we have — rarely far too — Rarely - "Why share personal data with the in tions like, We what end?" To them? dividuals who generate data as if it were treating personal been have or out in secret, be parceled to booty stolen during the never-ending protect a hostage to (September 2018 to 2019) with these three cities these three 2019) with 2018 to (September as We our defining by began partners in the field. in themed authority regional each of the role - empower with citizen formulated experiments Métropole in Nantes The themes ment in mind. food my impact of and limit the "understand were car- home’s my and reduce "calculate choices", the production to "contribute and footprint", bon neighborhood/city". energies in my renewable of manage "better the themes were Rochelle, In La improving to "contribute and budget" mobility my And for region". the transportation my in offering social my "oversee were themes the Lyon, Greater "understand and obligations" rights and services rights and entitlements". (social welfare) my ap- a different be exploring would Each territory use each its own and so to Data, Self proach to the agenda to according cases and challenges, that would The choices pursue. each was going to po- roles, actors’ — implementation project inform could they because be crucial, would — sitioning and unique data sharing models. new lead to - nizations to set up their own data transmission data transmission their own set up to nizations channels; new foster cities can data innovation, driving 2) By a) promo- by personal data governance of forms enable that projects and models piloting and ting trust, of via frameworks their data reuse to citizens ac and public private of variety a getting and b) around the same civil society and members of tors experiment to them the space table and offering together. in its capacity intermediary, relational As a key 3) as first pointof contact for all things citizen re- authorities are in the ideal po- the regional lated, role active a more symmetrical, establish sition to ur- enriching are presently Citizens individuals. to their own rather than with their data, ban services co-design, and mediation digital utilizing By lives. imagine Self Data to with citizens work can they cases use create and them, to speak that scenarios but needs, citizens’ to correspond that not only as challenges facing the wider region the also to a whole. that muni- not escape the conclusion could We in ma- play role to a special have cipal actors Our discussions with the king Self Data a reality. a MesInfos (already Lyon Greater French cities of and La Nantes of the City partner), pilot study Rochelle confirmed whatwe This hadconcluded. our launching the Self Data Cities project led to 1) As a data collector, it can lead by example, and example, it can lead by As a data collector, 1) it holds return the data to set up sharing protocols to This adds legitimacy them. to about its citizens the same approach, take others to ask a call to providers. startingservice digital its own with means has both the necessary government Local orga- regional convince to and the action force The local public actor must play the role of Self the role of must play actor The local public mo- new a of and facilitator mediator driver, Data metropolitan A personal data governance. del of make to is unparalleled in its capacity authority reasons: three for Self Data a reality Self Data is based on the idea of an innovation an innovation idea of is based on the Self Data or on a on disruption, focused that is not solely Self Data offer. new "revolutionary" startup with a their cities. bet on the future of to asks adopters from any emerge will inevitably services new True, more But program. Self Data ambitious regional radical- involves this direction taking importantly, at personal data, look we the way transforming ly multi-purpose, distributed, and creating a more holders, data gets that ecosystem value-enabling researchers and entre- social enterprises, citizens, in involved and general interest) preneurs (public to than local authorities Who better the dynamic. paradigm this into stakeholders regional guide shift? new role for regional authorities" as "mediator and and "mediator as authorities" regional role for new level. at the territorial change systemic of driver" “MesInfos: Self Data Cities” — What if cities took a central role in
returning citizens’ personal data to them? P - - Protector of Protector the transfer Individual ives consent e plicit Data holders Third party or party Third holder Data Data sharing Data tor-based approach might be more appropriate, might be more appropriate, approach tor-based perspec the from potential, reuse data that and somewhat. be limited might the reusers, of tive - "me individuals are is that Another drawback is though consent Even consent-givers. rely" the individuals can’t see explicit, and informed reuse their data they nor can "moving", data is fragmented: the process Also, themselves. minimum, actors, two to must be given consent the personal unlike Moreover, each service. for Everyone’s Everyone’s responsibilities are clearly defined, legal a mitigated it represents all, above and, and re-users. both holders for risk individuals allow not really it does yet And really to data, their of overview 360° a get to are not going to services it: third-party master sign and APIs holders’ different 1000 to connect sec a that means This contracts! different 1000 - tly between data controllers with the explicit, explicit, with the data controllers between tly services for individuals, of consent revocable can participate in public or so they provision - For exa or research projects. projects interest "Ene- the Enedis created provider energy mple, who have Customers project. dis Data Connect" that services smart offered are meter Linky a in- Enedis’ to with their consent, will connect, use and help them derive system formation This model has data. from their consumption therefore and actors, fewer a great advantage: implementation. as regards less complexity be signed between can potentially contract A specify to the data holder and the reuse service the of data protection,usage of levels processes, data (volume, retrieve infrastructure to bearer’s - potential could Some services etc.). regularity, to not allowed and hence "blacklisted" be ly security for system the data holder’s to connect example. for reasons, organizations using this Although there are few des- the model we — protocol transfer kind of the minds of in exist cribe here doesn’t really that the likelihood — the digital outside actors high, quite is probably it will inspire uptake and is coding, with" "mess it does not because with the current digital economy. consistent 2) Direct transfer 2) Direct prin- key on a grounded is transfer Direct direc place takes Data sharing ciple: consent. Exemples nal data, for example by allowing algorithms to to algorithms allowing by example for data, nal the data clouds without thousands of run over data means personal This clouds. leaving those and big data analytics power used to be could the individual of the control still remain under cloud sha- personal In addition, concern. they individual from sharing (data capabilities ring improving. are etc.) data pooling, individual, to them and their users and clients, plus there are there are plus clients, and users and their them up keep to connectors channels and transmission are another tool they For individuals, . . date. to who develop the ones — reusers For master. to projects cloud personal — services third-party trustworthy create to investment: extra require - with data-hol work learn to to have they services, and therefore data controllers, ding organizations’ align their effortsdata whose actors other with from theirs. differ may management approaches the ope- to technically adapt to also have They personal cloud platform every of rating system crea- to are used Most developers encounter. they opera- (GAFA) well-established for ting services to Android, or Google’s iOS Apple’s — ting systems or within the massive, — biggest name the two This is a Facebook. like ecosystems self-contained technology the when make to adjustment difficult users. few very is just emerging and has data sha- where personal In the digital economy, (personal organizers, services ring with third-party their to is integral etc.) transportpublic apps, the advantages of consider here we functioning, such environments data-sharing dedicated using in place Data crossing takes as personal clouds. a trusted carried out by a personal digital space, the though for Even as host. provider third party - fo is largely cloud sector the personal moment, - personal cloud = an indi "a cused on individuals: they looking at how research is underway vidual", use from perso- collective derive can be used to ...... 1 Data 1 Data sharing sharing Mr. Martin's Mr. Martin's Mr. personal server personal server Mrs. Dupont's Mrs. Dupont's personal server personal server 2 processing 2 processing algorithm algorithm STORAGE STORAGE Data Data holders holders Services Services réutilisateurs réutilisateurs Individual Individual personal cloud personal cloud At home At home At Central server Central server Central data Martin's Mr. data Martin's Mr. Mrs. DuPont's Mrs. DuPont's data data +... +... or or to their development. Even though there are many though there are many Even their development. to data holders perso- for using them, advantages to between another intermediary yet nal clouds are personal cloud Personal clouds are still very new. Low adoption Low new. very are still clouds Personal is a barrier individuals and data holders alike by The personal cloud is like a digital home: a space a digital home: a space is like The personal cloud their data from can aggregate where individuals one not server, personal their on sources different having The advantage of an organization. run by to designed services any that is server personal a their data will run on value from help them derive - as on-board com known a process — that server With a the server. the data don’t leave — puting and the data, to come the services personal cloud, can be developed Such services the data stays put. which are datasets, based on synthetic anyone by but not actual (in detail). (in form), representative yet and home, their digital leave to No data needs that and apps services individuals can still enjoy mobilize and triangulate their data that find they complete Individuals have "Store". on their cloud’s on their which is stored their data, over control is also (self-hosting or locally virtually machine, a possibility). 1) The TECHNICALLY SPEAKING, TWO VERY VERY SPEAKING, TWO TECHNICALLY CLOUD THE PERSONAL MODELS: DIFFERENT TRANSFER DIRECT VS. actors to act, and equip them with the tools they they tools them with the and equip act, to actors among them. select to need “MesInfos: Self Data Cities” — What if cities took a central role in
returning citizens’ personal data to them? P - tive tive can be re-identified to the individual: collective? possible in a really data anonymity is but data, other members’ cannot see Members collec other the of names the knows everyone procedures voting roster); the (via members tive - joint decision-ma also be open (debate, may is under no obligation a cooperative Also, king). virtuous data usage will be that (a guarantee to grant its members right to has the cooperative a data for resell their personal permission to and there are numerous examples cents), few handed with their being as heavy collectives of as organizations operating under employees governance. mode of classic any re- - and their derivatives - Data co-operatives models that make the few one of however, main, data and uses of collective foster it possible to these data. of where individuals remain masters Exemples - Data sharing Data of Collective individuals Reusers Public and private data holders data private Public and Platform from which to from Platform retrieve,store third with personal data and re-share services owned parties and develop the co-op members. by Co op shared decision making Co op shared vote) person 1 1 selected by the selected by co op members Even though data collectives open up new ho- open up new data collectives though Even are they rizons by confined in data governance, their own set of limitations: first andforemost time members must dedicate the amount of by the collective, (the bigger matters governance to Although this becomes). the more complicated the critical mass that burden can be restrictive, also members must large numbers of by created be weighty enough to flesh out a quality digi- that of in the absence In addition, tal service. critical there mass, is the - significantly heighte the collec by shared pooled data that risk ned - "there - col notion of “any Lionel Maurel: Antonio Casilli and Paola Tubaro, and Paola Casilli Antonio 4) The data co-operative The data 4) jointly to a group individuals formed What if they how decided then and data, their manage collec them, share and them use to wanted tively? This is the route of the (still rare) data of This is the route tively? principle that 1 in- Based on the co-operative. de- jointly members co-op data vote, dividual=1 search en- apps, (chat and services tools velop grant them control that eventually etc.) gines, might The collective Z. to A their data from over via them share to together decide also simply public to contribute to example for a platform, creation. knowledge how of control individuals regain In this model, (sharing) others by used is data personal their of make will themselves they uses the of and - exis might adopt They creation). them (services (email services free-standing ting open source, their own. or develop etc.) or chat services, - supportiveThis model is particularly col of In data pooling. that require initiatives lective valuable more made be can data personal fact, resear- to According when not used in isolation. chers is nothing more collective than personal data". data". than personal is nothing more collective National France’s of add the words we this, To Centre for ScientificResearch Associate Scien- tific Director decision a collective data must include lective and severally that incontestably making power its members”. resides in the hands of The keyword in the trusted third party platform platform third party in the trusted The keyword close very all, after model is, the — "trust" is concept the current paradigm it, so without — Google’s to plays operator platform The not change! would and also centralizes guarantor transfer the role of and the data rests the tool over Control storage. - provi as organization, the of hands in the more it services the and manager of the platform der of such as services the way is similar to This offers. Amazon and Netflix use platforms (but minus a services products and their own promote PIMS) to their of view a global Individuals still maintain . . . - provi are often these platforms Nowadays, data. be to Data reuse tends large institutions. ded by data personal and services on integrated focused al- postal platform DigiPoste France’s sharing (eg: and data the documents organize to users lows needed to build a real estate application file and an agency). share it to Exemples Data holders Central server Central data Martin's Mr. data +Mrs. DuPont's + ... Platform storage Platform Individual Data sharing Data Access Individual Central platform Central + platform integrated services Individual rants consent rants Reuser and Reuser data other holder services A key facet of this model is basically that it is the basically this model is of facet key A vault: a portal a digital of platform/ version 2.0 and orga- users can retrieve where personal space data from multiple sources, documents and nize services of advantage take also and them share - from third parties inte been or ones that have is a personal So how the platform. into grated data On a personal cloud, Storage. cloud different? - and data proces on a server, is centralized storage third parties than elsewhere is performed sing by - is an exa Record Shared Medical France’s locally. although platform, third party" "trusted a mple of document rather than it supports mostly today data and aggregation, is used chieflyby usersto rather than share data with health professionals services. via dedicated reuse them 3) The “third party platform” party “third The 3) - Exemples THREE MODELS THAT ARE TECHNICALLY ARE TECHNICALLY THREE MODELS THAT WHOSE GOVERNANCE SIMILAR, BUT THIRD THE TRUSTED DIFFERS: APPROACH AND TRUST CIVIC DATA PLATFORM, PARTY COOPERATIVE. DATA cloud, the data flows to the services, which means means which services, the to flows data the cloud, wit stored and data are duplicated that personal A separate entity can, however, play the role of the role of play however, can, entity separate A the and individuals between party third trusted and re- organizations (data holders other two guarantors". "transfer them as of think We users). data of and authenticity ensure the security They individuals dashboard for a sharing and provide their and manage oversee (and organizations) to portability to data rights and obligations related (and thus consent/sharing), data erasure, modifi- etc. cation, - the prolifera to This contributes service. hin each privacy personal and makes data, personal tion of vulnerable. mechanically “MesInfos: Self Data Cities” — What if cities took a central role in
returning citizens’ personal data to them? P far more sense to treat them as smaller, agile treat them as smaller, sense to far more In trust”. governing one overarching, units than - data hol work, data trust to a civic for case, any hold. they share the data to agree to ders have in- Data, Self with the spirit of And in keeping merely than more as treated be must dividuals must be granted they — contribute the data they to framework within the governance real power define future uses. Exemples sions, etc. — — according sions, etc. to the conditions defined a step also represents This model the group. by do on their own data Public Open Data. beyond market, services the emerging facilitate not really good, the public serve to ones designed especially data may data with personal but crossing public uses. new entirely the creation of to contribute done being work the of majority the in Today, on emphasis is placed little around this model, In fact, individuals. the role of personal data and role in re- a peripheral only personal data play data manage- development, gional data platform data trusts. civic ment and the wider domain of But some trust builders are starting an take to the platforms, party third to Similar it. in interest “Who is the third individuals is, crucial question for offered when Google Toronto, In exactly?” party, imme- proposal the trust, data a civic up set to “Will Google be as, raised questions such diately a seat at the given choose the trustees the one to Some table when it to definingcomes the rules?” one — up with alternatives are starting come to with Toronto of the National Library entrust is to Sean by As noted oversight. of the responsibility Civic many build to easy as just is “It McDonald, so build one, as it is to example, for Trusts, Data use case to them according organize could a city are Trusts need. public or group representative or abi- data’s and given replicate, to easy structurally it makes re-use, support to non-competitive lity API data Trust platform Trust Third party services party Third data Enriched services and data Enriched services and Individual PUBLIC AND DATA PRIVATE HOLDERS The data can be physically stored and accessed and accessed stored The data can be physically or can be left our diagram), (see via a platform “trusted the and the trust becomes are, where they data and secure private who oversees guarantor” causes to contribute to example for — transfer discus- policy public interest, the public that serve According to the Open Data Institute, a civic data a civic the Open Data Institute, to According independent structure that allows legal “a trust is third party”. a trusted data by management of pri- actors, public can comprise body The trustee go- Its society. civil of members and actors vate but those rules rules can be multiple, vernance the use of on the trust’s consensus must facilitate by it to entrusted data non-personal and personal individuals and data holders. 5) The civic data trust data The civic 5) “MesInfos: Self Data Cities” — What if cities took a central role in
returning citizens’ personal data to them? P model. . . . The risk of a buyout by one of the the of one by a buyout of The risk . . . model. - Face or Google, Apple, like Leviathans web’s fantasy”. as sheer not be dismissed should book users and build the ne- So what will reassure - tech open source Are the use of trust? cessary data taking one’s of possibility nologies and the elsewhere if the service is bought back suffi- - consi us to Maurel invites cient guarantees? be can relationship the that possibility the der , avirtuousa Coopcycle along the lines of one co-ops messenger bike of European federation consider to need current thinking is that we “my and the soli- the digital Commons converging models that are part develop to economy darity limit but also aim to sphere, the economic of asprofitability an endgame from start, very the efforts other actors’ and market and reinvest interest”. the public serving into they can be enacted. According to the above, for for the above, to According can be enacted. they trus- a as classed be could Facebook example, so could and — provider platform third party ted of launch with its recent evidenced as Microsoft, the data storage of consideration Careful BALI. - If a data co-ope paramount. is equally aspect anyone where data in a country stores rative data the over control individual it, can access the same These are essentially a hit. will take in the digital platform issues that pertain any to on who oversees depends Everything economy. Then rules. which to and according the model, you, should another question arises: what role and Tools in the model? play actor, the public And sponsor? tender Public provider? services res- place put in who ensures the framework is No choice involved? stakeholder every pects will be take you course and whatever “wrong”, the emerging given in some way, experimental Self Data. the domain of nature of - consi landscape to Then there is the economic say who is to third party, is by If governance der. them force will not eventually that investors and hand over other service, any act like to in personal data? Lionel Maurel (Calimaq, users’ Tim Ber- question after very this French) asked that his startup announced Inrupt had ners-Lee capital giants venture from funding secured (and with success “If Solid meets Glasswing. do what guarantee hoping it does), to here’s change its suddenly that Inrupt won’t have we in the hands of a single (public or private) or private) single (public a hands of in the several by or is it controlled organization, a group (shared governance), organizations alone? or the individual individuals, of who is the mo- use(s): The question of governance Do the data del destined for? - indivi favor framework and governance to groups, uses (for dual uses or collective etc.)? good, the common to contribute » » data governance positioning the models of By and equip hope to we axes, along these two among them. making the choice guide actors platform, third party trusted The personal cloud, individual present mostly all transfer and direct The personal cloud puts the use possibilities. the per- of and control a digital home, of keys indivi- in the hands of sonal data it contains, the platform duals; the for third party platform, and seat; driver’s the in is organization provider the data-holding organizations in data transfer, Both data sharing decisions. over power have data trust and the civic the data co-operative but radi- use, collective for vast potential have em- gives first the control: of loci different cally whereas the individuals, to the data pire over seat a marginalized at best, them, offers second making table. at the decision Despite the utility of having clear definitions, the way remain cautious of to you advise we CT A T A D
T ST AL 360° T A D A T ST CI IC DATA LA S OO LE) SIDE CO M