{"title":"Google and Apple Exposure Notifications System: Exposure Notifications or Notified Exposures?","authors":"Tatiana Duarte","doi":"10.31228/osf.io/knmtd","DOIUrl":"https://doi.org/10.31228/osf.io/knmtd","url":null,"abstract":"This paper proposes a legal and architectural inquiry to Google and Apple’s Exposure Notifications system, from a data protection point of view, with the purpose to respond to two main questions. (1) Is the Exposure Notifications framework legal by design? (2) Does it afford legal protection by design? The raw material to answer these questions involves (i) a legal assessment of the contractual framework established between Google and Apple (Gapple) and governments; (ii) a review of relevant aspects of the system architecture; and (iii) the identification of some of the system security vulnerabilities. The contractual assessment reveals the underlying power relations between governments and Gapple regarding the use of the API and the design of national proximity tracking apps. The analysis of the system architecture and of the tools to develop national apps expose contradictions between the available public information on data protection and the functioning of the system. The identified security vulnerabilities show that tracking and profiling are possible if simple attacks are deployed. Our analysis indicates that Gapple’s framework may be an example of legal by design which remains blind to legal protection by design.","PeriodicalId":107933,"journal":{"name":"Annual Privacy Forum","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133568068","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Purposes in IAB Europe's TCF: Which Legal Basis and How Are They Used by Advertisers?","authors":"Célestin Matte, C. Santos, Nataliia Bielova","doi":"10.1007/978-3-030-55196-4_10","DOIUrl":"https://doi.org/10.1007/978-3-030-55196-4_10","url":null,"abstract":"","PeriodicalId":107933,"journal":{"name":"Annual Privacy Forum","volume":"48 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126142492","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Tracking Without Traces - Fingerprinting in an Era of Individualism and Complexity","authors":"Florian Adamsky, Stefan Schiffner, T. Engel","doi":"10.1007/978-3-030-55196-4_12","DOIUrl":"https://doi.org/10.1007/978-3-030-55196-4_12","url":null,"abstract":"","PeriodicalId":107933,"journal":{"name":"Annual Privacy Forum","volume":"49 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-06-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129778956","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
G. D'Acquisto, A. Mazzoccoli, Fabio Ciminelli, M. Naldi
{"title":"Privacy Through Data Recolouring","authors":"G. D'Acquisto, A. Mazzoccoli, Fabio Ciminelli, M. Naldi","doi":"10.1007/978-3-030-55196-4_4","DOIUrl":"https://doi.org/10.1007/978-3-030-55196-4_4","url":null,"abstract":"","PeriodicalId":107933,"journal":{"name":"Annual Privacy Forum","volume":"61 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-06-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116105654","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Processing Operations 'Likely to Result in a High Risk to the Rights and Freedoms of Natural Persons' - Lessons to Be Learned from National Authorities' DPIA 'Blacklists'","authors":"Katerina Demetzou","doi":"10.1007/978-3-030-55196-4_2","DOIUrl":"https://doi.org/10.1007/978-3-030-55196-4_2","url":null,"abstract":"","PeriodicalId":107933,"journal":{"name":"Annual Privacy Forum","volume":"197 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-06-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116146466","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Privacy by Design Identity Architecture Using Agents and Digital Identities","authors":"K. Toth, A. Cavoukian, Alan Anderson-Priddy","doi":"10.1007/978-3-030-55196-4_5","DOIUrl":"https://doi.org/10.1007/978-3-030-55196-4_5","url":null,"abstract":"","PeriodicalId":107933,"journal":{"name":"Annual Privacy Forum","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-06-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133795205","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Preliminary Remarks and Practical Insights on How the Whistleblower Protection Directive Adopts the GDPR Principles","authors":"R. Costa, Inês de Castro Ruivo","doi":"10.1007/978-3-030-55196-4_6","DOIUrl":"https://doi.org/10.1007/978-3-030-55196-4_6","url":null,"abstract":"","PeriodicalId":107933,"journal":{"name":"Annual Privacy Forum","volume":"58 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-06-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121422175","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Towards Transparency in the Internet of Things","authors":"S. Escher, Benjamin Weller, S. Köpsell, T. Strufe","doi":"10.1007/978-3-030-55196-4_11","DOIUrl":"https://doi.org/10.1007/978-3-030-55196-4_11","url":null,"abstract":"","PeriodicalId":107933,"journal":{"name":"Annual Privacy Forum","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-06-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122708409","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
M. Angelini, Claudio Ciccotelli, L. Franchina, A. Marchetti-Spaccamela, Leonardo Querzoni
{"title":"Italian National Framework for Cybersecurity and Data Protection","authors":"M. Angelini, Claudio Ciccotelli, L. Franchina, A. Marchetti-Spaccamela, Leonardo Querzoni","doi":"10.1007/978-3-030-55196-4_8","DOIUrl":"https://doi.org/10.1007/978-3-030-55196-4_8","url":null,"abstract":"","PeriodicalId":107933,"journal":{"name":"Annual Privacy Forum","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-06-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129406025","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}