Collectively Exercising the Right of Access: Individual Effort, Societal Effect

A final version of this paper has been published in Internet Policy Review with DOI: 10.14763/2018.3.927 please cite as: Mahieu, R. L. P. & Asghari, H. & van Eeten, M. (2018). Collectively exercising the right of access: individual effort, societal effect. Internet Policy Review, 7(3)

GigaNet (Global Internet Governance Academic Network) Annual Symposium 2017

21 Pages Posted: 30 Jan 2018 Last revised: 14 Nov 2018

See all articles by Rene Mahieu

Rene Mahieu

Vrije Universiteit Brussel (VUB) - LSTS, Interdisciplinary Research Group on Law Science Technology & Society

Hadi Asghari

Delft University of Technology

Michel van Eeten

Delft University of Technology

Multiple version iconThere are 2 versions of this paper

Date Written: December 1, 2017

Abstract

The debate about how to govern personal data has intensified in recent years. The European Union's General Data Protection Regulation, which comes into effect in 2018, relies on transparency mechanisms codified through obligations for organizations and citizen rights. While some of these rights have existed for decades, their effectiveness is rarely tested in practice. This paper reports on the exercise of the so-called right of access, which gives citizens the right to get access to their personal data. We study this by working with participants — citizens for whom the law is written — who collectively sent over a hundred data access requests and shared the responses with us. We analyze the replies to the access requests, as well as the participant's evaluation of them. We find that non-compliance with the law's obligations is widespread. Participants were critical of many responses, though they also reported a large variation in quality. They did not find them effective for getting transparency into the processing of their own personal data. We did find a way forward emerging from their responses, namely by looking at the requests as a collective endeavor, rather than an individual one. Comparing the responses to similar access requests creates a context to judge the quality of a reply and the lawfulness of the data practices it reveals. Moreover, collective use of the right of access can help shift the power imbalance between individual citizens and organizations in favor of the citizen, which may incentivize organizations to deal with data in a more transparent way.

Keywords: Access Rights, Privacy Measurement, Data Protection Regulation

Suggested Citation

Mahieu, Rene and Asghari, Hadi and van Eeten, Michel, Collectively Exercising the Right of Access: Individual Effort, Societal Effect (December 1, 2017). A final version of this paper has been published in Internet Policy Review with DOI: 10.14763/2018.3.927 please cite as: Mahieu, R. L. P. & Asghari, H. & van Eeten, M. (2018). Collectively exercising the right of access: individual effort, societal effect. Internet Policy Review, 7(3); GigaNet (Global Internet Governance Academic Network) Annual Symposium 2017. Available at SSRN: https://ssrn.com/abstract=3107292 or http://dx.doi.org/10.2139/ssrn.3107292

Rene Mahieu (Contact Author)

Vrije Universiteit Brussel (VUB) - LSTS, Interdisciplinary Research Group on Law Science Technology & Society ( email )

Pleinlaan 2
http://www.vub.ac.be/
Brussels, 1050
Belgium

Hadi Asghari

Delft University of Technology ( email )

P.O. Box 5015
2600 GB Delft
Netherlands

Michel Van Eeten

Delft University of Technology ( email )

PO Box 5015
Delft, 2600GA
Netherlands

Register to save articles to
your library

Register

Paper statistics

Downloads
103
rank
228,757
Abstract Views
668
PlumX