Von Ralf Keuper
Im Oktober diesen Jahres veröffentliche der European Data Protection Supervisor (EDPS) seine Stellungnahme zum aktuellen Stand und den Erfolgsaussichten von Personal Information Management Systems (PIMS), wie Digi.me oder Meeco.
Possible business models for PIMS that could be viable for the individuals and the PIMS themselves include so-called “freemium” models vis-à-vis individuals: free basic functionalities, with additional functionalities, e.g. individual analytics on top of data against payment. Offering analytics-as-a-service on top of the data and fund the platform partly on this basis could represent in itself a privacy-preserving design facilitating big data analytics on top of personal information.
PIMS can also be offered as a service to companies or other organisations willing to improve their service offer to their clients through a privacy-friendly means of interaction. Revenue in this context would be generated by fees paid by the organisations using the data managed by the PIMS. Public sector bodies can likewise be clients when exploring personal information management in order to allow citizens to better manage access and use of their data in an ‘eGovernment’ context, e.g. in a setting where the ‘once-only’ principle is applied.
Nach Ansicht der EDPS geht der Trend in Richtung ‘Authorising use of’ rather than ‘selling’ personal data:
On the contrary, as a matter of principle PIMS will not be in a position to ‘sell’ personal data, but rather, their role will be to allow third parties to use personal data, for specific purposes, and specifics periods of time, subject to terms and conditions identified by the individuals themselves, and all other safeguards provided by applicable data protection law.
Zum Einfluss der General Data Protection Rules (GDPR):
The new GDPR, including rules on increased transparency, and powerful rights of access and data portability, should help give individuals more control over their data, and may also contribute to more efficient markets for personal data, to the benefit of consumers and businesses alike.
Hürden, die es zu überwinden gilt, um als Anbieter eines PIMS Erfolg zu haben:
However, PIMS face the overarching difficulty of penetrating a market dominated by online services based on business models and technical architectures where individuals are not in control of their data .. . Shifting to a situation where individuals have the effective possibility to give a service provider access to some data in their PIMS instead of providing the data directly to the service provider will require additional incentives for the service providers. The Commission may use the initiatives it has announced on data flows and data ownership to explore which additional policy initiatives could motivate data controllers to accept this way of providing data. Furthermore, an initiative by public eGovernment services to accept PIMS as a data source instead of direct data collection could add critical mass to the acceptance of PIMS. ...