Project:Adtech/SITRA call

Goals

• trace personal data
• understand how it is used dynamically
• understand what is stored statically

Techniques

• technical audit through use
  • limitation: we don't know what occurs behind the scenes
• legal through request (right of access)
  • limitation: slow, cumbersome, uncertain
  • but: some places it is easier
• combination (right of access at places where audit says it will be interesting)
  • limitation: still time-consuming

Questions

• which device?
• which browser?

Actors

We focus on adtech industry, which has different roles:

• publisher
• advertisers
• ad exchanges
• data management platforms
• identity resolution services

Right of Access

PREFIX pdio: <https://wiki.personaldata.io/entity/>
PREFIX pdiot: <https://wiki.personaldata.io/prop/direct/>
PREFIX pdiop: <https://wiki.personaldata.io/prop/>
PREFIX pdiops: <https://wiki.personaldata.io/prop/statement/>
PREFIX pdiopq: <https://wiki.personaldata.io/prop/qualifier/>
SELECT ?item ?itemLabel ?service ?serviceLabel ?web WHERE {
  ?item pdiop:P144 ?statement.
  ?statement pdiops:P144 ?service.
  ?service pdiot:P4* pdio:Q188.
  OPTIONAL {?statement pdiopq:P15 ?web}
  SERVICE wikibase:label { bd:serviceParam wikibase:language "en" . }
}

actors with some form of data rights portal (embedded)