Ingo and Jeff,
Great item for focus. We might look at the OnStar or other vehicle services
for car folks. Traffic data is a pretty good analog.
Best,
Sal
From: Ingo.Friese@telekom.de [mailto:Ingo.Friese@telekom.de]
Sent: Friday, November 22, 2013 4:10 AM
To: stollman.j@gmail.com
Cc: dg-idot@kantarainitiative.org; sal@idmachines.com
Subject: RE: [DG-IDoT] Stawman framework for Use Case Analysis/comparison
Jeff,
I see the same privacy problem. I described it in a former mail. I have a
project with a manufacturer of harvesters. In fact these people collect data
in a machine that is owned by a farmer. But the manufacturer collects data
with an attitude as he is the owner of these data. To get worst the
manufacturer wants to sell these data to the farmer.
I thought about asking our Kantara privacy and public policy group. I hope
they can give us opinions, hints or a bit guidance here.
Best Ingo
From: dg-idot-bounces@kantarainitiative.org
[mailto:dg-idot-bounces@kantarainitiative.org] On Behalf Of j stollman
Sent: Donnerstag, 21. November 2013 18:20
To: Salvatore D'Agostino
Cc: dg-idot@kantarainitiative.org
Subject: Re: [DG-IDoT] Stawman framework for Use Case Analysis/comparison
Colin,
I don't disagree with the strawman as depicted. But I suspect that one area
that may require further decomposition is the notion of "Identity Owner." I
am not certain what this indicates. My first guess is that it is an attempt
to specify the identity of the entity that "owns" the device. To me this is
one of the stickiest issues of IoT. If I buy a device that collects my
exercise data and presents it to me to help me manage my fitness, do I own
the device? Do I own the data it generates? What if the device maker
builds-in a data feed to their data warehouse to use the data to
characterize the broader population of its users? If they charge me a
subscription fee to access my data, do I really "own" the device?
The car example adds even more complexity. I buy a car, but it has a
built-in data feed to the manufacturer that transmit my driving behavior, my
location, whether or not my airbag has deployed. Does it matter that I own
the car, if the manufacturer owns the data? What happens to the ownership
of the historical data when I sell the car to someone else? Are they
entitled to the history? Or is it personal data that I retain rights to?
(Could I buy a car formerly owned by a celebrity and analyze their data to
profile them for an expose' in a magazine?) "Owners" may not be
"controllers."
While the issues of ownership can be resolved through contracts law, I think
we need to consider the various ramifications in order to appreciate the
ramifications of different contact arrangements.
Thank you.
Jeff
On Wed, Nov 20, 2013 at 3:05 PM, Salvatore D'Agostino