Law in the Internet Society

Can we find a win-win way in data using?

-- By ChengyuTan - 09 Oct 2020

By collecting customers' data, some companies start to provide customers with convenient services, and some people can even be benefited from that. But how can we keep a balance between privacy protection and the new development?

My Privacy, Their Profit

Cab Company’s New Business Method

Ten years ago, when I need a cab service, I need to call the cab company, and it would send its contract driver to my designated place. Now, I only need to send a message via the app the cab company will automatically send a cab to my location. Sounds convenient, right? On the other hand, the contract driver only needs to pay the cab company $3 per month, which is a mere 3% of their previous contractual fee (In Taiwan, the driver has to pay a monthly service fee of $100 to the company to enjoy the customers-introduce service.) What's a miracle! Why is the cab company willing to give up 97% of its income?

The Advertisement Business

The cab company finds a new way to fill up its pocket. By tracking my cellphone, the cab company can obtain my current location, my route and my destination. Then, the cab company can send me the targeted advertisings that focus on that data. Advertisers may be a cafe shop near my current location, or a gift shop around my destination. The advertisement income can totally cover its previous loss.

Do I lose my privacy?

The answer is clear. In order to market its advertising service to advertisers, the cab company will definitely need to demonstrate the efficiency of its targeted advertising - it can always display the advertisement that may appeal to me. To reach that goal, the cab company, without debate, will collect all data it received, including my age, gender, location, destination, the time I took the cab and my payment method, so that it can infer my domicile, workplace, work time, even my preferences, traits and interests. The more data is collected by the company, the more the company knows about me. But my privacy was lost slowly during this practice.

In Search of Lost Privacy

It is true that my privacy was lost in the cab company's new business method; however, the new method reduces the driver's monthly service fee, which benefits a great number of drivers. Moreover, by using the GPS system, the route will be recorded and can be reviewed afterward, meaning that detour and overcharging disputes can be reduced, since the reviewable record will deter the driver from doing that. In my opinion, we should not abandon this new business method, since it is a progress which benefits either driver and ourselves. But it doesn't mean that we should continue allowing the cab company to exploit our data without limitation. Instead, we should try to find a way to create a win-win situation. Below is some of my idea:

Transparency and Right to Request to Delete

The data that the company collects involves our privacy rights which should be considered as a part of "human dignity and the free development of personality". And the protection of human dignity and respect for the free development of personality is the core values of a free and constitutional democracy. To protect human dignity from the intrusion of others, self-determination of personal data should take a major role in that. Under the self-determination of personal data, the people have a right to determine whether or not, to what extent, in what method, at what time and to whom to disclose their personal data. Follow the thinking, we, the customer and "actual owner" of the data, should have a right to know what data the cab company has collected. Furthermore, we should also be granted a right to control over the use, maintain or deletion of those data; otherwise, the self-determination of personal data is castles in the air, which will never succeed. The right to review and delete, or you can say "the freedom to choose," is a proper and necessary way that we must purchase.

Regulating the data collecting and using

Ensuring the transparency or right to request to delete may be a good way; however, the actual problem has its origin in data collecting and using. If our purpose is not to forbid the company to collect or use our data entirely, how can we ensure that our data will not be exploited by the company? Firstly, the data that the company collected should be properly and reasonably related to the purpose of the original business operation, and any random or arbitrary data collecting should be prohibited. In order to provide the most attractive advertising service to advertisers, the cab company will collect and analyze all data it can reach, but not all of them are properly and reasonably related to the purpose of their original business operation, which is providing a driving service. The data the cab company can collect should be limited in the scope of that service. Secondly, the company should not be allowed to keep and use the data forever, namely, a time limitation is necessary. Since the main purpose of the data collecting is to provide a driving service, the cab company should be responsible to delete those data in a reasonable after the service is provided. The cab company can still provide targeted advertising services to advertisers, but it can only count on the data of the single ride.

All these ways may let the cab company's advertising service become less attractive, but these are the necessary means to protect our privacy.


Navigation

Webs Webs

r1 - 09 Oct 2020 - 06:18:52 - ChengyuTan
This site is powered by the TWiki collaboration platform.
All material on this collaboration platform is the property of the contributing authors.
All material marked as authored by Eben Moglen is available under the license terms CC-BY-SA version 4.
Syndicate this site RSSATOM