Reviving Purpose Limitation and Data Minimisation in Data-Driven Systems

Authors

  • Michele Finck Max Planck Institute for Innovation and Competition
  • Asia J. Biega Max Planck Institute for Security and Privacy

DOI:

https://doi.org/10.26116/techreg.2021.004

Keywords:

GDPR, data minimisation, purpose limitation, computer science, law, profiling, recommender algorithms, personalisation

Abstract

This paper determines whether the two core data protection principles of data minimi- sation and purpose limitation can be meaningfully implemented in data-driven systems. While contemporary data processing practices appear to stand at odds with these prin- ciples, we demonstrate that systems could technically use much less data than they currently do. This observation is a starting point for our detailed techno-legal analysis uncovering obstacles that stand in the way of meaningful implementation and compliance as well as exemplifying unexpected trade-offs which emerge where data protection law is applied in practice. Our analysis seeks to inform debates about the impact of data protec- tion on the development of artificial intelligence in the European Union, offering practical action points for data controllers, regulators, and researchers.

Downloads

Download data is not yet available.

Author Biographies

Michele Finck, Max Planck Institute for Innovation and Competition

Michèle Finck is Professor of Law and Artificial Intelligence, University of Tübingen. This research was carried out while I was a Senior Research Fellow at the Max Planck Institute of Innovation and Competition, where I remain an Affiliated Fellow.

Asia J. Biega, Max Planck Institute for Security and Privacy

Asia Biega is a tenure-track faculty member and head of the Responsible Computing group, Max Planck Institute for Security and Privacy

Downloads

Published

18-08-2021 — Updated on 07-12-2021

Versions

How to Cite

Finck, M., & Biega, A. J. (2021). Reviving Purpose Limitation and Data Minimisation in Data-Driven Systems. Technology and Regulation, 2021, 44–61. https://doi.org/10.26116/techreg.2021.004 (Original work published August 18, 2021)

Issue

Section

Articles
Received 2021-09-03
Published 2021-12-07