Providing additional protection to individuals’ personal data and privacy, the GDPR will apply to all electronic communications service providers, including telecoms operators, as well as over-the-top applications, and will supplement the recently implemented GDPR. The ePR will significantly affect how mobile operators are able to use data and the ability of Europe’s mobile networks to engage in the data-driven innovation in the future.
As the European Council continues to debate the proposed ePR, we all are entering a crucial phase of this development, which could have a long-lasting impact on the provision of digital services across Europe.
Mobile operators are the backbone of the European digital economy and their networks have enabled the rise of connectivity across the region.
According to the GSMA Mobile Economy 2018 report, Europe has achieved a subscriber penetration rate of 82%, and a mobile internet penetration rate of 70%. As mobile technologies, including 5G and the internet of things move on, mobile operators are more focused on responsibly harnessing the power of big-data to stay at the forefront of Europe’s digital evolution.
Mobile operators recognise the importance of the privacy and confidentiality of communications, and for years have adhered to stringent regulations to protect the interests of the public. The ePR’s continued focus on confidentiality is welcomed, but some aspects run the risk of having a negative effect on consumers and innovation, if practical considerations on how data can be used are not more closely considered.
The ePR will regulate the use of a major source of data for mobile operators – electronic communications metadata. This allows mobile networks to connect people to each other and to services, and includes the date, time, duration and type of communication (whether it is a call or SMS, but not the content of the communication); the source and destination of a communication; and the location of a device.
Metadata can be used in privacy-protective ways to develop innovative services that deliver new societal benefits, such as public transport improvements and traffic congestion management. In many cases, pseudonymisation can be applied to metadata to protect the privacy rights of individuals, while also delivering societal benefits.
Pseudonymisation of data means replacing any identifying characteristics of data with a pseudonym, or, in other words, a value which does not allow the data subject to be directly identified.
The processing of pseudonymised metadata can enable a wide range of smart city applications. For example, during a snow storm, city governments can work with mobile networks to notify connected car owners to remove their cars from a snowplough path. Using pseudonyms, the mobile network can notify owners to move their cars from a street identified by the city, without the city ever knowing the car owners’ identities.
In this way, significant gains can be realised in resource management without necessitating prior consent from each potentially concerned individual, which would be required under the proposed ePR.
Source: ComputerWeekly. com/Beyond-GDPR
Henk N.