decentralized-id.github.io/_posts/identosphere-dump/companies/EU/mydex.md
2022-12-10 03:01:12 -05:00

11 KiB
Raw Blame History

MyDex

Today, everyone including powerful actors and decision-makers like the UK Government just know that organisations are the centre of the personal data universe, and that everyone else including citizens revolves around these organisations.

Mydex CIC has just published a blog for Cambridge Universitys Data Trust Initiative on Helping Data Trusts Manage Personal Data. In it, we address the challenges that arise as the Data Trust movement begins to scale.

data security is about system-wide design, where many different elements need to fit together to create a working whole.

The central plank of Mydex CICs consultation response is that the UK needs to build a new layer of data logistics infrastructure that:

  • Includes citizens in the workings of the data economy, empowering them with the ability to collect, store, use and share data about themselves independently of any data controllers they may have data relationships with.
  • To achieve this, the Government needs to ensure that every citizen is provided with their own personal data store, which enables citizens to collect, store, share and use their own data, under their own control, for their own purposes, independently of any organisation that may have collected data about them.
  • These personal data stores should be designed to act as neutral, enabling nodes in a vibrant data sharing network, whereby citizens can obtain copies of their data held by organisations and can forward relevant elements of this data (such as Verified Attributes) to other data users under their control, as and when beneficial and necessary.

The first focused on how to unleash the full potential of personal data, the second on why every citizen should be provided with their own personal data store. This blog explains why this strategy can be quick and easy to implement.

To catch up on progress on our Macmillan My Data Store Pilot click here.

  • Misconceptions that Kill Progress in Personal Data

    It is not possible to make good policy decisions about priorities for investments, grants, innovation and research projects or rules and regulations if the grounds for these decisions are faulty. Currently, effective policy making is hampered by widespread misunderstandings about where the biggest economic opportunities lie, the nature of issues such as control, and the role of citizens in the workings of the data economy.

  • Not Just Personal Data Stores Alan Mitchell

    This is the fifth in a series of blogs which provide edited extracts of key points made by Mydex CIC in its response to the UK Government consultation around a new National Data Strategy.

This blog focuses on the main ingredients needed to unleash the full potential of personal data — in addition to personal data stores.

Link to White paper “Its not enough to identify whats wrong with how things work today.“

Mydexs role will be to provide the data sharing infrastructure to enable individuals and service providers to safely and efficiently share the right data at the right times, in ways that protects individuals privacy and puts them in control of their data at all times and enable two way engagement and feedback throughout the project.

Below are some of the design principles that underpin our infrastructure and services — principles designed to ensure that what we do truly does serve citizens, today and into the future.

One reason the UK Government wants to abolish citizens rights to data protection is to create conditions for Artificial Intelligence (AI) to blossom. This, it says, will “bring incredible benefits to our lives”.

The big question now is how to enable this to happen at scale, safely, securely and efficiently. One key element of this is useful, easy-to-use interfaces, the taps and switches that mean people can use the infrastructure without having to think much about it. .

Over the last 14 years we have built the infrastructure needed to make citizen data empowerment possible — infrastructure capable of providing every individual with their own personal data store, where they can safely and securely collect their own data, use it and share it under their own control. This infrastructure is now live and operational, officially recognised as a supplier to public services on procurement platforms in both England and Scotland and independently accredited for data management security under ISO 27001.

By recognising the pivotal importance of verified attributes and the potential role of personal data stores in enabling the sharing of these attributes, it is opening the door to actually solving the problem of identity. At last.

Is the EU discussion about data portability missing a key point?

In its discussion of data portability the EU rightly recognises the economic importance of this issue, stressing that “market imbalances arising from the concentration of data restricts competition, increases market entry barriers and diminishes wider data access and use.”

it is likely that many dApp developers now need an identity solution that preserves privacy but ensures compliance which is exactly the solution that we are building at SelfKey.

One of MyDex CICs founders, Alan Mitchell shares a feeling of Vindication in a post celebrating the companies early articulation of key principles and how the EUs proposed new Data Governance Act aligns with that.

These providers will have to comply with a number of requirements, in particular the requirement to remain neutral as regards the data exchanged. They cannot use such data for other purposes. In the case of providers of data sharing services offering services for natural persons, the additional criterion of assuming fiduciary duties towards the individuals using them will also have to be met.

A key part of this is continuity and longevity: a personal data store is for life, so the institutions providing personal data stores should be designed for decades (centuries, even). Whatever particular corporate form they take, legal safeguards relating to continuity and longevity of purpose need to be built into how they operate.