With the growing ability of Consumer Products (CP, such as cars, smart devices, etc.) to generate, gather and share data with third parties among different data-sharing platforms, there will be a general need for flexible and easily manageable procedures to handle data subject’s consent and legal rules, to achieve effective and traceable contracting. The complexities of the General Data Protection Regulation (GDPR), for example, possess some challenges and require complex mechanisms to obtain, record and manage consent. Also, data subjects are afraid about improper use of their data. The combination of understanding and relating to the value proposition, consumer trust, and complex consent processes, results in a low opt-in rate for connected product data exchange (e.g. data from cars) and prevents the creation of innovative services (e.g. connected vehicle insurance programs, or smart city solutions).
In contrast to today's fragmented data sharing landscape, which is characterised by non-heterogeneous technical designs and proprietary implementations and by this means is hindering the use and integration of data from various platforms due to missing solutions for effective consent/contracting and data use traceability etc., the smashHit project focuses on user-oriented solutions that make data marketplaces more attractive and trustful for its key stakeholders. Therefore, smashHit had to overcome several obstacles by establishing an inter-data-platform solution enabling simplified multi-platform consent/contract processes for exchanging data also ensuring a trustful data use traceability. To address these key challenges, smashHit needed to achieve the following main objectives:
• Improve citizens trust by means of tracing the use of data over diverse platforms
• Improve OEM & data customer’s trust by means of fingerprinted data to ensure traceability/unchangeability along value chain and data quality, as well as consent tracing -> notification of all involved contractors in case of broken consent chain
• Simplify consent process through authentication of the individual (certification of consent) and single point of consent (management and distribution of consent)
• Support in consent/contract generation by supporting the digital creation of contract texts, and taking relevant legislations/legal rules into account