Publication
What Are Your Intentions with My Data? A Tool to Enhance Consumer Data Sovereignty in Digital Ecosystems
Aaron Witzki; K. Valeria Carl; Léon Dankert; Oliver Thomas; Oliver Hinz
In: Heiko Roßnagel; Christian H. Schunck; Daniela Pöhn (Hrsg.). Open Identity Summit 2025. Open Identity Summit (OID-2025), May 22-23, Neubiberg, Germany, Pages 13-28, Lecture Notes in Informatics (LNI), Vol. P-364, Gesellschaft für Informatik e.V. 5/2025.
Abstract
As data collection enhances, consumer data sovereignty becomes increasingly important. Despite initiatives like the GDPR, information asymmetries persist, and privacy policies remain complex or lengthy, often preventing consumers from giving truly informed consent for data sharing. Building on established concepts for more informed consent, we propose a tool---the consent registry---to enable informed consent and strengthen consumer data sovereignty while being easy to implement in a variety of digital ecosystems and applications. Our concept takes three different stakeholder groups into consideration, the consumer, the inquiring institution and the application provider, since often times the consumer is not directly connected to inquiring institutions and instead relies on third-party applications in digital ecosystems. Our tool employs case-to-case consent, describing that consent is valid only for a singular request. This empowers consumers to exercise informed control over data collection and usage while enhancing data availability across institutional borders in digital ecosystems.