Preparation

No special preparation is necessary. 

Method / Process description

Who owns my data? 

Introduce the following scenario and distribute the roles. Allow each participant a short time to prepare. Afterwards, everyone in their roles should first briefly explain why they have a claim to the data. 

If no discussion arises from this, the statements listed below can be interspersed in the round. 

Scenario: 

We buy a new car. A GPS transmitter is installed in the car, which sends anonymised data about our position. The data is collected and analysed by the manufacturer of the car. 

Who owns the data? 

Discuss the topic in the following roles: 

Owner of the car 
It's my data. It is my movement data. And it should not be collected or processed without my knowledge and explicit permission. 

Car dealer / car manufacturer
The vehicle is not yet paid off, therefore the car is still in our possession. The data will only be evaluated by us in case of hardship, e.g. if there has been an accident or the car is stolen. 

Manufacturer of the GPS system / service provider / manufacturer of navigation devices
We use the data anonymously to calculate traffic data. This makes it much easier for us to predict traffic jams and offer a better service accordingly. After all, a mobile phone provider also collects data about its customers' devices, it's no different with us. 

Insurance company
For us, traffic data is important evidence in insurance cases. For example, in the case of an accident. Then we can determine whether the car was driving too fast. This makes it easier to clarify the question of guilt.

Discuss the following question: 

• Who owns the data? 
• Who may have the right to use the data? (Right of use)
• May certain data be processed without the consent of certain roles? 

Discuss the following extended scenarios:

• In the future, the car will automatically send a signal to the rescue centre when an accident is registered. Based on speed, braking and registered impact, either only the police or directly also the rescue centre will then be informed. 
• In the future, the insurance company would like to introduce a discount programme to which the insured can voluntarily sign up. Within the framework of the programme, driving data will then be evaluated and discount points for the sum insured will be awarded on the basis of individual factors (number of journeys, speed, etc.). Good, anticipatory driving is rewarded. 
• The insurance company from the previous scenario wants to change the discount programme in the future. It advertises low rates. However, customers who do not participate in the discount programme will have to pay more. 
• The service provider that manages the GPS data would like to cooperate with other third-party providers from the advertising industry in the future. This will make it possible to play individualised advertisements to vehicles in real time via the radio. Based on data such as kilometres driven and fuel level, e.g. the next petrol station. Or on the basis of position, nearby shopping facilities. Using other data (such as car make and type), conclusions can also be drawn about purchasing power, which in turn influences the selection of advertised products.  
• Due to a hacker attack, the customer data of the car manufacturer and its car dealerships fell into the hands of the hackers. They can now assign traffic data to individual customers on the basis of the chassis number. 
• The police authority would also like to access the traffic data in the future. The chassis number can be used to establish a link to individual persons. Speeders are identified according to the traffic data. Speed cameras are no longer necessary. 

Download material

-

References

-