Data sovereignty (data management)

For national data rights, see Data sovereignty.

Data sovereignty is the ability of a legal person or an organisation to control the conditions that data is shared under, and how that shared data is used, as if it were an economic asset.[1][2] It can apply to both primary data and secondary data derived from data, or metadata.[3] In order to use restricted data, data consumers must accept the conditions that it is provided under.[4] In turn, the legal persons sharing data must trust other entities with it. Trust can be supported through the use of a suitable secure information system (such as a data space) which identifies, authenticates, and certifies users.[5]

  1. ^ Farrell, E.; Minghini, M.; Kotsev, A.; Soler Garrido, J.; Tapsall, B.; Micheli, M.; Posada Sanchez, M.; Signorelli, S.; Tartaro, A.; Bernal Cereceda, J.; Vespe, M.; Di Leo, M.; Carballa Smichowski, B.; Smith, R.; Schade, S.; Pogorzelska, K.; Gabrielli, L.; De Marchi, D. (2023). European Data Spaces - Scientific Insights into Data Sharing and Utilisation at Scale (Report). Publications Office of the European Union. p. 25. doi:10.2760/301609. ISBN 9789268031667.
  2. ^ Mertens, C.; Alonso, J.; Lázaro, O.; Palansuriya, C.; Böge, G.; Nizamis, A.; Rousopoulou, V.; Ioannidis, D.; Tzovaras, D.; Touma, R.; Tarzán, M. (2022). "A Framework for Big Data Sovereignty: The European Industrial Data Space (EIDS)" (PDF). Data Spaces: Design, Deployment and Future Directions. Springer International Publishing. pp. 201–226. doi:10.1007/978-3-030-98636-0_10. ISBN 978-3-030-98635-3.
  3. ^ Dalmolen, S.; Bastiaansen, H.J.M.; Somers, E.J.J.; Djafari, S.; Kollenstart, M.; Punter, M. (2019). Maintaining control over sensitive data in the Physical Internet. 6th International Physical Internet Conference (IPIC). p. 4.
  4. ^ Pettenpohl, H.; Spiekermann, M.; Both, J.R. (2022). "International data spaces in a nutshell" (PDF). Designing Data Spaces. Springer: 30.
  5. ^ Bastiaansen, H.; Dalmolen, S.; Kollenstart, M.; van Engers, T.M. (2020). User-centric network-model for data control with interoperable legal data sharing artefacts (PDF). Pacific Asia Conference on Information Systems.