rpas related privacy and data protection: practical advice for rpas users

12
RPAS RELATED PRIVAC AND DATA PROTECTION PRACTICAL ADVICE FO RPAS USERS Rachel Finn, Trilateral Research Ltd.

Upload: trilateral-research

Post on 10-Feb-2017

683 views

Category:

Technology


6 download

TRANSCRIPT

Page 1: RPAS related privacy and data protection: practical advice for RPAS users

RPAS RELATED PRIVACY AND DATA PROTECTION: PRACTICAL ADVICE FOR RPAS USERSRachel Finn, Trilateral Research Ltd.

Page 2: RPAS related privacy and data protection: practical advice for RPAS users

TRILATERAL COMPANY PROFILE

2

Privacy and data protection

Security and surveillance

Data Science

Crisis and disaster management

Research

Technology assessment

Policy and regulatory advice

Impact assessment

Training

Trilateral Services

Page 3: RPAS related privacy and data protection: practical advice for RPAS users

• Recently led a project for DG ENTR on the privacy, data protection and ethical issues associated with civil RPAS• Legislation analysis in 7 MS

allowing civil RPAS operations + the US and Switzerland

• Surveys with 149 stakeholders: 94 industry, 11 CAAs, 27 DPA and 17 CSO reps

• Workshops with 85 stakeholders

• 385 page report

MOTIVATION FOR DRONERULES.EU

Page 4: RPAS related privacy and data protection: practical advice for RPAS users

• Professional users WANT to be responsible, but they do not know enough about privacy, data protection and ethics

• Private, recreational users are the least regulated category of user

• Commercial users are judged to be “medium risk”• Not nearly enough practical information for those using

RPAS in civil contexts

KEY FINDINGS

Page 5: RPAS related privacy and data protection: practical advice for RPAS users

• Most RPAS operators may be collecting personal data• In a survey of 91 RPAS designers, manufacturers and

operators:

DETAILED FINDINGS

55% 97% 76%stated that their systems either captured members of the public, or that they did not know whether they captured members of the public

indicated that the data captured by the RPAS was recorded

indicated that the data recorded by the RPAS was stored

Page 6: RPAS related privacy and data protection: practical advice for RPAS users

6

• The most common application in Europe• Focused on infrastructure, not people• Footage of people limited to the “tops of their heads”

DRONES FOR INFRASTRUCTURE INSPECTION

• The “tops of their heads” ≠ anonymisation

• Employers, colleagues, etc. might recognise individuals on film

Page 7: RPAS related privacy and data protection: practical advice for RPAS users

7

• Drones have diverse: – Capabilities– Payloads– Operational contexts

RISKS TO PRIVACY & DATA PROTECTION ARE CONTEXTUAL

Using the same drone in with the same payload in a different context can raise new and different privacy and data protection impacts.

Page 8: RPAS related privacy and data protection: practical advice for RPAS users

8

• Most are small organisations or sole proprietorships• Most report only “basic” knowledge of European and

national privacy and data protection law• They will need to assess almost every operation to

ensure that they adequately consider privacy and data protection impacts

RPAS OPERATORS NEED SUPPORT

Page 9: RPAS related privacy and data protection: practical advice for RPAS users

9

Data protection, privacy and ethical issues content including:

– Legal information for professional users– Case studies in professional RPAS use– Privacy impact assessment template– Good practice guidelines– FAQs document

FOR PROFESSIONAL/COMMERCIAL USERS

Page 10: RPAS related privacy and data protection: practical advice for RPAS users

10

Data protection, privacy and ethical issues content including:

– Basics of RPAS privacy handbook– Case studies in private RPAS use– RPAS code of conduct on easy to carry card– Slideshow and quiz on the “do’s and don’ts” of RPAS

use

FOR RECREATIONAL / PRIVATE USERS

FOR PRIVATE/RECREATIONAL USERS

Page 11: RPAS related privacy and data protection: practical advice for RPAS users

11

• Reduce the presence of people in footage1• Only record when necessary2• Anonymise images3• Ensure transparency and consent4• Ensure purpose limitation5• Ensure the security of data collected6• Avoid storing unnecessary information7• Decide who is the data controller prior to the mission8

PRACTICAL ADVICE (IN THE MEAN TIME)

Page 12: RPAS related privacy and data protection: practical advice for RPAS users

RACHEL FINN [email protected]