Advanced Data Protection Control (ADPC): An Interdisciplinary Overview

TL;DR

The paper presents the Advanced Data Protection Control (ADPC), a comprehensive specification and sociotechnical framework designed to enhance privacy, consent communication, and user agency in Internet-based personal data management.

Contribution

It introduces the ADPC specification and mechanisms, offering a standardized, human-centric approach to privacy and consent management in digital environments.

Findings

Provides a novel standard for privacy and consent communication

Enhances user control over personal data processing

Facilitates compliance with legal and ethical data practices

Abstract

The Advanced Data Protection Control (ADPC) is a technical specification - and a set of sociotechnical mechanisms surrounding it - that can change the current practice of Internet-based personal data protection and consenting by providing novel and standardized means for the communication of privacy and consenting data, meta-data, information, requests, preferences, and decisions. The ADPC supports humans in practicing their rights to privacy and agency by giving them more human-centric control over the processing of their personal data and consent. It helps the data controllers to improve their users' experiences and provides them with easy-to-adopt means to comply with the relevant legal and ethical requirements and expectations.