3d83ce9b3838414ca40d3a63c8f6a652  revcatdrepub_a2022m06d30n64iEng.pdf
224e533628ad27a8116db20ae33c9c38e23b6326  revcatdrepub_a2022m06d30n64iEng.pdf
b81e78977a5c3836c0316cd5953f6a3b7dda8d0585a4b54d6e514866f22d372b  revcatdrepub_a2022m06d30n64iEng.pdf

Title:          The limits of privacy by design
Subject:        Privacy by design (PbD), an approach to systems engineering included in the European Union’s General Data Protection Regulation, now forms part of the EU’s legal safeguards. This article examines the scope of this reliance on privacy-enhancing technologies (PETs). More specifically, it assesses their limits and the problems with their real-world application. One aspect worthy of particular consideration is the lack of co-ordination between our legal and our technology communities: we shall be providing examples of supposedly privacy-enhancing technologies that are ineffective in practice, as well as those that are unlawful and, finally, those that do not take account of the legal concept of privacy in the design of the protection they afford. The article concludes by suggesting some possible ways of remedying this situation and of leveraging the full co-regulatory potential of privacy-enhancing technologies.
El principi de privadesa pel disseny, incorporat finalment al Reglament general de protecció de dades, forma part ara de les garanties jurídiques. Analitzem, en aquest treball, l’abast d’aquesta crida a la tecnologia garant. Concretament, ens interessa valorar els seus límits o problemes d’aplicació. Un aspecte que mereixerà especial atenció és la falta de coordinació entre les comunitats jurídiques i tècniques, i les seves conseqüències. Així, descriurem casos d’ús de tecnologies pretesament garants que no ho són en la pràctica; també veurem casos de tecnologia garant contrària a dret, i, finalment, mencionarem casos d’eines que no tenen en compte el concepte jurídic de privadesa a l’hora de dissenyar la seva protecció. Dedicarem la part final del treball a suggerir possibles vies per redreçar la situació i treure tot el potencial corregulador de les eines tècniques garants.
Author:         Antoni Roig Batalla
Creator:        Adobe InDesign CC 13.1 (Windows)
Producer:       Adobe PDF Library 15.0
CreationDate:   Tue Jun  7 11:22:37 2022 CEST
ModDate:        Tue Jun  7 11:22:47 2022 CEST
Tagged:         no
UserProperties: no
Suspects:       no
Form:           none
JavaScript:     no
Pages:          13
Encrypted:      no
Page size:      595.276 x 841.89 pts (A4)
Page rot:       0
File size:      448278 bytes
Optimized:      yes
PDF version:    1.7


name                                 type              encoding         emb sub uni object ID
------------------------------------ ----------------- ---------------- --- --- --- ---------
JSQDBA+TimesNewRomanPSMT             CID TrueType      Identity-H       yes yes yes    147  0
HCVDZE+TimesNewRomanPS-ItalicMT      CID TrueType      Identity-H       yes yes yes    154  0
ROXQJK+TimesNewRomanPSMT             TrueType          WinAnsi          yes yes yes    138  0
DBEIUM+Arial-BoldMT                  TrueType          WinAnsi          yes yes yes    149  0
XFSVPY+Arial-ItalicMT                TrueType          WinAnsi          yes yes yes    155  0
AABDFS+TimesNewRomanPS-BoldMT        TrueType          WinAnsi          yes yes yes    156  0
AABDFS+TimesNewRomanPS-ItalicMT      TrueType          WinAnsi          yes yes yes    157  0
DBEIUM+DINAlternate-Bold             TrueType          WinAnsi          yes yes yes    191  0
DBEIUM+Arial-BoldMT                  TrueType          WinAnsi          yes yes yes    193  0
NDCQES+DINNextLTPro-Bold             TrueType          WinAnsi          yes yes yes    197  0
XTRYUY+ArialMT                       TrueType          WinAnsi          yes yes yes     77  0
XTRYUY+ArialMT                       TrueType          WinAnsi          yes yes yes     75  0
ZRISRU+Calibri                       TrueType          WinAnsi          yes yes yes     81  0


Jhove (Rel. 1.22.1, 2019-04-17)
 Date: 2023-02-18 02:40:03 CET
 RepresentationInformation: revcatdrepub_a2022m06d30n64iEng.pdf
  ReportingModule: PDF-hul, Rel. 1.12.1 (2019-04-17)
  LastModified: 2023-01-27 01:34:51 CET
  Size: 448278
  Format: PDF
  Version: 1.7
  Status: Well-Formed and valid
  SignatureMatches:
   PDF-hul
  MIMEtype: application/pdf
  Profile: Linearized PDF, ISO PDF/A-1, Level B
  PDFMetadata: 
   Objects: 210
   FreeObjects: 1
   IncrementalUpdates: 1
   DocumentCatalog: 
    ViewerPreferences: 
     HideToolbar: false
     HideMenubar: false
     HideWindowUI: false
     FitWindow: false
     CenterWindow: false
     DisplayDocTitle: true
     NonFullScreenPageMode: UseNone
     Direction: L2R
     ViewArea: CropBox
     ViewClip: CropBox
     PrintArea: CropBox
     PageClip: CropBox
    PageLayout: SinglePage
    PageMode: UseNone
    Language: en-GB
    Outlines: 
     Item: 
      Title: 1 Relying on technology: privacy by design
     Item: 
      Title: 2 Are PETs always needed?
     Item: 
      Title: 3 Ineffective PETs 
     Item: 
      Title: 4 Which are the best effective PETs?
     Item: 
      Title: 5 Effective but disproportionate PETs
     Item: 
      Title: 6 PETs based on a non-legal concept of ‘privacy’
     Item: 
      Title: 7 How can you tell if a PET is effective?
     Item: 
      Title: 8 The necessary institutionalisation of reliance on technology
     Item: 
      Title: 9 Conclusions
     Item: 
      Title: References
   Info: 
    Title: The limits of privacy by design
    Author: Antoni Roig Batalla
    Subject: Privacy by design (PbD), an approach to systems engineering included in the European Union’s General Data Protection Regulation, now forms part of the EU’s legal safeguards. This article examines the scope of this reliance on privacy-enhancing technologies (PETs). More specifically, it assesses their limits and the problems with their real-world application. One aspect worthy of particular consideration is the lack of co-ordination between our legal and our technology communities: we shall be providing examples of supposedly privacy-enhancing technologies that are ineffective in practice, as well as those that are unlawful and, finally, those that do not take account of the legal concept of privacy in the design of the protection they afford. The article concludes by suggesting some possible ways of remedying this situation and of leveraging the full co-regulatory potential of privacy-enhancing technologies.
El principi de privadesa pel disseny, incorporat finalment al Reglament general de protecció de dades, forma part ara de les garanties jurídiques. Analitzem, en aquest treball, l’abast d’aquesta crida a la tecnologia garant. Concretament, ens interessa valorar els seus límits o problemes d’aplicació. Un aspecte que mereixerà especial atenció és la falta de coordinació entre les comunitats jurídiques i tècniques, i les seves conseqüències. Així, descriurem casos d’ús de tecnologies pretesament garants que no ho són en la pràctica; també veurem casos de tecnologia garant contrària a dret, i, finalment, mencionarem casos d’eines que no tenen en compte el concepte jurídic de privadesa a l’hora de dissenyar la seva protecció. Dedicarem la part final del treball a suggerir possibles vies per redreçar la situació i treure tot el potencial corregulador de les eines tècniques garants.
    Creator: Adobe InDesign CC 13.1 (Windows)
    Producer: Adobe PDF Library 15.0
    CreationDate: Tue Jun 07 11:22:37 CEST 2022
    ModDate: Tue Jun 07 11:22:47 CEST 2022
   ID: 0xed6757465dfcaf4081f336c832bcef13, 0xde9ee77a4d5f3244a0058bf5dbd04634
   Filters: 
    FilterPipeline: FlateDecode
    FilterPipeline: JPXDecode
   Images: 
    Image: 
     NisoImageMetadata: 
      FormatName: image/jpx
      ImageWidth: 16
      ImageHeight: 16
      BitsPerSample: 8
      BitsPerSampleUnit: integer
     Filter: JPXDecode
     Intent: RelativeColorimetric
     Name: X
   Fonts: 
    Type0: 
     Font: 
      BaseFont: JSQDBA+TimesNewRomanPSMT
      Encoding: Identity-H
      ToUnicode: true
     Font: 
      BaseFont: HCVDZE+TimesNewRomanPS-ItalicMT
      Encoding: Identity-H
      ToUnicode: true
    TrueType: 
     Font: 
      BaseFont: ZRISRU+Calibri
      FontSubset: true
      FirstChar: 32
      LastChar: 32
      FontDescriptor: 
       FontName: ZRISRU+Calibri
       Flags: Nonsymbolic
       FontBBox: -503, -312, 1240, 1026
       FontFile2: true
      Encoding: WinAnsiEncoding
      ToUnicode: true
     Font: 
      BaseFont: DBEIUM+Arial-BoldMT
      FontSubset: true
      FirstChar: 32
      LastChar: 146
      FontDescriptor: 
       FontName: DBEIUM+Arial-BoldMT
       Flags: Nonsymbolic
       FontBBox: -628, -376, 2000, 1018
       FontFile2: true
      Encoding: WinAnsiEncoding
      ToUnicode: true
     Font: 
      BaseFont: ROXQJK+TimesNewRomanPSMT
      FontSubset: true
      FirstChar: 32
      LastChar: 242
      FontDescriptor: 
       FontName: ROXQJK+TimesNewRomanPSMT
       Flags: Serif, Nonsymbolic
       FontBBox: -568, -307, 2000, 1007
       FontFile2: true
      Encoding: WinAnsiEncoding
      ToUnicode: true
     Font: 
      BaseFont: XFSVPY+Arial-ItalicMT
      FontSubset: true
      FirstChar: 32
      LastChar: 205
      FontDescriptor: 
       FontName: XFSVPY+Arial-ItalicMT
       Flags: Nonsymbolic, Italic
       FontBBox: -517, -325, 1359, 998
       FontFile2: true
      Encoding: WinAnsiEncoding
      ToUnicode: true
     Font: 
      BaseFont: AABDFS+TimesNewRomanPS-BoldMT
      FontSubset: true
      FirstChar: 32
      LastChar: 116
      FontDescriptor: 
       FontName: AABDFS+TimesNewRomanPS-BoldMT
       Flags: Serif, Nonsymbolic
       FontBBox: -558, -307, 2000, 1026
       FontFile2: true
      Encoding: WinAnsiEncoding
      ToUnicode: true
     Font: 
      BaseFont: AABDFS+TimesNewRomanPS-ItalicMT
      FontSubset: true
      FirstChar: 32
      LastChar: 121
      FontDescriptor: 
       FontName: AABDFS+TimesNewRomanPS-ItalicMT
       Flags: Serif, Nonsymbolic, Italic
       FontBBox: -498, -307, 1333, 1023
       FontFile2: true
      Encoding: WinAnsiEncoding
      ToUnicode: true
     Font: 
      BaseFont: XTRYUY+ArialMT
      FontSubset: true
      FirstChar: 48
      LastChar: 57
      FontDescriptor: 
       FontName: XTRYUY+ArialMT
       Flags: Nonsymbolic
       FontBBox: -665, -325, 2000, 1006
       FontFile2: true
      Encoding: WinAnsiEncoding
      ToUnicode: true
    CIDFontType2: 
     Font: 
      BaseFont: HCVDZE+TimesNewRomanPS-ItalicMT
      CIDSystemInfo: 
       Registry: Adobe
       Registry: Identity
       Supplement: 0
      FontDescriptor: 
       FontName: HCVDZE+TimesNewRomanPS-ItalicMT
       Flags: Serif, Symbolic, Italic
       FontBBox: -498, -307, 1333, 1023
       FontFile2: true
     Font: 
      BaseFont: JSQDBA+TimesNewRomanPSMT
      CIDSystemInfo: 
       Registry: Adobe
       Registry: Identity
       Supplement: 0
      FontDescriptor: 
       FontName: JSQDBA+TimesNewRomanPSMT
       Flags: Serif, Symbolic
       FontBBox: -568, -307, 2000, 1007
       FontFile2: true
   XMP: <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c143 79.161424, 2017/09/22-11:52:47        ">
   <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
      <rdf:Description rdf:about=""
            xmlns:dc="http://purl.org/dc/elements/1.1/"
            xmlns:xmp="http://ns.adobe.com/xap/1.0/"
            xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/"
            xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
            xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
            xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/"
            xmlns:pdf="http://ns.adobe.com/pdf/1.3/">
         <dc:format>application/pdf</dc:format>
         <dc:description>
            <rdf:Alt>
               <rdf:li xml:lang="x-default">Privacy by design (PbD), an approach to systems engineering included in the European Union’s General Data Protection Regulation, now forms part of the EU’s legal safeguards. This article examines the scope of this reliance on privacy-enhancing technologies (PETs). More specifically, it assesses their limits and the problems with their real-world application. One aspect worthy of particular consideration is the lack of co-ordination between our legal and our technology communities: we shall be providing examples of supposedly privacy-enhancing technologies that are ineffective in practice, as well as those that are unlawful and, finally, those that do not take account of the legal concept of privacy in the design of the protection they afford. The article concludes by suggesting some possible ways of remedying this situation and of leveraging the full co-regulatory potential of privacy-enhancing technologies.&#xD;&#xA;El principi de privadesa pel disseny, incorporat finalment al Reglament general de protecció de dades, forma part ara de les garanties jurídiques. Analitzem, en aquest treball, l’abast d’aquesta crida a la tecnologia garant. Concretament, ens interessa valorar els seus límits o problemes d’aplicació. Un aspecte que mereixerà especial atenció és la falta de coordinació entre les comunitats jurídiques i tècniques, i les seves conseqüències. Així, descriurem casos d’ús de tecnologies pretesament garants que no ho són en la pràctica; també veurem casos de tecnologia garant contrària a dret, i, finalment, mencionarem casos d’eines que no tenen en compte el concepte jurídic de privadesa a l’hora de dissenyar la seva protecció. Dedicarem la part final del treball a suggerir possibles vies per redreçar la situació i treure tot el potencial corregulador de les eines tècniques garants.</rdf:li>
            </rdf:Alt>
         </dc:description>
         <dc:creator>
            <rdf:Seq>
               <rdf:li>Antoni Roig Batalla</rdf:li>
            </rdf:Seq>
         </dc:creator>
         <dc:title>
            <rdf:Alt>
               <rdf:li xml:lang="x-default">The limits of privacy by design</rdf:li>
            </rdf:Alt>
         </dc:title>
         <dc:subject>
            <rdf:Bag>
               <rdf:li>privacy by design</rdf:li>
               <rdf:li>PbD</rdf:li>
               <rdf:li>privacy-enhancing technologies</rdf:li>
               <rdf:li>PETs</rdf:li>
               <rdf:li>co-regulation</rdf:li>
               <rdf:li>law and technology</rdf:li>
               <rdf:li>privadesa pel disseny</rdf:li>
               <rdf:li>eines garants de la privadesa</rdf:li>
               <rdf:li>corregulació</rdf:li>
               <rdf:li>dret i tecnologia</rdf:li>
            </rdf:Bag>
         </dc:subject>
         <xmp:CreateDate>2022-06-07T11:22:37+02:00</xmp:CreateDate>
         <xmp:MetadataDate>2022-06-07T11:22:47+02:00</xmp:MetadataDate>
         <xmp:ModifyDate>2022-06-07T11:22:47+02:00</xmp:ModifyDate>
         <xmp:CreatorTool>Adobe InDesign CC 13.1 (Windows)</xmp:CreatorTool>
         <xmpMM:InstanceID>uuid:98009418-dfa6-4f1e-8aa2-c1610dec9110</xmpMM:InstanceID>
         <xmpMM:OriginalDocumentID>xmp.did:E981601902F9E211B9488A0131FC7D8E</xmpMM:OriginalDocumentID>
         <xmpMM:DocumentID>xmp.id:341122d8-bccd-4343-b3df-87bf946fc5fc</xmpMM:DocumentID>
         <xmpMM:RenditionClass>proof:pdf</xmpMM:RenditionClass>
         <xmpMM:DerivedFrom rdf:parseType="Resource">
            <stRef:instanceID>xmp.iid:a25c1edc-c528-a245-a99e-85d4628a139f</stRef:instanceID>
            <stRef:documentID>xmp.did:57c959d7-97f5-e140-97db-a4e340cabe33</stRef:documentID>
            <stRef:originalDocumentID>xmp.did:E981601902F9E211B9488A0131FC7D8E</stRef:originalDocumentID>
            <stRef:renditionClass>default</stRef:renditionClass>
         </xmpMM:DerivedFrom>
         <xmpMM:History>
            <rdf:Seq>
               <rdf:li rdf:parseType="Resource">
                  <stEvt:action>converted</stEvt:action>
                  <stEvt:parameters>from application/x-indesign to application/pdf</stEvt:parameters>
                  <stEvt:softwareAgent>Adobe InDesign CC 13.1 (Windows)</stEvt:softwareAgent>
                  <stEvt:changed>/</stEvt:changed>
                  <stEvt:when>2022-06-07T11:22:37+02:00</stEvt:when>
               </rdf:li>
            </rdf:Seq>
         </xmpMM:History>
         <xmpRights:Marked>True</xmpRights:Marked>
         <xmpRights:WebStatement>https://creativecommons.org/licenses/by-nc-nd/3.0/es/deed.ca</xmpRights:WebStatement>
         <pdf:Producer>Adobe PDF Library 15.0</pdf:Producer>
         <pdf:Trapped>False</pdf:Trapped>
      </rdf:Description>
   </rdf:RDF>
</x:xmpmeta>
   Pages: 
    Page: 
     Sequence: 1
     Annotations: 
      Annotation: 
       Subtype: Link
       Rect: 68, 53, 176, 29
      Annotation: 
       Subtype: Link
       Rect: 490, 53, 546, 29
      Annotation: 
       Subtype: Link
       Rect: 468, 134, 542, 122
      Annotation: 
       Subtype: Link
       Rect: 81, 124, 162, 112
      Annotation: 
       Subtype: Link
       Rect: 88, 82, 243, 70
     Thumb: true
    Page: 
     Sequence: 2
     Annotations: 
      Annotation: 
       Subtype: Link
       Rect: 70, 752, 263, 738
       ActionDest: 24
      Annotation: 
       Subtype: Link
       Rect: 70, 730, 192, 716
       ActionDest: 26
      Annotation: 
       Subtype: Link
       Rect: 70, 708, 155, 694
       ActionDest: 28
      Annotation: 
       Subtype: Link
       Rect: 70, 687, 232, 672
       ActionDest: 30
      Annotation: 
       Subtype: Link
       Rect: 70, 665, 236, 650
       ActionDest: 41
      Annotation: 
       Subtype: Link
       Rect: 70, 643, 286, 628
       ActionDest: 46
      Annotation: 
       Subtype: Link
       Rect: 70, 621, 249, 607
       ActionDest: 48
      Annotation: 
       Subtype: Link
       Rect: 70, 599, 341, 585
       ActionDest: 50
      Annotation: 
       Subtype: Link
       Rect: 70, 577, 133, 563
       ActionDest: 57
      Annotation: 
       Subtype: Link
       Rect: 70, 556, 119, 541
       ActionDest: 57
     Thumb: true
    Page: 
     Sequence: 3
     Thumb: true
    Page: 
     Sequence: 4
     Thumb: true
    Page: 
     Sequence: 5
     Thumb: true
    Page: 
     Sequence: 6
     Annotations: 
      Annotation: 
       Subtype: Link
       Rect: 112, 99, 177, 88
      Annotation: 
       Subtype: Link
       Rect: 171, 89, 222, 78
      Annotation: 
       Subtype: Link
       Rect: 297, 89, 332, 78
      Annotation: 
       Subtype: Link
       Rect: 459, 89, 544, 78
     Thumb: true
    Page: 
     Sequence: 7
     Annotations: 
      Annotation: 
       Subtype: Link
       Rect: 202, 105, 223, 93
     Thumb: true
    Page: 
     Sequence: 8
     Thumb: true
    Page: 
     Sequence: 9
     Thumb: true
    Page: 
     Sequence: 10
     Annotations: 
      Annotation: 
       Subtype: Link
       Rect: 221, 181, 413, 169
      Annotation: 
       Subtype: Link
       Rect: 413, 181, 415, 169
     Thumb: true
    Page: 
     Sequence: 11
     Thumb: true
    Page: 
     Sequence: 12
     Annotations: 
      Annotation: 
       Subtype: Link
       Rect: 214, 657, 437, 642
      Annotation: 
       Subtype: Link
       Rect: 233, 609, 392, 594
     Thumb: true
    Page: 
     Sequence: 13
     Annotations: 
      Annotation: 
       Subtype: Link
       Rect: 130, 543, 343, 529
     Thumb: true
  Checksum: cdfdd636
   Type: CRC32
  Checksum: 3d83ce9b3838414ca40d3a63c8f6a652
   Type: MD5
  Checksum: 224e533628ad27a8116db20ae33c9c38e23b6326
   Type: SHA-1