ETD-HUB

Answered: 4 months, 3 weeks ago By: Chiamakaokorie

-

Answered: 4 months, 3 weeks ago By: Tundefasina

IRIS must ensure: Explicit, informed consent Secure storage and encryption Access logging and auditability Human oversight of alerts Transparency to users Bias monitoring and mitigation Failure to meet these could lead to regulatory penalties and ethical harm.

Answered: 4 months, 3 weeks ago By: Zainabodogwu2

Informed consent, transparency, explainability • Bias monitoring & fairness • Data security, breach reporting • Accountability, technical documentation, human oversight

Answered: 4 months, 3 weeks ago By: Oliverharrow

Ensure the data is not going anywhere to third party organisations

Answered: 4 months, 3 weeks ago By: Ngozioshoba

Secure storage, restricted access, and transparency are essential to prevent misuse. Ongoing bias testing and system monitoring protect fairness. Ethical governance ensures safety benefits do not compromise user rights.

Answered: 4 months, 3 weeks ago By: Efeadelaja

Obtain explicit informed consent Ensure transparency on data use Implement strong encryption and secure storage Limit access to authorized personnel only Conduct regular data protection and security audits

Deleuze replied: Regarding informed consent: IRIS must have a clear lawful basis for processing. The operator cannot rely only on a privacy policy or broad user agreement. It must identify a lawful basis under GDPR Article 6, and where biometric or health data is involved, it must also identify a valid Article 9 condition. If consent is used, it must be explicit and freely given; this may be difficult in employment, fleet, public transport, or insurance-linked contexts where the driver has limited practical choice.

Answered: 4 months, 3 weeks ago By: Meilincai

When collecting real-time facial and behavioural data to detect driver drowsiness, organisations must ensure a clear lawful basis for processing and, where biometric or health data is involved, meet the additional conditions for special category data. Drivers must be transparently informed about what data is collected, how it is used, and for what purpose, and monitoring must not be covert or excessive. Strong technical and organisational security measures, including encryption, access controls, and minimal retention, are required to protect sensitive data and prevent breaches. Clear governance rules must prohibit secondary use or profiling beyond fatigue detection, reducing the risk of data misuse. Finally, systems must ensure fairness, avoid discriminatory impacts, provide human oversight, and comply with any applicable high-risk AI obligations under the EU AI Act.

Answered: 4 months, 3 weeks ago By: Kelechinwosu

You cannot let the AI be the final judge of a driver’s employment status. IRIS must be designed to allow natural persons to oversee its operation.

Deleuze replied: 100%. Because IRIS may affect safety and potentially employment or fleet decisions, there should also be human oversight and contestability. A fatigue alert should not automatically lead to punitive consequences without review. Drivers should be able to challenge inaccurate alerts, request access to relevant data, seek correction or deletion where applicable, and understand how decisions are made. This is especially important where false positives could unfairly label a driver as unsafe or impaired. From an ethical standpoint, IRIS must respect autonomy, dignity, fairness, and proportionality. The safety aim is legitimate, but it does not justify unlimited monitoring. The system should protect drivers from foreseeable harm, avoid discriminatory performance across demographic groups, avoid turning safety monitoring into workplace or passenger surveillance, and ensure that the benefits of fatigue detection are distributed fairly across all drivers.

Answered: 4 months, 3 weeks ago By: Beatricelorne

Making clear how facial recognition data is collected and how it is stored (eg for future training datasets). Also, not sharing this data for different purposes

Answered: 4 months, 3 weeks ago By: Zainabodogwu32

Beyond core GDPR and EU AI Act compliance, IRIS must also address: Security obligations: strong encryption, access control, and breach notification procedures. Transparency obligations: clear explanations of data use, automated processing, and system limitations. Human oversight: mechanisms allowing drivers to challenge or override alerts. Bias monitoring and mitigation: continuous auditing to detect disparate impacts across demographic groups. Post-market monitoring: tracking real-world performance and harm incidents. Ethically, these measures demonstrate respect for user autonomy, fairness, and dignity, while legally they reduce exposure to enforcement actions and liability.

Answered: 4 months, 3 weeks ago By: Miles_Hatcher

You need to get a clear consent from drivers, tell them how the data is being used and keep the data safe. Only collect what’s necessary

Answered: 4 months, 3 weeks ago By: Aminaolorun

Collecting real-time facial and behavioral data for driver drowsiness detection involves, at minimum, compliance with stringent data protection laws and ethical considerations regarding privacy, surveillance, and fairness.

Answered: 4 months, 3 weeks ago By: Ifeanyiakare

Security: Encrypt data in storage and transit. Access control: Restrict to authorized personnel only. Transparency: Inform drivers about data collection, processing, and rights. Bias mitigation: Ensure datasets are demographically diverse. Human oversight: Allow drivers to override alerts. Audit & accountability: Keep logs for regulatory compliance and post-market review. Minimize retention: Do not store incidental non-driver data.

Answered: 4 months, 3 weeks ago By: Kunleekwueme

Informed consent, data minimization, transparency, purpose limitation, data anonymization/pseudonymization, regular security audits, and accountability

Answered: 4 months, 3 weeks ago By: Sadeogunlana

Make laws where Seperate it from data collecting entities (i.e. Gen AI Companies, Big Tech)

Answered: 4 months, 3 weeks ago By: Tomashbrook

The drivers must be aware and should have access to their data when they please - especially to delete it if they want.

Answered: 1 month ago By: Brightfox_45

I would say if the user has had any physical injury that harms their ability to drive properly, but can still drive. That way the vehicle will know how to manage and work around it.

Answered: 1 month ago By: Cleverwolf_27

No

Answered: 1 month ago By: Brightrobin_21

I understand that current data protection legislation extensively offers sufficient guidance. I would argue that fairness should be treated as an ongoing obligation rather than a one-time evaluation.

Answered: 1 month ago By: Warmlynx_14

Drivers should be informed about what is collected, how long it is kept, and who can access it. There should also be routine bias testing, appeal routes, and safeguards against repurposing the data.

Answered: 1 month ago By: Swiftowl_37

Additional obligations should include data minimisation, security controls, retention limits, and ongoing fairness audits. Human oversight should be built into any alert or intervention workflow.

Answered: 1 month ago By: Cleverrobin_87

Yes

Answered: 1 month ago By: Swiftrobin_35

Additional obligations should include clear consent management, fairness testing, and access controls. There should also be a process for responding to complaints or adverse events.

Answered: 1 month ago By: Boldlynx_38

The project should also require clear governance for data sharing, retention, and deletion. Those policies should be easy to understand and enforce.

Answered: 1 month ago By: Quietbadger_45

No

Answered: 1 month ago By: Swiftdeer_99

Other obligations should include human oversight, clear retention limits, and a method for users to challenge or report issues. Training data quality should also be reviewed continuously.

Answered: 1 month ago By: Bravebear_45

The project should also require transparency notices, data-subject rights handling, and a clear explanation of how alerts are generated. This should be built into the product, not added later.

Answered: 1 month ago By: Calmwolf_53

Project should also include lawful-basis analysis, retention schedules, and independent oversight. Those measures matter as much as the model itself.

Answered: 1 month ago By: Brightowl_58

Additional obligations include bias monitoring, secure storage, human review, and documented safety thresholds. These controls should be continuously checked rather than assumed.

Answered: 1 month ago By: Warmhawk_15

Drivers’ actions that have only to do with the recognition of driving, playing, listening to music, eye blinking.

Answered: 1 month ago By: Braveowl_80

Transparency - very important that people are made aware that facial recognition technology is in use. Minimise data collection where possible - only store the data needed for your exact purpose - ensuring any additional facial/behavioural data that does not serve the purpose is not stored. Bias and disambiguation issues.

Answered: 1 month ago By: Kindbadger_56

Security/cyber security (including post-quantum)

Answered: 1 month ago By: Warmwolf_18

There are many other factors to consider, e.g., physical impairment on driver face may skew the result or even natural forms of individual faces, e.g., some people appear sleepy by nature.

15: What are the Legal Data Requirements?

35 Answers

Your Answer

Login to add your answer!