ETD-HUB

12: Full or Pseudo Anonymisation

Asked: 3 months, 1 week ago By: Catalink Views: 61 Catalink Case Study: IRIS

The IRIS application requires saving driver images and heart-rate signals to create an unbiased dataset and improve personalized drowsiness detection. From a legal and ethical standpoint, would full anonymization of the data (leading to retention for up to 5 years, even after profile deletion) or pseudo-anonymization (allowing for a user-requested "right to be forgotten" delete functionality) would allow to use them without any legal implications?

17 Answers

Answered: 1 month, 2 weeks ago By: Chiamakaokorie
-
Answered: 1 month, 2 weeks ago By: Tundefasina
Yes, additional issues arise. Incidental data capture of passengers without consent creates risks of unlawful processing, lack of transparency, and proportionality violations. Ethically and legally, IRIS must implement data exclusion mechanisms, signage, and privacy-by-design measures to avoid capturing non-drivers.
Answered: 1 month, 2 weeks ago By: Zainabodogwu2
Passenger privacy risk → consent issues • Minimize data collection → only drivers • Notifications/visibility required
Answered: 1 month, 2 weeks ago By: Oliverharrow
Yes
Answered: 1 month, 2 weeks ago By: Ngozioshoba
Full anonymization offers stronger privacy protection but may limit personalization. Personalization can be acceptable if combined with strict security and deletion rights. The priority is reducing identifiability while preserving fairness.
Answered: 1 month, 2 weeks ago By: Efeadelaja
Yes, capturing passengers’ biometric or health data without consent raises GDPR violations, ethical consent issues, and legal liability for the operator.
Answered: 1 month, 2 weeks ago By: Meilincai
Yes
Answered: 1 month, 2 weeks ago By: Kelechinwosu
This falls under GDPR Article 9 as health data. It is ethically "intimate" because it can reveal non-target conditions like heart disease, stress, or pregnancy. Legally, the risk is that IRIS could be reclassified as a Medical Device if its primary function is monitoring physiological health.
Answered: 1 month, 2 weeks ago By: Beatricelorne
Yes because it is more likely that there are people who use public services that don't consent to the processing of data
Answered: 1 month, 2 weeks ago By: Zainabodogwu32
Deploying IRIS in taxis, buses, or other public service vehicles introduces distinct ethical and legal challenges. Passengers who are incidentally captured by cameras may have no contractual relationship with the system provider and may not have provided informed consent. Ethically, this creates an imbalance of power and undermines autonomy. Legally, it risks unlawful processing of personal data, as passengers may be recorded without a valid lawful basis. To mitigate this, IRIS would need: Strict camera positioning and masking to avoid capturing passengers. Real-time blurring or exclusion mechanisms. Clear signage and transparency notices. Failure to implement such measures could result in GDPR violations and reputational damage, even if the system’s primary purpose is driver safety.
Answered: 1 month, 2 weeks ago By: Miles_Hatcher
Yes. Deploying IRIs raises ethical and legal issues regarding passenger privacy and lack on consent
Answered: 1 month, 2 weeks ago By: Aminaolorun
Yes it is illegal
Answered: 1 month, 2 weeks ago By: Clarawhitby
Yes there are
Answered: 1 month, 2 weeks ago By: Ifeanyiakare
Consent challenges Privacy intrusion Ethical duty
Answered: 1 month, 2 weeks ago By: Kunleekwueme
Deploying the IRIS application in public service vehicles does raise distinct ethical and legal issues, primarily concerning data privacy and consen
Answered: 1 month, 2 weeks ago By: Sadeogunlana
Yes
Answered: 1 month, 2 weeks ago By: Tomashbrook
Yes, a lot of issues will arise.

Your Answer

Login to add your answer!

We’d love to hear your thoughts — share a meaningful answer by logging in.