VINNOVA
1 December 2023
This project investigates the use of artificial intelligence and smart contract tools to manage data protection in supply chains. Privacy regulations often create high standards for the data protection of companies and citizens. Often, this regulatory framework is difficult to enforce given the difficulties related to monitoring data; particularly when the processing activities of data involve a significant number of subcontractors, generating a long supply chain. Recent regulations, such as the General Data Protection Regulation and the California Consumer Privacy Act, seek to empower consumers by granting additional privacy rights and limiting the number of processing activities. Therefore, current research on data protection and privacy focuses mostly on B2C relationships. Instead, this project studies data processing activities up and downstream the supply chain. It contends that individuals’ right to privacy may lack effectiveness if it is not possible to hold processors accountable for the data flows in the supply chain. The project will have three axes. First, map and assess the contractual and non-contractual instruments companies use to cascade privacy and data processing instructions down the supply chain. Two, identify flaws and conflicts of instruments actors across the supply chain that hinder data protection. Third, design an AI-based and smart contract compliance tool that could help regulators and data processors monitor the data supply chain contracts.
Partenaires
