Privacy and reuse in Spain: The Basque Country Open Data case

1. Iurismatica David Fernandez - Jorge Campanillas LAPSI Project Leuven-7-10-2010 Privacy and reuse in Spain: The Basque Country Open Data case

2. Spanish Constitution (1978) Statutes of autonomy. Create “Autonomous communities” AKA Autonomies Asymetric powers and attibutions. Not all autonomies have the same attributions The Spanish Constitutional System

3. Main law is National Law 30/92 (Common administrative procedure Law) Art. 37 regulates access to public sector information Requires personal,direct and legitime interest in the information Very vague Heritage Law Documents 50 years old (general rule) More interested in the preservation. Access to information legal framework

4. WE DON'T HAVE ONE! Access to public information law

5. No real acceso to info No systems/files/archives ready for access Not a real culture on access to info Citizens Public servants Media Consequences

6. Constitution (art 18.4). Directive and Law. Multiple privacy “Comisioners” State level :Agencia Española de Proteccion de Datos Private sector files Public State level files Autonomies level Public Autonomies level files Madrid, Cataluña, Basque Country Data Protection

7. Directive 2003/98 Spanish Reuse Law 37/2007 Transposed in the last moment under threat of sanctions Aporta Project, a state level project encorages the reuse Reuse

8. No obligation of reuse Freedom of licensing Freedom of fees Main Principles

9. Lack of success Very unknown by the Public Sector Very few projects (No INSPIRE projects): Project Aporta Red.es ( the spanish NIC) Autonomies and cities: Asturias Zaragoza City País Vasco (Basque Country) Right now...

10. Agreement on 29-12-2009 Objectives: Economic, transparency Begins to operate on April 2010 Main problems on data protection Need for new consent ---->it's not gonna happen Change of use on the finality for the recollected data The Open Data Case

11. Geographic data: Ortophotos (aerial images) Problems of possible identificability of phisical persons, license plates an so on. Hidrographics Biodiversity Basic cartography Catalogue: Geographic data

12. Statistics: Already protected by special law ( Basque statistics law 12/89) Statistic secret enforced (Eustat) Statistics

13. Weather and sea predictions, Meteo stations No impact on privacy Problems with 3rd party IP Meteorological

14. Tourist offices Lodges, hotels etc Transport... Problems with the contact info But spanish rules under the Spanish Data Protection Law makes and excepcion in DP with the contact info Turistical info

15. Road works Live feed video cameras Usual problems about video surveillance Possible positive id of persons and plates, but the cameras are very height More used to measure the traffic density. Traffic Info

16. Susidies and subventions Public offerings ONLY the calls and notifications It was the idea to provide the name and info of the winners But 30/92 forbids it. The transparency step forward couldn't be possible In a near future.... Administrative

17. Lack of FOIA avoids the reuse of info Need for anonimization generates little reuse: Lack of budget/human resources Not very well known by the public servants Right now, there are other issues... Posible Conclusions

18. Do we need an exception in DP for reuse? Do we need to create a compulsory catalogue? Do we need to create a open format (including meta data for personal data) to make easier to anonimize data ? Questions

19. Possible responsability of the reusers If the public administration makes a mistake in, for example, anonimization If an personal data is generated merging four or five data. Unresolved fears