Cyber-physical systems are increasingly intelligent and autonomous and rely on automated data processing that often implicates identified or potentially identifiable people. Such systems are legally required to build in Data Protection by Design and Default (DPbDD).
However, implementing DPbDD is challenging in a context where cyber-physical systems are embedded in a distributed ecology characterised by manifold devices situated within interpersonal social networks and heterogenous third-party actors having differentiated data processing requirements.
This project seeks to develop a socio-technical framework in collaboration with the Information Commissioner’s Office and Connected Places Catapult to enable the implementation of DPbDD principles in a real-world context.
