ADvoCATE: A Consent Management Platform for Personal Data Processing in the IoT Using Blockchain Technology

Abstract

The value of personal data generated and managed by smartdevices which comprise the Internet of Things (IoT) is unquestionable.The EU General Data Protection Regulation (GDPR) that has beenrecentlyput in force, sets the cornerstones regarding the collection andprocessing of personal data, for the benefit of Data Subjects and Con-trollers. However, applying this regulation to the IoT ecosystem is nota trivial task. This paper proposes ADvoCATE, a user-centric solutionthat allows data subjects to easily control consents regarding access totheir personal data in the IoT ecosystem and exercise their rights definedby GDPR. It also assists Data Controllers and Processors to meet GDPRrequirements. A blockchain infrastructure ensures the integrity of per-sonal data processing consents, while the quality thereof is evaluated byan intelligence service. Finally, we present some preliminary details of apartial implementation of the proposed framework.