Data Exploitation Principle #1

Principle or Recommendation

Individuals must have rights over their data. This must include rights over their personal data, as well as data that is derived, inferred or predicted from their data, selves, actions, and behaviour.

In modern societies, individuals rely on and entrust organisations with their data. Accordingly, these organisations must treat people and their data fairly and lawfully. But data is also increasingly observed, derived, inferred or predicted from other data, often without the knowledge, awareness or consent of individuals. Inferred, derived or predicted data – whether it is accurate or not – are often shared, sold, and even lost in breaches, and subsequently used to make or inform decisions about people. People’s rights must apply to any and all data that is generated by and about them, and accumulated and processed by any organisation.