Paper presentation at CPDP 2025

Our paper “Transitioning from Portability in the GDPR to Access in the Data Act: A Multidisciplinary Analysis of Data Access by Design”, co-authored by Emanuella Podda (University of Milano), Nicola Leschke (University of Salzburg), Pierangela Samarati (University of Milano), and Frank Pallas (University of Salzburg), was accepted and presented at Computers, Privacy, and Data Protection (CPDP) 2025.

A New Access Paradigm

The paper is the first multidisciplinary work that looks at the data access and shareability obligations in the forthcoming Data Act and compares them to the established access and portability obligations in the GDPR. We conclude that the Data Act not only goes beyond the dichotomy of personal and non-personal data, but also introduces a fundamental paradigm shift towards continuous, real-time data access by design. Thereby, known shortcomings of the respective GDPR rights are addressed and data re-use shall be facilitated.

Technical Implications

Based on the new access paradigm, our paper discusses technical implications of the forthcoming Data Act. In particular, the following three changes are expected:

the communication pattern changes from occasional pickups to continuous data flow
the interface changes from static web-forms to automated APIs
the data holder’s internal processes change from ad-hoc excavation to automated retrieval

The paper discusses technical solutions and challenges to implement the changes.

The Conference

CPDP is a yearly conference in Brussels that connects academia, practitioners, and policy makers to discuss current developments in data protection law and the EU’s digital strategy. Besides the well-established academic track, in which our paper was presented, this year’s conference featured the first technical track to foster interdisciplinary exchange between legal and technical researchers and practitioners.

The talk has been recorded and is available on Youtube:
https://www.youtube.com/watch?v=alATkMYXqyE

Please take a look at our project’s PLUS research website to read more about this paper and our other publications:
https://uni-salzburg.elsevierpure.com/de/projects/excellence-in-digital-sciences-and-interdisciplinary-technologies/publications/

Nicola Leschke sits on a panel in front of a crowded hall at CPDP 2025. In the background, the title slide „Transitioning from Portability in the GDPR to Access in the Data Act: A Multidisciplinary Analysis of Data Access by Design“ is shown.

So, what would you like to change?