D3.6 POLICYCLOUD'S SOCIETAL AND ETHICAL REQUIREMENTS &amp; GUIDELINES – M22
Creators: name: Audino, A
name: Bettiol, A
name: Strippoli, A
name: Taborda Barata, M
name: Oldani, I
Publisher: name: Zenodo
Year: 2021
Subjects: Policy Cloud
Ethical Requirements
Guidelines
Data-driven
policymaking

description: This report provides a second version of all the societal and ethical requirements and guidelines as described in Task 3.5. More specifically, this deliverable analyses the ethical, legal, regulatory, and societal issues related to PolicyCLOUD. With regards to ethical and societal issues, from a general standpoint the main findings relate to the importance of ensuring the accuracy of the dataset used for performing the analytics and the policymaking to achieve an adequate degree of reliability on the policies developed based on the same analytics. Also, the respect of the principle of transparency appears relevant to ensure the engagement of the end-users and to obtain their trust in the policies developed through PolicyCLOUD. Moreover, the key issue is to ensure an adequate level of human engagement in the data processing and policymaking processes, to avoid the relevant ethical and societal risks related to a complete automatization of decisional processes, which may be jeopardised by biases (whether in the initial dataset or in the algorithm), leading for example to discrimination phenomena. The general legal and regulatory issues related to the Project concern contractual protection of data sources, legal protection of databases, copyright, and personal data protection and privacy. Of this list, personal data protection is the most important legal and regulatory issue related to the Project since the development of PolicyCLOUD implies the collection and processing of a relevant amount of personal identifiable information. Therefore, compliance with the requirements defined by the General Data Protection Regulation (GDPR) and other applicable personal data protection regulations is paramount for the correct and sustainable implementation of PolicyCLOUD. Also, by analysing in detail the ethical, legal, regulatory, and societal issues related to the components of the Project, the risks appear to be focused on the selection of the datasets to be used, from the perspective of both their accuracy and the legitimacy to collect and process the data for the purposes of the Project. These issues need to be addressed whether the data used constitute personal identifiable information; however, when personal data are involved, appropriate safeguards shall be implemented, especially to comply to applicable data protection laws. Furthermore, this deliverable examines the specific issues related to each of the use cases. Finally, a review is provided on how the ethical, legal, regulatory, and societal requirements are being embedded in the solutions being developed throughout the Project.
description: This deliverable is submitted to the EC and not yet approved.
description: {"references": ["PolicyCLOUD. D3.3 - PolicyCLOUD's Societal and Ethical Requirements &amp; Guidelines. Audino Alice. December 2020.", "PolicyCLOUD. D5.4 - Cross-sector Policy Lifecycle Management: Design &amp; Open Specification 2. Duzha Armend. August 2021.", "PolicyCLOUD. D8.1 \u2013 POPD-Requirement No. 1. Meerkamp March 2021.", "PolicyCLOUD. D6.10 \u2013 Use Case Scenarios Definition &amp; Design. Sancho Javier. May 2021.", "PolicyCLOUD. D1.3 \u2013 Data Management Plan M12. Munn\u00e9 Ricard. December 2020.", "Global Terrorism Database. Homepage. https://www.start.umd.edu/gtd/, retrieved 2021-09-24.", "Global Terrorism Database. End User License Agreement. https://www.start.umd.edu/gtd/wp- content/uploads/2019/11/CHC_GTD_EULA_NonCommercialUser_2019_V1.5.pdf, retrieved 2021-09- 24.", "RAND. Download the Database. https://www.rand.org/nsrd/projects/terrorism- incidents/download.html, retrieved 2021-09-24.", "Twitter. Twitter Terms of Service. https://twitter.com/en/tos#intlTerms, retrieved 2021-09-24.", "Facebook. Terms of Service. https://www.facebook.com/terms.php, retrieved 2021-09-24.", "Facebook. Automated Data Collection Terms. https://www.facebook.com/terms.php, retrieved 2021-09-24.", "LinkedIn. User Agreement. https://www.linkedin.com/legal/user-agreement, retrieved 2021-09- 24.", "AirThings. AirThings Open API. https://airthings.portal.azure-api.net/, retrieved 2021-09-24.", "AirThings. Terms and conditions. https://www.airthings.com/business/terms-and-conditions, retrieved 2021-09-24.", "AirThings. Data Processing Terms. https://www.airthings.com/business/data-processing-terms, retrieved 2021-09-24.", "Camden. Open Data Camden. https://opendata.camden.gov.uk/, retrieved 2021-09-24.", "The National Archives. Open Government Licence. https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/, retrieved 2021-09- 24.", "Camden. Unemployment Claimant Count LATEST. https://opendata.camden.gov.uk/Business- Economy/Unemployment-ClaimantCount-LATEST/g3p6-usd3, retrieved 2021-09-24.", "Twitter. Twitter Privacy Policy, https://twitter.com/en/privacy, retrieved 2021-09-24.", "Article 29 Data Protection Working Party, Guidelines on Transparency under Regulation 2016/679, https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=622227, retrieved 2021-09-24.", "nformation Commissioner's Office, What methods can we use to provide privacy information?, https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data- protectionregulation-gdpr/the-right-to-be-informed/what-methods-can-we-use-to-provide-privacy- information/, retrieved 2021-09-24.", "Call Sofia. Information on the Processing of Personal Data. https://call.sofia.bg/bg/Account/PrivacyPolicy, retrieved 2021-09-24.", "European Data Protection Supervisor, Preliminary Opinion on data protection and scientific research. https://edps.europa.eu/data-protection/our-work/publications/opinions/preliminary- opiniondata-protection-and-scientific_en, retrieved 2021-09-24.", "PolicyCLOUD. D7.4 \u2013 Data Marketplace: Design and Open Specification. Mavrogiorgou Argyro. August 2021.", "EGI Foundation. EGI Pay4Use VO Service Level Agreement, https://documents.egi.eu/public/RetrieveFile?docid=3667&amp;filename=EGI%20VO%20P4U%20SLA_Pol icyCLOUD_FINAL.pdf&amp;version=1, retrieved 2021-10-11.", "EGI Foundation, EGI Pay4Use VO Operational Level Agreement, https://documents.egi.eu/public/RetrieveFile?docid=3667&amp;filename=EGI%20VO%20P4U%20OLA%2 0RECAS_BARI_PolicyCLOUD_FINAL.pdf&amp;version=1, retrieved 2021-10-11.", "PolicyCLOUD. D3.4 \u2013 Cloud Infrastructure Incentives Management and Data Governance: Design and Open Specification 2. Sanguino Maria Angeles. August 2021.", "EGI Foundation. Data Processing Agreement, https://documents.egi.eu/public/RetrieveFile?docid=3745&amp;filename=Data_processing_agreement_E GI_Cloud_Compute.v3.pdf&amp;version=1, retrieved 2021-10-11.", "European Union Agency for Cybersecurity. EUCS \u2013 Cloud Services Scheme, https://www.enisa.europa.eu/publications/eucs-cloud-service-scheme, retrieved 2021-10-11.", "European Union Agency for Cybersecurity. Cloud Computing Risk Assessment, https://www.enisa.europa.eu/publications/cloud-computing-risk-assessment, retrieved 2021-10-11.", "Cloud Security Alliance. Cloud Controls Matrix (CCM), https://cloudsecurityalliance.org/research/cloud-controls-matrix/, retrieved 2021-10-11.", "PolicyCLOUD. D4.3 \u2013 Reusable Models &amp; Analytical Tools: Design and Open Specification 2. Biran Ofer. August 2021.", "PolicyCLOUD. D6.6 \u2013 Integration Plan. Kiourtis Thanos. August 2021.", "High-Level Expert Group on Artificial Intelligence, Assessment List for Trustworthy Artificial Intelligence (ALTAI) for self-assessment, https://ec.europa.eu/digital-single- market/en/news/assessmentlist-trustworthy-artificial-intelligence-altai-self-assessment, retrieved 2021-10-25."]}