Spreadsheet: 81d09999-3736-4e6d-abaf-f7bfccbfb6f3
Sheet: R7

 | Risk-ID | Risk Value | Asset Description | Asset Value | Vulnerability Description | Vulnerability Value | Threat Description | Threat Value |  | Values | Counts | Weighting factor
 | R.A1.V25.T14. | 10 | A1. Actors’ digital presence not including social or professional reputation | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4 |  | 1
 | R.A6.V25.T14. | 10 | A6. Life-logging services | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4 |  | 2
 | R.A6.V28.T11. | 7 | A6. Life-logging services | 3 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T11. Constrain consumer choices | 3 |  | 3
 | R.A6.V4.T12. | 9 | A6. Life-logging services | 3 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T12. Vested interests | 4 |  | 4
 | R.A6.V4.T11. | 8 | A6. Life-logging services | 3 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T11. Constrain consumer choices | 3 |  | 5
 | R.A15.V28.T12. | 8 | A15. Databases of aggregated data | 3.2 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T12. Vested interests | 4 |  | 6
 | R.A15.V23.T12. | 9 | A15. Databases of aggregated data | 3.2 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T12. Vested interests | 4 |  | 7
 | R.A15.V23.T11. | 8 | A15. Databases of aggregated data | 3 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T11. Constrain consumer choices | 3 |  | 8
 | R.A15.V6.T12. | 8 | A15. Databases of aggregated data | 3.2 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T12. Vested interests | 4 |  | 9
 | R.A15.V6.T11. | 7 | A15. Databases of aggregated data | 3 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T11. Constrain consumer choices | 3 |  | 10
 | R.A15.V4.T12. | 9 | A15. Databases of aggregated data | 3.2 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T12. Vested interests | 4 |  | 11
 | R.A15.V4.T11. | 8 | A15. Databases of aggregated data | 3 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T11. Constrain consumer choices | 3 |  | 12
 | R.A15.V2.T12. | 7 | A15. Databases of aggregated data | 3.2 | V2. Inadequate policy framework | 2 | T12. Vested interests | 4 |  | 13
 | R.A15.V2.T11. | 6 | A15. Databases of aggregated data | 3 | V2. Inadequate policy framework | 2 | T11. Constrain consumer choices | 3
 | R.A4.V28.T12. | 9 | A4. Sentiments | 4 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T12. Vested interests | 4
 | R.A4.V28.T11. | 8 | A4. Sentiments | 4 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T11. Constrain consumer choices | 3
 | R.A5.V28.T12. | 8 | A5. Ideas | 3 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T12. Vested interests | 4
 | R.A5.V28.T11. | 7 | A5. Ideas | 3 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T11. Constrain consumer choices | 3
 | R.A6.V28.T12. | 8 | A6. Life-logging services | 3 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T12. Vested interests | 4
 | R.A4.V25.T14. | 11 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A1.V25.T12. | 10 | A1. Actors’ digital presence not including social or professional reputation | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T12. Vested interests | 4
 | R.A1.V25.T11. | 9 | A1. Actors’ digital presence not including social or professional reputation | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T11. Constrain consumer choices | 3
 | R.A1.V24.T12. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T12. Vested interests | 4
 | R.A1.V6.T12. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T12. Vested interests | 4
 | R.A1.V2.T10. | 6 | A1. Actors’ digital presence not including social or professional reputation | 3 | V2. Inadequate policy framework | 2 | T10. Spamming of users with ads and other non-solicited information; they can also use open, public information | 3
 | R.A5.V27.T10. | 8 | A5. Ideas | 3.2 | V27. Cognitive biases – Some people accept what they should not… | 4 | T10. Spamming of users with ads and other non-solicited information; they can also use open, public information | 3
 | R.A6.V2.T10. | 6 | A6. Life-logging services | 3 | V2. Inadequate policy framework | 2 | T10. Spamming of users with ads and other non-solicited information; they can also use open, public information | 3
 | R.A1.V28.T18. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T18. Monitoring and surveillance | 4
 | R.A1.V28.T17. | 9 | A1. Actors’ digital presence not including social or professional reputation | 3 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A1.V4.T18. | 9 | A1. Actors’ digital presence not including social or professional reputation | 3 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T18. Monitoring and surveillance | 4
 | R.A1.V4.T17. | 10 | A1. Actors’ digital presence not including social or professional reputation | 3 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A1.V4.T16. | 9 | A1. Actors’ digital presence not including social or professional reputation | 3 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A5.V28.T18. | 8 | A5. Ideas | 3.2 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T18. Monitoring and surveillance | 4
 | R.A5.V28.T17. | 9 | A5. Ideas | 3.2 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A6.V4.T18. | 9 | A6. Life-logging services | 3 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T18. Monitoring and surveillance | 4
 | R.A6.V4.T17. | 10 | A6. Life-logging services | 3 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A6.V4.T16. | 9 | A6. Life-logging services | 3 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A10.V25.T18. | 10 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T18. Monitoring and surveillance | 4
 | R.A10.V25.T17. | 11 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A10.V25.T16. | 10 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A10.V25.T14. | 10 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A10.V19.T16. | 8 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V19. Increased complexity of controls (making it difficult for users to follow) | 3 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A10.V19.T14. | 8 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V19. Increased complexity of controls (making it difficult for users to follow) | 3 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A10.V2.T18. | 7 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V2. Inadequate policy framework | 2 | T18. Monitoring and surveillance | 4
 | R.A10.V2.T17. | 8 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V2. Inadequate policy framework | 2 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A10.V2.T10. | 6 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V2. Inadequate policy framework | 2 | T10. Spamming of users with ads and other non-solicited information; they can also use open, public information | 3
 | R.A15.V28.T18. | 8 | A15. Databases of aggregated data | 3.2 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T18. Monitoring and surveillance | 4
 | R.A15.V28.T17. | 9 | A15. Databases of aggregated data | 3.2 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A15.V23.T18. | 9 | A15. Databases of aggregated data | 3.2 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T18. Monitoring and surveillance | 4
 | R.A15.V23.T17. | 10 | A15. Databases of aggregated data | 3.2 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A15.V6.T18. | 8 | A15. Databases of aggregated data | 3.2 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T18. Monitoring and surveillance | 4
 | R.A15.V6.T17. | 9 | A15. Databases of aggregated data | 3.2 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A15.V4.T18. | 9 | A15. Databases of aggregated data | 3.2 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T18. Monitoring and surveillance | 4
 | R.A15.V4.T17. | 10 | A15. Databases of aggregated data | 3.2 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A15.V4.T16. | 9 | A15. Databases of aggregated data | 3.2 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A15.V2.T18. | 7 | A15. Databases of aggregated data | 3.2 | V2. Inadequate policy framework | 2 | T18. Monitoring and surveillance | 4
 | R.A15.V2.T17. | 8 | A15. Databases of aggregated data | 3.2 | V2. Inadequate policy framework | 2 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A1.V28.T12. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T12. Vested interests | 4
 | R.A1.V4.T12. | 9 | A1. Actors’ digital presence not including social or professional reputation | 3 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T12. Vested interests | 4
 | R.A4.V27.T17. | 11 | A4. Sentiments | 4 | V27. Cognitive biases – Some people accept what they should not… | 4 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A4.V27.T16. | 10 | A4. Sentiments | 4 | V27. Cognitive biases – Some people accept what they should not… | 4 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A4.V27.T13. | 10 | A4. Sentiments | 4 | V27. Cognitive biases – Some people accept what they should not… | 4 | T13. Peer-pressure and social pressure to constantly share data and conform; fear of violent response / or ridicule from peers, friends etc; | 4
 | R.A4.V27.T10. | 9 | A4. Sentiments | 4 | V27. Cognitive biases – Some people accept what they should not… | 4 | T10. Spamming of users with ads and other non-solicited information; they can also use open, public information | 3
 | R.A4.V25.T17. | 12 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A4.V25.T16. | 11 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A4.V24.T17. | 10 | A4. Sentiments | 4 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A4.V24.T16. | 9 | A4. Sentiments | 4 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A4.V24.T14. | 9 | A4. Sentiments | 4 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A4.V24.T13. | 9 | A4. Sentiments | 4 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T13. Peer-pressure and social pressure to constantly share data and conform; fear of violent response / or ridicule from peers, friends etc; | 4
 | R.A4.V23.T17. | 11 | A4. Sentiments | 4 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A6.V25.T17. | 11 | A6. Life-logging services | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A6.V25.T16. | 10 | A6. Life-logging services | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A6.V25.T12. | 10 | A6. Life-logging services | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T12. Vested interests | 4
 | R.A6.V25.T11. | 9 | A6. Life-logging services | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T11. Constrain consumer choices | 3
 | R.A6.V24.T17. | 9 | A6. Life-logging services | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A6.V24.T16. | 8 | A6. Life-logging services | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A6.V24.T14. | 8 | A6. Life-logging services | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A6.V24.T13. | 8 | A6. Life-logging services | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T13. Peer-pressure and social pressure to constantly share data and conform; fear of violent response / or ridicule from peers, friends etc; | 4
 | R.A6.V24.T12. | 8 | A6. Life-logging services | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T12. Vested interests | 4
 | R.A6.V23.T17. | 10 | A6. Life-logging services | 3 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A6.V19.T16. | 8 | A6. Life-logging services | 3 | V19. Increased complexity of controls (making it difficult for users to follow) | 3 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A6.V19.T14. | 8 | A6. Life-logging services | 3 | V19. Increased complexity of controls (making it difficult for users to follow) | 3 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A6.V17.T12. | 9 | A6. Life-logging services | 3 | V17. Lack of mechanisms to validate reputation or trustworthiness of service provider | 4 | T12. Vested interests | 4
 | R.A6.V17.T10. | 8 | A6. Life-logging services | 3 | V17. Lack of mechanisms to validate reputation or trustworthiness of service provider | 4 | T10. Spamming of users with ads and other non-solicited information; they can also use open, public information | 3
 | R.A6.V6.T17. | 9 | A6. Life-logging services | 3 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A6.V6.T12. | 8 | A6. Life-logging services | 3 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T12. Vested interests | 4
 | R.A6.V6.T11. | 7 | A6. Life-logging services | 3 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T11. Constrain consumer choices | 3
 | R.A6.V2.T17. | 8 | A6. Life-logging services | 3 | V2. Inadequate policy framework | 2 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A6.V2.T12. | 7 | A6. Life-logging services | 3 | V2. Inadequate policy framework | 2 | T12. Vested interests | 4
 | R.A6.V2.T11. | 6 | A6. Life-logging services | 3 | V2. Inadequate policy framework | 2 | T11. Constrain consumer choices | 3
 | R.A1.V28.T11. | 7 | A1. Actors’ digital presence not including social or professional reputation | 3 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T11. Constrain consumer choices | 3
 | R.A1.V25.T18. | 10 | A1. Actors’ digital presence not including social or professional reputation | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T18. Monitoring and surveillance | 4
 | R.A1.V25.T17. | 11 | A1. Actors’ digital presence not including social or professional reputation | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A1.V25.T16. | 10 | A1. Actors’ digital presence not including social or professional reputation | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A1.V24.T18. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T18. Monitoring and surveillance | 4
 | R.A1.V24.T17. | 9 | A1. Actors’ digital presence not including social or professional reputation | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A1.V24.T16. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A1.V24.T15. | 7 | A1. Actors’ digital presence not including social or professional reputation | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T15. Increased need for attention / social exposure | 3
 | R.A1.V24.T14. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A1.V24.T13. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T13. Peer-pressure and social pressure to constantly share data and conform; fear of violent response / or ridicule from peers, friends etc; | 4
 | R.A1.V23.T18. | 9 | A1. Actors’ digital presence not including social or professional reputation | 3 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T18. Monitoring and surveillance | 4
 | R.A1.V23.T17. | 10 | A1. Actors’ digital presence not including social or professional reputation | 3 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A1.V23.T12. | 9 | A1. Actors’ digital presence not including social or professional reputation | 3 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T12. Vested interests | 4
 | R.A1.V23.T11. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T11. Constrain consumer choices | 3
 | R.A1.V19.T16. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V19. Increased complexity of controls (making it difficult for users to follow) | 3 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A1.V19.T14. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V19. Increased complexity of controls (making it difficult for users to follow) | 3 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A1.V19.T12. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V19. Increased complexity of controls (making it difficult for users to follow) | 3 | T12. Vested interests | 4
 | R.A1.V6.T18. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T18. Monitoring and surveillance | 4
 | R.A1.V6.T17. | 9 | A1. Actors’ digital presence not including social or professional reputation | 3 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A1.V6.T11. | 7 | A1. Actors’ digital presence not including social or professional reputation | 3 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T11. Constrain consumer choices | 3
 | R.A1.V4.T11. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V4. Increase in centralization of data storage and processing and over-reliance on these centralised facilities | 4 | T11. Constrain consumer choices | 3
 | R.A1.V2.T18. | 7 | A1. Actors’ digital presence not including social or professional reputation | 3 | V2. Inadequate policy framework | 2 | T18. Monitoring and surveillance | 4
 | R.A1.V2.T17. | 8 | A1. Actors’ digital presence not including social or professional reputation | 3 | V2. Inadequate policy framework | 2 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A1.V2.T12. | 7 | A1. Actors’ digital presence not including social or professional reputation | 3 | V2. Inadequate policy framework | 2 | T12. Vested interests | 4
 | R.A1.V2.T11. | 6 | A1. Actors’ digital presence not including social or professional reputation | 3 | V2. Inadequate policy framework | 2 | T11. Constrain consumer choices | 3
 | R.A4.V27.T18. | 10 | A4. Sentiments | 4 | V27. Cognitive biases – Some people accept what they should not… | 4 | T18. Monitoring and surveillance | 4
 | R.A4.V27.T12. | 10 | A4. Sentiments | 4 | V27. Cognitive biases – Some people accept what they should not… | 4 | T12. Vested interests | 4
 | R.A4.V27.T11. | 9 | A4. Sentiments | 4 | V27. Cognitive biases – Some people accept what they should not… | 4 | T11. Constrain consumer choices | 3
 | R.A4.V25.T18. | 11 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T18. Monitoring and surveillance | 4
 | R.A4.V25.T12. | 11 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T12. Vested interests | 4
 | R.A4.V25.T11. | 10 | A4. Sentiments | 4 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T11. Constrain consumer choices | 3
 | R.A4.V24.T18. | 9 | A4. Sentiments | 4 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T18. Monitoring and surveillance | 4
 | R.A4.V24.T15. | 8 | A4. Sentiments | 4 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T15. Increased need for attention / social exposure | 3
 | R.A4.V24.T12. | 9 | A4. Sentiments | 4 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T12. Vested interests | 4
 | R.A4.V23.T18. | 10 | A4. Sentiments | 4 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T18. Monitoring and surveillance | 4
 | R.A4.V23.T12. | 10 | A4. Sentiments | 4 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T12. Vested interests | 4
 | R.A4.V23.T11. | 9 | A4. Sentiments | 4 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T11. Constrain consumer choices | 3
 | R.A5.V27.T18. | 9 | A5. Ideas | 3.2 | V27. Cognitive biases – Some people accept what they should not… | 4 | T18. Monitoring and surveillance | 4
 | R.A5.V27.T17. | 10 | A5. Ideas | 3.2 | V27. Cognitive biases – Some people accept what they should not… | 4 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A5.V27.T16. | 9 | A5. Ideas | 3.2 | V27. Cognitive biases – Some people accept what they should not… | 4 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A5.V27.T13. | 9 | A5. Ideas | 3.2 | V27. Cognitive biases – Some people accept what they should not… | 4 | T13. Peer-pressure and social pressure to constantly share data and conform; fear of violent response / or ridicule from peers, friends etc; | 4
 | R.A5.V27.T12. | 9 | A5. Ideas | 3.2 | V27. Cognitive biases – Some people accept what they should not… | 4 | T12. Vested interests | 4
 | R.A5.V27.T11. | 8 | A5. Ideas | 3.2 | V27. Cognitive biases – Some people accept what they should not… | 4 | T11. Constrain consumer choices | 3
 | R.A5.V24.T18. | 8 | A5. Ideas | 3.2 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T18. Monitoring and surveillance | 4
 | R.A5.V24.T17. | 9 | A5. Ideas | 3.2 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A5.V24.T16. | 8 | A5. Ideas | 3.2 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T16. Changes in perception of privacy and / or privacy needs | 4
 | R.A5.V24.T15. | 7 | A5. Ideas | 3.2 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T15. Increased need for attention / social exposure | 3
 | R.A5.V24.T14. | 8 | A5. Ideas | 3.2 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A5.V24.T13. | 8 | A5. Ideas | 3.2 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T13. Peer-pressure and social pressure to constantly share data and conform; fear of violent response / or ridicule from peers, friends etc; | 4
 | R.A5.V24.T12. | 8 | A5. Ideas | 3.2 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T12. Vested interests | 4
 | R.A5.V23.T18. | 9 | A5. Ideas | 3.2 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T18. Monitoring and surveillance | 4
 | R.A5.V23.T17. | 10 | A5. Ideas | 3.2 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A5.V23.T12. | 9 | A5. Ideas | 3.2 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T12. Vested interests | 4
 | R.A5.V23.T11. | 8 | A5. Ideas | 3.2 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T11. Constrain consumer choices | 3
 | R.A6.V25.T18. | 10 | A6. Life-logging services | 3 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T18. Monitoring and surveillance | 4
 | R.A6.V24.T18. | 8 | A6. Life-logging services | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T18. Monitoring and surveillance | 4
 | R.A6.V24.T15. | 7 | A6. Life-logging services | 3 | V24. Social reliance/over-confidence and trust on individual’s digital identity | 3 | T15. Increased need for attention / social exposure | 3
 | R.A6.V23.T18. | 9 | A6. Life-logging services | 3 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T18. Monitoring and surveillance | 4
 | R.A6.V23.T12. | 9 | A6. Life-logging services | 3 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T12. Vested interests | 4
 | R.A6.V23.T11. | 8 | A6. Life-logging services | 3 | V23. Lack of transparency and “social translucency”, i.e., audit logs (who accessed my profile/data) | 4 | T11. Constrain consumer choices | 3
 | R.A6.V19.T12. | 8 | A6. Life-logging services | 3 | V19. Increased complexity of controls (making it difficult for users to follow) | 3 | T12. Vested interests | 4
 | R.A6.V17.T18. | 9 | A6. Life-logging services | 3 | V17. Lack of mechanisms to validate reputation or trustworthiness of service provider | 4 | T18. Monitoring and surveillance | 4
 | R.A6.V17.T14. | 9 | A6. Life-logging services | 3 | V17. Lack of mechanisms to validate reputation or trustworthiness of service provider | 4 | T14. Individual being negligent, careless, making mistakes; e.g. does not follow procedures appropriately, e.g. clicks through | 4
 | R.A6.V6.T18. | 8 | A6. Life-logging services | 3 | V6. Lack of appropriate, common or harmonized legislation in EU Member States | 3 | T18. Monitoring and surveillance | 4
 | R.A6.V2.T18. | 7 | A6. Life-logging services | 3 | V2. Inadequate policy framework | 2 | T18. Monitoring and surveillance | 4
 | R.A10.V25.T12. | 10 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T12. Vested interests | 4
 | R.A10.V25.T11. | 9 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V25. Inadequate user education, lack of awareness and training particularly in security and privacy; lack of context awareness | 5 | T11. Constrain consumer choices | 3
 | R.A10.V19.T12. | 8 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V19. Increased complexity of controls (making it difficult for users to follow) | 3 | T12. Vested interests | 4
 | R.A10.V2.T12. | 7 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V2. Inadequate policy framework | 2 | T12. Vested interests | 4
 | R.A10.V2.T11. | 6 | A10. Smart phone / mobile phone / life-logging devices | 3.2 | V2. Inadequate policy framework | 2 | T11. Constrain consumer choices | 3
 | R.A15.V28.T11. | 7 | A15. Databases of aggregated data | 3 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T11. Constrain consumer choices | 3
 | R.A4.V28.T18. | 9 | A4. Sentiments | 4 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T18. Monitoring and surveillance | 4
 | R.A4.V28.T17. | 10 | A4. Sentiments | 4 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5
 | R.A6.V28.T18. | 8 | A6. Life-logging services | 3 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T18. Monitoring and surveillance | 4
 | R.A6.V28.T17. | 9 | A6. Life-logging services | 3 | V28. Data linkability / lifelogging data can be aggregated with other data | 3 | T17. Data mining and profiling (large-scale, excessive and/or inappropriate) | 5