Sabrina Kirrane works at Vienna University of Economics & Business. She discusses digital rights management from several perspectives including privacy, sustainability, data licensing, and data protection. Standardization is needed for policy languages to express permissions and obligations, as well as vocabularies to enable interoperability between systems regarding transparent data processing and compliance with legal obligations like GDPR.

1. Sabrina Kirrane
Vienna University of Economics &
Business
Digital rights management
and standard setting

2. Digital
Rights
Management
A
multidisciplinary
perspective…
§ Privacy & Sustainable Computing Lab
§ Launched September 2016: launch event with various important stakeholders:
technologists, standardization, activists…
§ Mission: Developing sustainable and privacy-preserving computer systems by
bringing together computer science & human-centric behavioral science
Prof. Sarah
Spiekermann
(Founder)
Prof. Axel
Polleres
(Founder)
Dr. Sabrina
Kirrane
(Director)
Dr. Ben
Wagner
(Director)
http://www.privacylab.at/

3. Digital
Rights
Management
A
multidisciplinary
perspective…
MISSION
Developing sustainable and privacy-
preserving computer systems by
bringing together computer science &
human-centric behavioral science.
Humanities Computer Science
Open DataOpen Data
Artificial IntelligenceArtificial Intelligence
Net NeutralityNet Neutrality
Online PrivacyOnline Privacy
Ethical DesignEthical Design
Open StandardsOpen Standards
Big Data AnalyticsBig Data Analytics
Public Policy and LegislationPublic Policy and Legislation
Data ScienceData Science
Legal
FragmentationFragmentation

4. https://www.thesun.co.uk/tech/3478956/bought-a-kodi-box-youre-
probably-under-investigation-uks-official-copyright-protectors-
warn/
http://www.independent.co.uk/life-style/gadgets-and-tech/news/digital-
economy-act-kodi-stream-illegal-users-prison-10-years-sentence-
copyright-data-sharing-a7716131.html
RecentEuropean Court of Justice ruling means:
Anyone caughtstreaming TV shows,films and
sports events illegally using websites, torrents and
Kodi add-ons could technically face a decade
behind bars.
Digital
Rights
Management
A
Data
Licensing
Perspective…

5. Digital
Rights
Management
A
Data
Licensing
Perspective…
https://www.dalicc.net/
DALICC
is
funded
by
the
Austrian
Federal
Ministry
of
Transport,
Innovation
and
Technology
(BMVIT)
under
the
program
"ICT
of
the
Future"
between
November
2016
-­‐
October
2018.
More
information
https://iktderzukunft.at/en/
https://pixabay.com/en/data-computer-businessmen-monitor-2899902/

6. No
rights
reserved -­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐ Some
rights
reserved
-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐-­‐
Public
Domain
Strongly
Protective
Weakly
Protective
Permissive Proprietary
License
Spectrum
All
rights
reserved
ODbL
CC-BY
CC-BY-SA
IMDB License
TomTom
License
Digital
Rights
Management
A
Data
Licensing
Perspective…

7. § License
Composer:
Lets
you
create
customised
licenses
§ License
Library:
Lets
you
choose
from
a
set
of
standard
licenses
§ License
Annotator:
Provides
you
with
a
machine-­‐
readable
and
human-­‐readable
version
of
your
license
§ License
Negotiator:
Checks
compatibility,
detects
conflicts
and
supports
conflict
resolution
Data
Set
N
License
N
License
1…
N
Derivative
Work
Data
Set
…
License …
Data
Set
2
License
2
Data
Set
1 License
1
consults
tags
audits
proposes
• Compatibility
• Conflict
Detection
• Conflict
Resolution
License
Composer
License
Library
License
Annotator
License
Negotiator
DALICC
Framework
Digital
Rights
Management
A
Data
Licensing
Perspective…
N.B Very little transparency &
a high dependency on legal enforcement

8. 2013 2014 2015 2016 2017 2018
Draft
of
the
regulation
7/22/2012
Revisions
in
the
draft
3/12/2013
Discussions
in
the
EU
Council
5/19/2014
EU
Council
finalises
the
chapters
8/6/2015
Trilogue starts
6/24/2015
Trilogue
agrees
12/17/2015
Comes
into
force
5/15/2018
Digital
Rights
Management
A
Data
Protection
Perspective…

9. Data$&$Data$
Driven$
Services
Regulators
Companies/
Service4
Providers
Customers/
Service4Users
Privacy4
Preferences
Legal
Policies
Contracts/
Terms4of4use
https://www.specialprivacy.eu/
Digital
Rights
Management
A
Data
Protection
Perspective…

10. Digital
Rights
Management
A
Data
Protection
Perspective…
Transparency Ledger
Collected
data
How
is
data
processed Where
are
collected
data
and
profiles
stored
For
how
long
are
the
data
stored
Purpose
of
data
collection
and
processing
Disclosure
to
third
parties

11. Digital
Rights
Management
A
Data
Protection
Perspective…
§ Enable the acquisition of user consent at in a dynamic fashion
§ Provide transparency on how data is processed and with whom it is shared
§ Automatically verify compliance with usage control policies specified by
data subjects, and legal obligations specified in the GDPR
N.B. More transparency
Although still a high dependency on legal enforcement

12. Digital
Rights
Management
What
are
we
doing
in
terms
of
standardisation?

13. Digital
rights
management
What
do
we
need
in
terms
of
standardisation?
• Policy language for expressing permissions, prohibitions,
obligations and dispensations
• The bottom-up development of core vocabularies to
enable interoperability between systems
• Transparent Linked Data Web (data processing in
general e.g. data protection, public procurement, media,
and political transparency)
o Support both open (publicly accessible) and closed (access
controlled) data sources
o Web Protocols are necessary to support transparent data
processing
o Plug and play framework for mashups, including standard
templates and interfaces especially in terms of generic
policies, events, transparency and compliance controls

14. Department of Information Systems &
Operations
Institute for Information Business
Welthandelsplatz 1, 1020 Vienna, Austria
Dr. Sabrina Kirrane
T +43-1-313 36-4494
F +43-1-313 36-90 4494
sabrina.kirrane@wu.ac.at
www.wu.ac.at
www.sabrinakirrane.com
@SabrinaKirrane
Thank
you
/
contact
details