Data protection: multi-application smart cards: the use of global unique identifiers for cross-profiling purposes - Part Ⅱ: towards a privacy enhancing smart card engineering

摘要

In the first part of this paper, the underlying privacy concerns of multi-application smart card schemes were identified. In relation to the use of global unique identifiers, the regulatory framework for the smart card manufacturer was assessed. To demonstrate that multi-application smart card technology can be reconciled with the principles of data protection legislation, in particular with the requirements that personal data be processed fairly and lawfully, three technical solutions will now be analysed and commented upon. The first two solutions will relate to the role and functioning of the scheme's application providers. The third solution consists of the development of a less privacy-infringing smart card technology in relation to the use of unique identifiers.