Privacy and reuse in Spain: The Basque Country Open Data

case

IurismaticaDavid Fernandez - Jorge Campanillas

LAPSI ProjectLevun-7-10-2010

The Spanish Constitutional System

Spanish Constitution (1978) Statutes of autonomy.

Create “Autonomous communities” AKA Autonomies

Asymetric powers and attibutions. Not all autonomies have the same attributions

Access to information legal framework

Main law is National Law 30/92 (Common administrative procedure Law)

Art. 37 regulates access to public sector information

Requires personal,direct and legitime interest in the information

Very vague Heritage Law

Documents 50 years old (general rule) More interested in the preservation.

Access to public information law

WE DON'T HAVE ONE!

Consequences

No real acceso to info No systems/files/archives ready for access Not a real culture on access to info

Citizens Public servants Media

Data Protection

Constitution (art 18.4). Directive and Law. Multiple privacy “Comisioners”

State level :Agencia Española de Proteccion de Datos

Private sector files Public State level files

Autonomies level Public Autonomies level files

Madrid, Cataluña, Basque Country

Reuse

Directive 2003/98 Spanish Reuse Law 37/2007

Transposed in the last moment under threat of sanctions

Aporta Project, a state level project encorages the reuse

Main Principles

No obligation of reuse Freedom of licensing Freedom of fees

Right now...

Lack of success Very unknown by the Public Sector Very few projects (No INSPIRE projects):

Project Aporta Red.es ( the spanish NIC) Autonomies and cities:

Asturias Zaragoza City País Vasco (Basque Country)

The Open Data Case

Agreement on 29-12-2009 Objectives:

– Economic, transparency Begins to operate on April 2010 Main problems on data protection

Need for new consent ---->it's not gonna happen

Change of use on the finality for the recollected data

Catalogue: Geographic data

Geographic data: Ortophotos (aerial images)

Problems of possible identificability of phisical persons, license plates an so on.

Hidrographics Biodiversity Basic cartography

Statistics

Statistics: Already protected by special law ( Basque

statistics law 12/89) Statistic secret enforced (Eustat)

Meteorological

Weather and sea predictions, Meteo stations No impact on privacy

Problems with 3rd party IP

Turistical info

Tourist offices Lodges, hotels etc Transport...

Problems with the contact info But spanish rules under the Spanish Data

Protection Law makes and excepcion in DP with the contact info

Traffic Info

Road works Live feed video cameras

Usual problems about video surveillance Possible positive id of persons and plates, but

the cameras are very height More used to measure the traffic density.

Administrative

Susidies and subventions Public offerings ONLY the calls and notifications

It was the idea to provide the name and info of the winners

But 30/92 forbids it. The transparency step forward couldn't be possible

In a near future....

Posible Conclusions

Lack of FOIA avoids the reuse of info Need for anonimization generates little reuse:

Lack of budget/human resources Not very well known by the public servants Right now, there are other issues...

Questions

Do we need an exception in DP for reuse? Do we need to create a compulsory catalogue? Do we need to create a open format (including

meta data for personal data) to make easier to anonimize data ?

Unresolved fears

Possible responsability of the reusers If the public administration makes a mistake in,

for example, anonimization If an personal data is generated merging four or

five data.