Our goal is to achieve the full potential of data by seeking the best possible public benefit. We want to get the best outcomes for the most people with the least risk and harm. We believe this is not only desirable, not only achievable but essential to the future of our society.

1. Mission statement:
Our goal is to achieve the full potential of data by seeking the best
possible public benefit. We want to get the best outcomes for the most
people with the least risk and harm. We believe this is not only
desirable, not only achievable but essential to the future of our society.
BCS Challenges: Personal Data
BCS Challenge: Personal Data - Expert workshop - 001

2. In late 2015, after dozens (if not hundreds) of conversations we met with a small
group of people to convert our shared views into a set of goals which support our
mission statement for the Personal Data challenge. We came up with:
On February 8 2016 we invited a group of 25 thought leaders and experts on the
topic to test out if the goals were right. We started by asking…
BCS Challenge: Personal Data - Expert workshop - 001
Safety
IntegrationRelationships

3. What kind of world for personal data
do you want to live in?
Accountability -
key players in global
internet accountable
for actions
Transparency
Trust
Individual awareness and
empowerment to be responsible
for your own data
An ongoing conversation with
those who hold your data and
mechanisms to control the use of
your data
Market behaving in the
interests of the consumer
not because of legislature,
but because they are driven
by the services and
experiences personal
data can deliver – regardless
of whether that driver is for
societal or commercial
benefit
Data used
ethically for the
benefit of
everyone
Opportunity to find out in plain English
how your information and behaviors
are being collected and used.
Empowerment
Conversation
not ultimatum
BCS Challenge: Personal Data - Expert workshop - 001

4. After finding wide agreement that the world we live in isn’t working, we discovered
that we are all passionate about wanting to work together to create a new world
for personal data based on what is desirable and will achieve public benefit, getting
the best outcomes for the most people with the least risk and harm.
So, what about the goals?
This isn’t a short term thing, it might take a decade to achieve. What do we feel is
desirable and does safety, integration and relationships articulate that?
BCS Challenge: Personal Data - Expert workshop - 001

5. Our discussion looked like this…
BCS Challenge: Personal Data - Expert workshop - 001

6. Safety
‘Trust’ rather than safety?
Supporting text implies
we want more
regulation? The wrong
regulation can be
restrictive.
Values and intent will
impact on how you
trust an organisation
Transparency and ability to
compare and make choices.
‘Transparency’ rather than safety?
HAS REGUALTION FAILED…?
What level of education
is required so that
people are empowered
make decisions and have
options
First sentence in supporting statement does not
achieve its purpose… we want to help people to
understand how personal data is used. If a data
subject understands they have some responsibility
for their data they are more likely to make a choice
and minimise adverse impacts…
Achieving public
confidence is all about
trust…
We need to articulate a new
vision… something that empowers
people and makes life easier.
‘Confidence’ rather
than safety?
‘Ownership’ Control
rather than safety?
Ownership is hugely
complex and differs when
examined through emotive
and legal perspectives…
what we mean is control.
Safeguards need to be in
place/ Regulation which is
workable and data
controllers more
accountable for action.
Trust is a serious issue,
people can’t envisage
anything different to the
situation we live in now.
The ambition is that
everyone should have
confidence…
Use and sharing without fear or
anxiety, public confidence
BCS Challenge: Personal Data - Expert workshop - 001

7. Integration
Interoperability and portability… as you move
from one service to another… you want to
take stuff from one place to another… Need
to be more explicit in the challenge
consultation
Integration is only desirable when
there is trust, accountability and
positive relationships between
controller and subject. We need to
achieve core aspects of the other
goals to truly benefit from
integration.
Convenience trumps everything… we live in
now. We need low traction solutions to
managing our data sharing.
Decisions made about individuals using
personal data characteristics… we need to
articulate how personal data can be used
for for greater good.
We need an elevator pitch for this
ambition. Data to be put to good use
and the risk of sharing data to be
minimised.
Usability
Portability
InteroperabilityTrust
integrated around / controlled by individuals
and aggregated by organisations
Do our phones hold more personal health
data than the entire NHS hold about us?
BCS Challenge: Personal Data - Expert workshop - 001

8. Personal data is done with people not to
people, we need a grown up relationship
between data subjects and data
controllers.
Individual needs to take responsibility,
never limit personal responsibility no
matter how safe the world is.
Give people choice but make it clear
what the risks are. Using extreme
sports as an example, you are taking a
shared risk and it is managed in a
constrained way and have some
protections if something goes wrong
outside of your control.
Trust in the data. Organisations need
to be confident that information
provided is accurate.
Data subjects do not know enough
about their individual responsibility for
their data, and providers of services do
not provide mechanisms to manage
your data.
Current directives are underused by
everybody.
I want to be confident that Data will
be used for my benefit.
Low traction… you shouldn’t need to be a
personal data expert to participate in a
relationship with organisations who hold
your information.
We need cultures of decision making
which views data as a representation of
humans… People are more important
than data.
Relationships
A conversation not
an ultimatum
BCS Challenge: Personal Data - Expert workshop - 001
Privacy by design.

9. BCS Challenge: Personal Data - Expert workshop - 001
The discussion on goals demonstrated further that we all want to achieve the same thing and it
really highlighted the importance of selecting the right language to ensure that our goals are
inclusive and better articulate our vision.
Not content with exploring the challenge goals, we then asked a big question with a very short
amount of time to answer…
So, what do you want BCS to do about it?
This is by no means the final opportunity to provide direction on the role of BCS in achieving a
better world for personal data and we will continue to test the goals, this is just the start of what
might be a long but hugely rewarding journey for society…

10. BCS Challenge: Personal Data - Expert workshop - 001
What should BCS
do?

11. BCS Challenge: Personal Data - Expert workshop - 001
This workshop may have been a well trodden path for those that attended, but it was really
important that we convened and discussed the Challenge with the expert community to
make sure that the goals articulate a vision supported by many. So thank you for being a
part of the workshop and a part of the Challenge journey.
What can you expect next?
• We want as many people as possible to participate in the challenge and engage in the
topic through a forum called BCS voices
• We will use this workshop content to help others in their thinking around the issues of
Personal Data and articulating a brighter vision of the future
• We will take this initial discussion and iterate on our Challenge goals and circulate it for
comment
• We will invite you to a follow up workshop during the summer