Data Privacy and Anonymization for GDPR Compliance in Location-Based Mobility Applications: A Case Study of G-LocON

Abstract

In the world of mobile applications, protecting the user’s privacy is paramount. With the rise of mobility applications that make use of location-based services, data protection issues have become even more pressing. In this paper, we explore how to ensure compliance with data protection laws, specifically the General Data Protection Regulation (GDPR), when developing a new mobility application. Our focus is on the Geographical Location Oriented Network (G-LocON), a framework for geo-location-oriented device-to-device communications. Through a security hackathon and a Data Protection Impact Assessment, we conducted an anonymization analysis of G-LocON and proposed measures to reduce the processing of personal data. The paper concludes that personal data can be anonymized by randomizing the unique identifier of peers and hiding location information by default for fair and transparent processing.

Citation

@article{rill2023dataPrivacyGLocON,
  title = {Data Privacy and Anonymization for GDPR Compliance in Location-Based Mobility Applications: A Case Study of G-LocON},
  author = {Rill, Julian Calvin and Isoda, Tomoki and Yajima, Hiromichi and Yamazaki, Taku and Miyoshi, Takumi},
  journal = {SEATUC Journal of Science and Engineering},
  year = {2023},
  volume = {4},
  number = {1},
  pages = {46--51},
  month = {oct},
  doi = {10.34436/sjse.4.1_46}
}