This session will bring you the opportunity to discover how FIWARE will make Data Spaces happen! Contents will give all the details and insights around the path taken in this strategic area. An introduction will provide the overall vision on Data Spaces, the status of the Data Spaces Business Alliance (DSBA) Technical Convergence activities, and initial considerations around the concept of FIWARE Data Space Connector, the first dataspace connector that will comply with the Data Space Business Alliance recommendations. Different coordination and support actions of the Digital Europe Programme (DEP) in the Data Spaces domain will also be presented, as well as initial outputs from these projects. It will provide insights about the opportunities to influence and drive decisions within this important program of the European Union. A series of presentations will deep dive into technical details about the minimum viable framework recommended in DSBA: the standards proposed and how they integrate together. Concretely, presentations will focus on the pillars linked to decentralized Trust, Identity & Access Management and the pillar for Data Value creation covering aspects for Monetization and Marketplace services. Several presentations will tackle elements that open the discussion around the evolution of Data Spaces, as well as components expected to be integrated in the concept of Data Space Connector. They will be followed by use cases that provide insight on what is being developed and testimonies on how technologies based on Data Spaces concepts previously displayed are being used in real life scenarios.

1. Vienna, Austria
12-13 June, 2023
#FIWARESummit
From Data
to Value
OPEN SOURCE
OPEN STANDARDS
OPEN COMMUNITY
CaPe: a solution for consent
and privacy management
in data spaces

2. “Individuals suffer from the absence of technical tools that make the exercise of their rights simple”
Ref European Commission
One of the aims of the General
Data Protection Regulation
(GDPR) is to empower individuals
and give them control over their
personal data. The GDPR has a
chapter on the rights of data
subjects (individuals) which
includes the right of access, the
right to rectification, the right to
erasure, the right to restrict
processing, the right to data
portability, the right to object and
the right not to be subject to a
decision based solely on
automated processing.
Agreement authorises Data Provider to
data provision to Data Consumer and
authorises Data Consumer to process
that data. Agreement can refer to a Data
Usage Policy
Personal data usage rules are user
centric and consent based , hence they
can vary dynamically according to the
preference modification performed by
the data subject
User Centricity
Compliancy
Interoperability
Shared Data
Data increases in value
the more it is shared

3. Data Controller Dashboard
Consent & Control
Notification and Access Log
Consent & Notification
Data
CaPe1 acts as an intermediary and creates a communication channel between Data Subjects and
Data Controllers
Data Source Data Using Service
User Self-
Service
Dashboard
Individuals
What is CaPe?
1https://github.com/OPSILab/Cape

4. Individual
Personal
Data
Data Consumer
Data Exchange
Consent ,Notification
& Control
CaPe scenarios
Usage Policy
Enforcement
Data
Provider/Intermediary
To support personal data management intermediary in distributed ecosystem

5. CaPe features
Single point of access to consents always
up-to-date
Changes to consent data are automatically available
through APIs to be used with other systems or with partner
organizations.
Fine granularity in consent management
and machine-readable
The purpose of the processing is managed at the level
of each data attribute (e.g. address) as required by the
GDPR. Consents are managed in a standard, open and
machine-readable format to be processed within the
services.
Self-service transparency tools for
individuals
The data subject has the possibility at any time to
manage their consents, receive notifications and exercise
data subject rights (objection, right to be forgotten,
rectification and copy of data ...).

6. Manage Service connection
& Consents
Notifications, Access Log, Charts
Data
Data Source
End User
(Data Subject)
Service Provider
(Data Controller)
CaPe Server
Service using Data
Service Description
& Registration
Users Consents & Service Links
CaPe in Action

7. Service and policy disclaimer description - > Consent
Data
Controller
Organizations can model
the legal basis of the
processing of personal data
in a standardized way in
accordance with the related
disclaimer (purpose,
processing, type of data ..)
Service
Dynamic
Consent Form
“Self-Service Dashboard” allows
the data subject to manage and
control "personal data" during
his/her interaction with the
various services
The Data Controller can view
and manage all the consents
collected and related status
1.
2.
5.
4a.
3.
4b.
The model of the legal
basis allows automatic
generation of dynamic
consent forms
The data subject's preferences are
certified, saved in an open,
standard and machine-readable
format and forwarded to the
involved parties

8. Data Sharing across services
Data Consuming service
2. check consent
2b. request consent
2a. consent form
5. manage consents
0. collect data 1. access
3b. Consent Receipt
5b. Consent Update
4. request data (consent)
Data source service
1. the user wants to access the service,
2. the service checks consent for the
identified user , if not a consent form is
generated to request consent to the user
3. the generated and signed consent is
stored by CaPe and source and sink
services,
4. sink Service now can request data
according the conditions of the stored
consent,
5. in any moment the user can manage
consents and its lifecycle through the
dashboard. Any modification of consents
or its withdrawal will be notified to the
involved services.

9. User Self-Service Dashboard
Consent Update &
Control
Notification and Access Log
Consent Update & Notifications
Data Source Data Using Service
Individuals
“Self-Service Dashboard” allows the data
subject to manage and control "personal data"
during the interaction with the various services
üCheck which data is used, how and
for what purpose
üManage the given
consents
üReceive notifications and exercise data subject rights (objection,
right to be forgotten, rectification and copy of data ..)

10. CaPe & IDS TRUE Connector
Data Subject
Data Provider
Data Consumer
CaPe extends the feature of the “TRUE
Connector1” an open source instance of an IDS
connector, enabling the exchange of personal
data.
The Usage Control App enforces
the compliancy with data
usage/data processing consents
given by Data Subject, according
to the GDPR regulation, by
interacting with CaPe
IDS connector is a software component that
enables secure and trusted data exchange
between different participants within an
ecosystem.
1 https://github.com/Engineering-Research-and-Development/true-connector

11. Vienna, 12-13 June, 2023 | #FIWARESummit www.fiware.org
Hosting Partner Keystone Sponsors
Media Partners
Find Us On Stay up to date Be certified and featured
JOIN OUR NEWSLETTER

12. Vienna, Austria
12-13 June, 2023
#FIWARESummit
Thanks!