The document discusses Helsinki's vision for enhancing data usability for urban services by 2025 through sharing and interoperability of personal data. It highlights the need for transparent consent management and the development of a 'case law database' for clarifying data-sharing policies. The aim is to empower citizens to manage their personal data while navigating legal requirements effectively.

1. Case law database—
beyond user consent
CSCC20, Jan 23, 2020
Kimmo Karhu
Head of Data
City of Helsinki

2. Data vision
Helsinki’s data is
the most used and
usable urban data
by 2025. Proactive
and personalized
digital services at
citizen’s terms.
Photo: Eetu Ahanen / City of Helsinki

3. European perspective—Enable
citizens and their data to roam
between cities
• Sharing and reuse of personal data is increasingly important
for cities in providing digital services to their citizens
• Data interoperability needed for citizens to “roam” across
cities
3
https://ec.europa.eu/digital-single-market/en/news/roaming-downloadable-material-use-promotion

4. How can I grant access to a private
doctor to see my health records
maintained by city and revoke
access after the visit?

5. How could a student living in
Helsinki ”roam” to Brussels and
benefit from a student discount at
Brussels public transportation?

6. MyData principles as a basis for
personal data management
6https://mydata.org/declaration/

7. GDPR identifies six distinct
reasons for processing the data
1. specific user consent
2. based on a contract
3. legal obligation
4. to protect interests of the data subject
5. public interest, and
6. other legitimate reasons
7
https://eur-lex.europa.eu/eli/reg/2016/679/oj

8. To build privacy and trust, citizen
need to…
1. understand what personal data is collected
2. understand the city’s policies for sharing and using
data
3. be able to give specific consent
4. transparently see when data is shared
(transactions)
27.1.2020 Etunimi Sukunimi 8

9. “Case law” database to make
policies visible
• Analyze public service use cases to clarify the legal
basis for data sharing
• Joint effort with privacy officers and product owners
• Develop a ”case law database”
• To make city’s policies visible to citizens
• To develop reusable consent templates for future use
cases (navigate through the ”legal mine field”)
• How could this work be shared between cities to avoid
overlapping work? …and to build larger market
9

10. Thank you!
Kimmo Karhu
Head of Data
City of Helsinki
kimmo.karhu@hel.fi
10Jan 23, 2020 Kimmo Karhu,