Within the digital financial system, information is extra than simply info – it’s an asset with immense financial and strategic worth. But, regardless of its significance, a basic authorized query stays unresolved: can information be owned?
Whereas privateness legal guidelines worldwide concentrate on defending people’ rights over their private information, they usually sidestep the difficulty of possession. This has led to authorized uncertainty, significantly in South Africa, the place the Safety of Private Info Act (Popia) grants information topics numerous rights over their private info however doesn’t explicitly deal with possession.
This hole in authorized readability raises urgent questions: If private information – similar to non-public well being info – exists inside an unlimited and ever-growing digital panorama, can it’s owned? And in that case, who holds the rightful declare?
Authorized educational Donrich Thaldar, whose analysis focuses on information governance, explores these questions in a current educational article. He unpacks his findings right here.
Why does it matter who owns information?
In right now’s digital financial system, information is essentially the most useful asset – it’s also known as “the brand new oil”. Whether or not in commerce, analysis or social interactions, the flexibility to generate, use and commerce with information is central to financial competitiveness.
If information possession just isn’t clearly established, it may stifle innovation and funding. Corporations require authorized certainty to function successfully in a knowledge-driven financial system.
Learn: Shopper information doubtless compromised in Pam Golding ‘cyber incident’
International locations have taken totally different authorized approaches to tackling the query of who owns information. China, for example, formally recognises the proprietary rights of knowledge turbines, which means that companies and people who generate information have legally outlined rights over its use and commercialisation. This supplies authorized help for the nation’s digital industries.
What does South African legislation say?
Prior to now, the South African Info Regulator has taken the place that non-public info is robotically owned by the information topic – the particular person to whom the information relates – quite than by the entity producing the information. On this view, the rights created by Popia indicate that information topics themselves are the house owners of their private information, and no one else.
I counsel that this stance is legally flawed, because it conflates two totally different branches of the legislation: privateness legislation and property legislation. Furthermore, it may severely disrupt the digital financial system. The digital financial system is dependent upon information as a tradeable asset – it have to be able to being offered, licensed and commercialised like another financial object. If possession should all the time be with information topics, companies face uncertainty in utilizing and monetising information. Uncertainty stifles innovation, discourages funding and undermines South Africa’s digital competitiveness.
You utilized property legislation to the query of knowledge possession. Why?
Possession is an idea in property legislation, not privateness legislation. Subsequently, to reply the information possession query, we have to search for solutions in property legislation.
Property legislation governs the connection between topics (authorized individuals) and objects (issues exterior to the physique, whether or not bodily or not). Possession is in regards to the rights {that a} topic has over an object. For an object to be able to being owned, it have to be useful, helpful and – importantly – able to human management. A bottle of water meets these standards, however the huge oceans don’t, as they aren’t inside human management.
Private information within the summary is just like the water within the ocean – huge, uncontained and past particular person management. Nevertheless, a digital occasion of private information, similar to a pc file, is extra like a bottled model of that water – outlined and topic to human management. Identical to digital cash and different useful digital property, a selected occasion of private information meets all the necessities beneath South African widespread legislation for personal possession. Thus, on this sense private information may be owned.
Is the information proprietor not the information topic?
At first look this might sound so, however no, not essentially. The rationale that it might sound so, is as a result of a few of the privateness rights created by Popia resemble possession rights. For instance, an proprietor’s settlement is required earlier than another person can use the owned object (for instance, mortgage to be used and hire). Equally, a knowledge topic’s consent is normally required earlier than private information may be processed. Moreover, the proprietor of a factor has the appropriate to destroy it; equally, a knowledge topic usually has the appropriate to have private information deleted.
Learn: Truecaller could face Popia probe by Info Regulator
Do these privateness rights imply that information topics truly personal their private information? I counsel not. Sporting a feather in a single’s hat doesn’t make one a hen. In the identical approach, privateness rights that resemble possession rights don’t imply that they represent possession. Possession is acquired by following the foundations of property legislation.
So who owns the information?
As a result of a newly created private information occasion has no antecedent authorized object – in different phrases, it’s not created out of one other authorized object – it initially belongs to nobody. It’s res nullius. Possession of res nullius is acquired by appropriation, which requires two parts: management and the intention to personal.
Which means that the entity producing the information, similar to an organization or college gathering and recording it, is greatest positioned to amass possession. Because it already has management over the information, the one remaining requirement is solely the intention to be the proprietor.
If an entity like a college generates information and intends to personal it, then – offered it’s in charge of that information – it’s going to legally grow to be the proprietor. This in precept permits the entity to make use of, license and commerce the information as an financial asset. Certainly, it’s prudent for data-generating entities, like universities, to explicitly assert possession over the information they produce. This not solely establishes their authorized rights with readability but in addition serves as a safeguard in opposition to unauthorised entry and misuse by malicious actors.
Doesn’t this compromise information privateness?
No, it mustn’t. Possession is all the time restricted by different authorized guidelines. For instance, whereas I would personal a automobile, I can’t drive it in any approach I like – I need to obey the foundations of the street. Equally, possession of private information is topic to strict limitations, significantly the privateness rights of knowledge topics beneath Popia.
Nevertheless, it’s also vital to know that privateness rights apply solely to private information. If private information is de-identified, which means that it could actually now not be linked to the information topics, privateness rights stop to use. What stays are the possession rights within the information itself. It may be a completely tradeable asset.
Recognising {that a} digital occasion of private information may be owned – and that the rightful proprietor is often the information generator – doesn’t undermine the privateness protections of Popia. Reasonably, it clarifies the authorized panorama, making certain that the rights of each information topics and information turbines are recognised and guarded.
- The writer, Donrich Thaldar, is a professor on the College of KwaZulu-Natal
- This text is republished from The Dialog beneath a Artistic Commons licence. Learn the unique article
