What is MyData?
MyData, told as a story about the right to send your own scattered ledger pages straight to another shop yourself.
A villager's ledger is scattered across many shops.Even the villager can't see at a glance which shop holds which of their own pages.
Every shop treats the ledger as its own.The ledger physically sits at the shop — but every line in it is the villager's own story.
MyData is the right to choose where your own ledger goes.With my consent, shops send my pages straight to each other. → where CBPR covers transfers between countries, MyData is the person's own request to move their pages.
In practice, the pages move through these steps.Consent, then shop A sends, then a licensed operator carries it, then delivery. It isn't just any shop sending it on a whim.
The easier pages move, the more the delivery pipe needs protecting.Relaying is left to licensed or designated operators, and securing the delivery pipe matters most of all → privacy, the Three Data Acts amendment
MyData = the ledger scattered across many shops is mine, so with my consent the shops can hand pages to each other directly.
MyData — the individual's right to data portability. A person can require an institution holding information about them to transmit it, on request, to the person or to another institution or licensed MyData operator the person designates, via a standardized method (an API). In Korea, financial MyData launched first under an amendment to the Credit Information Act, with licensed MyData operators as the intermediary there. A transfer-request right in the Personal Information Protection Act (Article 35-2) is extending it to healthcare, telecom and other fields.
When grown-ups say it
- MyData
- The right to choose where your own ledger goes. The data subject's own right to require the transfer.
- Right to data portability
- The right to require the holder to transmit it. A right the villager holds, so a shop can't refuse without reason, though the law allows refusal or suspension in some cases.
- Licensed MyData operator
- The licensed go-between carrying pages shop to shop. In finance the go-between needs a license; in other fields, designation as a personal-data management agency.
- Standardized API
- The fixed delivery pipe. Delivered through one fixed pipe, not a different method at every shop.
- Withdrawing consent
- Taking back consent, so no further pages are sent. Consent to transfer can be withdrawn at any time.
- Credit Information Act
- The law that opened financial MyData first. One of the Three Data Acts. → the Three Data Acts amendment
- Privacy
- A promise that still holds after the pages are sent. MyData is consent-based transfer — it doesn't erase the duty to protect. → the visitor's name tag belongs to the visitor
- CBPR
- A similar rule, but for crossing kingdoms. MyData is the person's own request; CBPR is a certification between kingdoms. → CBPR