Data trust, a mechanism to manage the interests of data beneficiaries؛ Guidelines for the data system in Iranian law

Document Type : Research Paper

Authors

1 Shahid Beheshti university. Tehran Iran Researcher at Cyberspace Research Institute.

2 Supreme National Defense University. Researcher at Cyberspace Research Institute.

10.22034/law.2024.56448.3268

Abstract

Data is one of the most valuable assets of the digital age, which are meaningful, valuable and strategic, whether aggregated or separately. Data has led to a huge transformation in data-oriented industries and businesses such as artificial intelligence, advertising and the creation of giant businesses such as data processing and brokerage. In addition to industrial and economic aspects, data is related to privacy since it represents the characteristics and states of different individuals. The current model of data governance does not serve the interests of multiple data stakeholder groups. The consent-oriented structure for data collection and processing does not ensure the privacy of individuals. In addition, this structure does not allow the free flow of data due to the concentration of data resources in the hands of limited groups (Tech giants). Data Trust is a recently proposed model for data governance and management. Whether the use of the common law trust institution for this purpose is adaptable and useful is the main question of the current research. It seems that despite the existing challenges, due to: first, the flexibility of the structure and the adaptability of the elements to the players of the data industry, and second: the formation based on the fiduciary relationship between the trustee and the beneficiaries, it can be a suitable option for the data governance method. be considered In the current research, the information of which is collected by library method, first the background of the trust institution is examined and then, the applicability and functions of this institution are studied in the field of data; Finally, the current position of the relevant regulations in Iran's legal system is analyzed in comparison with data trust and the necessity of adopting a neutral mechanism for managing personal data is emphasized.

Keywords