Interplay between security and data protection assessments about documents HOT 1 OPEN

In #43, the theoretical attack has been demonstrated by @oseiskar (Condition 1).

Here, @oseiskar shares his expertise as the CTO of IndoorAtlas, and finishes with a promotional pitch (Condition 3).

In #281, Conditions 2 and 4 are met, but possibly with a twist: while originally I thought the data protection assessment would simply change to reach the different conclusion that "this data is indeed personal data", I suspect #281 (and the mathematical reference therein) shows that in fact "there are better deployments of DP-3T than peer-to-peer", for instance as "in-background device-based listening of DP3T-compatible beacons emitted by a possibly-centralized system" (potential problem: such deployments would be prevented by Apple and Google).

In any case, this last point suggests that the model DPIA here is already incomplete, as it fails to address the potential comparative advantages of such a hybrid system.

from documents.