Abstract
In the world of mobile applications, protecting the user’s privacy is paramount. With the rise of mobility applications that make use of location-based services, data protection issues have become even more pressing. In this paper, we explore how to ensure compliance with data protection laws, specifically the General Data Protection Regulation (GDPR), when
developing a new mobility application. Our focus is on the Geographical Location Oriented Network (GLocON),
a cutting-edge framework for geo-locationoriented device-to-device communications. Through a security hackathon and a Data Protection Impact Assessment, we conducted an anonymization analysis of G-LocON and proposed measures to reduce the processing of personal data. The paper concludes that personal data can be anonymized by randomizing the unique identifier of peers and hiding location information by default for fair and transparent processing. Adherence to the GDPR is further ensured through the implementation of measures such as permanent storage for lawfulness. This work represents a significant step towards building more privacyfocused mobility applications.
