Data Beyond Control
Loïc Pantano¹, Karima Boudaoud², Emmy Holveck³, Elena Ecerf⁴, Alicia Matingou⁵, Jean-Sylvestre Bergé⁶
¹ Polytech Nice-Sophia, Biot, France (Email: ) ² Université Côte d’Azur – Laboratoire I3S-CNRS, Sophia Antipolis, France (Email: ) ³ Université Côte d’Azur – Faculté de Droit et de Science Politique, Nice, France (Email: ) ⁴ Université Côte d’Azur – Faculté de Droit et de Science Politique, Nice, France (Email: ) ⁵ Université Côte d’Azur – Faculté de Droit et de Science Politique, Nice, France (Email: ) ⁶ Université Côte d’Azur – Faculté de Droit et de Science Politique, Nice, France (Email: )
DOI: https://doi.org/10.48545/advance2025-shortpapers-4_1
Abstract
In a context of increasing digitalization, controlling data flows constitutes a major challenge for organizations, particularly when it comes to sensitive data. This study examines the technical and legal challenges related to secure data flow management, based on the concrete case of the medical analysis laboratory MedLab and its facial recognition system implementation project. The study proposes an integrated approach combining Zero-Trust architecture, multi-factor authentication mechanisms, and advanced encryption solutions, while ensuring compliance with GDPR and other applicable regulations. Special attention is paid to subcontractor management and international data transfers. The results demonstrate that a holistic approach, combining innovative technical solutions and robust governance, can effectively meet security and compliance requirements. The study also emphasizes the importance of continuous adaptation to technological and regulatory developments, offering concrete recommendations for organizations wishing to strengthen control of their data flows.
Keywords
Data flows, GDPR, Compliance