Managing Rights to Non-Personal Data

The Master’s thesis discusses the management of non-personal data in companies within the European Union. Non-personal data is for example data produced by the Internet of Things through which natural persons cannot be identified and with which company may create value. The thesis examines non-personal data as an asset, relevant legislation to management of non-personal data and different approaches with which companies can manage non-personal data, especially contract law practises. The research aims to produce knowledge on this data economy phenomenon and to systematise management of non-personal data, especially from a legal point of view. The Master’s thesis is legal dogmatic but also law and economics approach is used. Moreover, an empirical survey on contracting practises of Finnish companies is conducted from the viewpoint of non-personal data. Additionally, computer science is used to understand the research object non-personal data. It is concluded that of the approaches available to companies, contract law, combined with indirect technical, legal and business practises, is an efficient approach to the management of non-personal data. A company’s position in a data value chain is argued to be a factor in selecting suitable practices for management of non-personal data. The distinction between personal and non-personal data is acknowledged as advantageous for companies. Problems regarding the conceptualization of data are identified as a key deficiency in public and private regulation of data. Further research on the subject is recommended