‹ LibraryBasicChapter 17/18
Chapter 17

Ethics, Privacy & Legal Aspects in Geospatial

Geospatial data raises unique ethical, privacy, and legal considerations — from surveillance concerns to indigenous data sovereignty.

GDPR GuidelinesOGC Ethics FrameworkFOSS4G Community Standards
€2.1B totalGDPR Fines↗ Since 2018

Theory & Foundations

As geospatial technology becomes more powerful and pervasive, practitioners must navigate data ownership, privacy laws, licensing, and ethical use frameworks.

Location privacy: GPS tracking, geotagged photos, and mobile data reveal intimate details about individuals. GDPR considers location data as personal data requiring consent.

Data licensing: Open Data Commons (ODC), Creative Commons (CC), and proprietary licenses govern how geospatial data can be used, shared, and attributed. Violating licenses can lead to legal action.

Indigenous data sovereignty: Many indigenous communities assert rights over geographic knowledge of their traditional lands. Projects should follow CARE principles (Collective benefit, Authority to control, Responsibility, Ethics).

Dual-use concerns: Satellite imagery and mapping data can be used for both beneficial purposes (disaster response, development) and harmful ones (military targeting, surveillance, displacement).

In-Depth Coverage

Privacy Frameworks

Legal frameworks governing location data privacy.

  • GDPR (EU): Location is personal data, requires consent
  • CCPA (California): Right to know and delete location data
  • PIPEDA (Canada): Purpose limitation for location collection
  • Bangladesh ICT Act: Evolving privacy provisions

Data Licensing

Understanding what you can do with geospatial data.

  • CC BY: Free use with attribution
  • CC BY-SA: Share-alike requirement
  • ODbL: OpenStreetMap license — share-alike
  • Proprietary: No redistribution without permission

Key Techniques

License reviewPrivacy assessmentConsent managementAttributionEthical review

Data Visualization

Privacy Regulation Impact on GIS (%)
GDPR: 40CCPA: 20PIPEDA: 15Others: 25
  • GDPR: 40%
  • CCPA: 20%
  • PIPEDA: 15%
  • Others: 25%
Ethical Framework
  1. 🔒PrivacyProtect individual location data
  2. ConsentObtain permission for data use
  3. 📝AttributionCredit data sources properly
  4. ⚖️ResponsibilityConsider societal impact

Practical Workflow

  1. Review data license before use
  2. Assess privacy implications
  3. Obtain consent for personal location data
  4. Follow data protection laws (GDPR, etc.)
  5. Respect indigenous data rights
  6. Attribute data sources properly
  7. Consider dual-use implications
  8. Document ethical review process

Software & Tools

GDPR ToolkitN/AFramework — Privacy compliance

Video Tutorials

Real-World Application

Google Street View faced lawsuits in multiple countries for capturing private property without consent, leading to new privacy regulations for geospatial data collection.

Real-World Projects

Google Street View Privacy Cases📍 Europe

Multiple lawsuits over unauthorized property capture.

Impact: Led to face/license plate blurring and opt-out options.

Case Study

The Mapuche community in Chile successfully challenged mining companies using indigenous land maps, establishing legal precedent for geographic data sovereignty.

Problem-Based Learning

P1 Publish a web map without violating data licenses

Project uses OpenStreetMap data, Sentinel imagery, and a proprietary road dataset.

Solution: OSM: Use with ODbL attribution. Sentinel: Free for all purposes with Copernicus credit. Proprietary roads: Cannot publish — replace with OSM road data.

License reviewOSM attributionCopernicus terms
✅ Published map with proper attribution. Avoided $50K potential licensing violation fine.

Knowledge Check

1. Under GDPR, location data is considered?

Further Reading