Cultural Heritage UGC and Data Protection

The use of new technologies has determined the development and spread of new models of shared knowledge, enhancing artistic and cultural heritage: in particular, through cloud and IoT systems, cultural assets take on the characteristics of "smart cultural objects", becoming modalities of easier diffusion and wider sharing of knowledge. In parallel, the multiplication of online communication methods has enhanced new and more dynamic ways of knowledge sharing, in particular regarding the "experiential knowledge", which brings together documentary knowledge and a more personal, interpretative character. In this way, we can consider the phenomenon of so-called "semantic heritage community generated data", which, through a series of services (i.e. tagging, QR Code tags and RFID) allow the acquisition and sharing of experiences and contents related to objects of art or monuments and buildings. The generated data flow collects personal data and non-personal data and therefore requires the adoption of protective measures in compliance with 679/2016 / EU (GDPR) and Regulation 1087/2018 / EU (free flow of non-personal data in the EU), to guarantee rights regarding both people and properties. The proposed paper analyses some legal aspects of the "semantic heritage community generated data", with attention to (personal and non-personal) data protection and the possibilities of use/processing by public bodies and private companies.