Data Protection Information Notice

CNRS ISC PIF

Data protection information notice for scientific research Project Open Portability

Social networks, particularly Twitter (now X), have from the beginning been privileged objects of research, especially in the field of computational social sciences.

A historic transition is underway in the social network landscape. The centralized model, embodied by X (formerly Twitter), is experiencing a massive exodus of users to alternative platforms like BlueSky and Mastodon. Several million accounts have migrated in just a few weeks, marking a major shift towards decentralized and open networks.

This transition is a major social, economic, and technological phenomenon that may modify the global digital space, particularly in Europe, and could allow Europe to regain some digital sovereignty.

I. Project and Processing Description

The research objectives are as follows: analyze the difference between open and closed micro-blogging digital environments from the perspective of social dynamics and online debates. Study as a case study the ongoing migration between X and spaces based on open protocols AT Protocol and Activity Pub, and study the appropriation of decentralized digital spaces over time (5-year horizon).

The OpenPortability project involves:

• Data collection for data portability between social networks
• Data collection for creating a snapshot of X network's social structure
• Data collection for creating snapshots of alternative networks' social structures
• Data portability
• Data processing and analysis

II. Data Collection, Recipients, and Retention

Data collected directly from individuals and processed are:

• Digital identifiers on social networks (username ID)
• Social network profile names
• Email addresses

Bluesky's personal data protection policy can be found at: https://bsky.social/about/support/privacy-policy

Mastodon's personal data protection policy can be accessed at https://joinmastodon.org/servers

III. Security Measures

To ensure data confidentiality and protection, measures are taken in accordance with the State's information systems security policy, applied to CNRS. Data is hosted in France on CNRS servers.

IV. Exercise of Your Rights

You can access and obtain a copy of your data, object to the processing of this data, or have it rectified. You also have the right to limit the processing of your data. You can exercise these rights by contacting the data controller at the Complex Systems Institute-Paris Ile de France, located at 113 rue Nationale 75013 Paris, or through the contact form available at https://openportability.org/

You can also contact the CNRS Data Protection Officer (DPO) at: CNRS - Data Protection Service, 2 rue Jean Zay, 54519 Vandoeuvre-lès-Nancy - dpd.demandes@cnrs.fr.

If you believe your Information Technology and Civil Liberties rights are not being respected, you can file a complaint online with the CNIL, 3 Place de Fontenoy, TSA 80715 – 75334 Paris Cedex 07 (https://www.cnil.fr/).