If you are a digital health provider dealing with GDPR-compliant patient data sharing — this project developed a secured platform that lets patients control exactly which health data gets shared with which doctor or insurer. Tested with 6,500 European citizens in a real-world e-health use case, it applies strict data minimization so only the minimum personal data required is transmitted.
Citizen-Controlled Personal Data Platform for Secure Digital Identity and Privacy
Imagine every time you sign up for a service online, you hand over way more personal information than necessary — and then you lose track of who has what. SOTERIA built a platform that acts like a personal vault for your data, where you decide exactly what gets shared and with whom. It combines strong identity verification with decentralized storage so no single company holds all your information. They tested it with 6,500 real people across e-learning, e-voting, and e-health scenarios.
What needed solving
Every company handling personal data faces a growing compliance burden under GDPR, with rising costs for data protection, consent management, and breach prevention. Citizens distrust digital services because they cannot see or control who holds their data, leading to lower adoption rates for e-health, e-learning, and digital government services. Companies need a solution that gives users real control over their data while simplifying compliance.
What was built
SOTERIA developed and tested an integrated platform combining high-level biometric identification, a smart data minimization engine that transmits only the personal data required, and decentralized secured data storage under full citizen control. The solution was validated through 3 large-scale real-world pilots with 6,500 citizens, supported by explanatory videos, an ethical helpdesk, and a formal exploitation and dissemination plan.
Who needs this
Who can put this to work
If you are an e-learning platform dealing with student data privacy and cross-border compliance — this project built a user-friendly tool that combines high-level identity verification with decentralized data storage. Validated in a large-scale e-learning use case, it ensures students of any age or ICT skill level can protect their data while accessing digital education services.
If you are a civic technology provider struggling to build citizen trust in digital government services — this project developed a decentralized personal data platform tested in a real-world e-voting use case. It combines biometric identification with cryptography to let citizens participate securely while keeping full control over their personal information.
Quick answers
What would it cost to license or integrate this technology?
The project was led by IDNOW SAS, a commercial identity verification company, suggesting the technology is designed for market deployment. Specific licensing costs are not available in the project data. Contact the coordinator through SciTransfer for pricing discussions.
Can this scale to handle millions of users in production?
The platform was tested with 6,500 European citizens across 3 large-scale real-world use cases (e-learning, e-voting, e-health). The decentralized storage architecture is designed to scale, though production deployment at millions of users would need further validation with the consortium.
Who owns the IP and how is it licensed?
The consortium of 18 partners across 8 countries developed the technology, with IDNOW SAS (France) as the SME coordinator. The project produced a Plan for the Exploitation and Dissemination of Results (PEDR) covering IPR issues. Specific licensing terms should be discussed directly with the consortium.
Is this compliant with current EU data protection regulations?
The platform was explicitly designed to be fully GDPR-compliant and strictly applies the data minimization principle. The project included an ethical helpdesk that operated throughout the 3-year duration, providing guidelines and addressing privacy questions for all partners.
How long would integration take for an existing digital service?
Based on available project data, the solution combines a secured access interface, a smart data processing platform, and decentralized storage. The 3-year project concluded in September 2024, with tested components ready for integration discussions. Timeline would depend on your existing infrastructure.
What kind of ongoing support is available?
The project maintained an online ethical helpdesk throughout its duration, producing annual reports. The consortium includes 6 industry partners and 6 research organizations across 8 countries, providing a broad support base for post-project engagement.
Does this work for users who are not tech-savvy?
A core design goal was enabling all citizens, regardless of gender, age, or ICT skills, to protect and control their personal data. The project used citizen-driven and citizen-centric design methods including co-creation, and produced explanatory videos for use case participants.
Who built it
The SOTERIA consortium brings together 18 partners from 8 European countries (Austria, Belgium, Switzerland, Germany, Spain, France, Italy, Romania), with a balanced mix of 6 industry players, 6 research organizations, 3 universities, and 3 other entities. The project is led by IDNOW SAS, a French SME specializing in identity verification — meaning the commercial coordinator already operates in the target market. With 4 SMEs and a 33% industry ratio, this consortium has real commercial DNA, not just academic interest. The geographic spread across major EU markets makes the solution relevant for cross-border data protection compliance.
- INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET AUTOMATIQUEparticipant · FR
- AUDENCIAparticipant · FR
- STELAR SECURITY TECHNOLOGY LAW RESEARCH UG (HAFTUNGSBESCHRANKT) GMBHparticipant · DE
- Servicio Vasco de Salud Osakidetzathirdparty · ES
- SCYTL ELECTION TECHNOLOGIES SLparticipant · ES
- FONDATION DE L'INSTITUT DE RECHERCHE IDIAPparticipant · CH
- ASOCIACION INSTITUTO DE INVESTIGACION SANITARIA BIOBIZKAIAparticipant · ES
- ASOCIATIA INFOCONSparticipant · RO
- FUNDACION VASCA DE INNOVACION E INVESTIGACION SANITARIASthirdparty · ES
- ERDYN CONSULTANTS SASparticipant · FR
- CENTRE DE VISIO PER COMPUTADORparticipant · ES
- KATHOLIEKE UNIVERSITEIT LEUVENparticipant · BE
- CENTRALESUPELECthirdparty · FR
IDNOW SAS (France) — commercial identity verification SME. Contact via SciTransfer for introduction.
Talk to the team behind this work.
Want to explore how SOTERIA's personal data protection platform could solve your compliance challenges? SciTransfer can arrange a direct introduction to the project coordinator and relevant consortium partners.