SciTransfer
SOTERIA · Project

Citizen-Controlled Personal Data Platform for Secure Digital Identity and Privacy

digitalPilotedTRL 7

Imagine every time you sign up for a service online, you hand over way more personal information than necessary — and then you lose track of who has what. SOTERIA built a platform that acts like a personal vault for your data, where you decide exactly what gets shared and with whom. It combines strong identity verification with decentralized storage so no single company holds all your information. They tested it with 6,500 real people across e-learning, e-voting, and e-health scenarios.

By the numbers
6,500
European citizens involved in real-world testing
3
large-scale use cases (e-learning, e-voting, e-health)
18
consortium partners
8
countries represented in consortium
3
years of development and testing
22
project deliverables produced
The business problem

What needed solving

Every company handling personal data faces a growing compliance burden under GDPR, with rising costs for data protection, consent management, and breach prevention. Citizens distrust digital services because they cannot see or control who holds their data, leading to lower adoption rates for e-health, e-learning, and digital government services. Companies need a solution that gives users real control over their data while simplifying compliance.

The solution

What was built

SOTERIA developed and tested an integrated platform combining high-level biometric identification, a smart data minimization engine that transmits only the personal data required, and decentralized secured data storage under full citizen control. The solution was validated through 3 large-scale real-world pilots with 6,500 citizens, supported by explanatory videos, an ethical helpdesk, and a formal exploitation and dissemination plan.

Audience

Who needs this

Digital health platforms needing GDPR-compliant patient data sharingE-learning providers managing student identity and privacy across bordersElectronic voting and civic tech companies building citizen trustIdentity verification and KYC service providersEnterprise IT departments managing employee data consent and minimization
Business applications

Who can put this to work

Healthcare and eHealth
enterprise
Target: Digital health platforms and hospital IT departments

If you are a digital health provider dealing with GDPR-compliant patient data sharing — this project developed a secured platform that lets patients control exactly which health data gets shared with which doctor or insurer. Tested with 6,500 European citizens in a real-world e-health use case, it applies strict data minimization so only the minimum personal data required is transmitted.

EdTech and E-Learning
any
Target: Online learning platforms and universities

If you are an e-learning platform dealing with student data privacy and cross-border compliance — this project built a user-friendly tool that combines high-level identity verification with decentralized data storage. Validated in a large-scale e-learning use case, it ensures students of any age or ICT skill level can protect their data while accessing digital education services.

GovTech and Civic Technology
mid-size
Target: Electronic voting solution providers and municipal IT departments

If you are a civic technology provider struggling to build citizen trust in digital government services — this project developed a decentralized personal data platform tested in a real-world e-voting use case. It combines biometric identification with cryptography to let citizens participate securely while keeping full control over their personal information.

Frequently asked

Quick answers

What would it cost to license or integrate this technology?

The project was led by IDNOW SAS, a commercial identity verification company, suggesting the technology is designed for market deployment. Specific licensing costs are not available in the project data. Contact the coordinator through SciTransfer for pricing discussions.

Can this scale to handle millions of users in production?

The platform was tested with 6,500 European citizens across 3 large-scale real-world use cases (e-learning, e-voting, e-health). The decentralized storage architecture is designed to scale, though production deployment at millions of users would need further validation with the consortium.

Who owns the IP and how is it licensed?

The consortium of 18 partners across 8 countries developed the technology, with IDNOW SAS (France) as the SME coordinator. The project produced a Plan for the Exploitation and Dissemination of Results (PEDR) covering IPR issues. Specific licensing terms should be discussed directly with the consortium.

Is this compliant with current EU data protection regulations?

The platform was explicitly designed to be fully GDPR-compliant and strictly applies the data minimization principle. The project included an ethical helpdesk that operated throughout the 3-year duration, providing guidelines and addressing privacy questions for all partners.

How long would integration take for an existing digital service?

Based on available project data, the solution combines a secured access interface, a smart data processing platform, and decentralized storage. The 3-year project concluded in September 2024, with tested components ready for integration discussions. Timeline would depend on your existing infrastructure.

What kind of ongoing support is available?

The project maintained an online ethical helpdesk throughout its duration, producing annual reports. The consortium includes 6 industry partners and 6 research organizations across 8 countries, providing a broad support base for post-project engagement.

Does this work for users who are not tech-savvy?

A core design goal was enabling all citizens, regardless of gender, age, or ICT skills, to protect and control their personal data. The project used citizen-driven and citizen-centric design methods including co-creation, and produced explanatory videos for use case participants.

Consortium

Who built it

The SOTERIA consortium brings together 18 partners from 8 European countries (Austria, Belgium, Switzerland, Germany, Spain, France, Italy, Romania), with a balanced mix of 6 industry players, 6 research organizations, 3 universities, and 3 other entities. The project is led by IDNOW SAS, a French SME specializing in identity verification — meaning the commercial coordinator already operates in the target market. With 4 SMEs and a 33% industry ratio, this consortium has real commercial DNA, not just academic interest. The geographic spread across major EU markets makes the solution relevant for cross-border data protection compliance.

How to reach the team

IDNOW SAS (France) — commercial identity verification SME. Contact via SciTransfer for introduction.

Next steps

Talk to the team behind this work.

Want to explore how SOTERIA's personal data protection platform could solve your compliance challenges? SciTransfer can arrange a direct introduction to the project coordinator and relevant consortium partners.