Rights by Architecture: A Human-Compatible Sociotechnical Layer for Digital Protection Across Regulatory Regimes

A recent research paper identifies a significant gap between the legal establishment of digital rights and their practical exercise within information systems. This disparity is attributed to legal heterogeneity, misaligned organizational incentives, fragmented system architectures, and imbalanced control over rights-related actions. The paper proposes a 'human-compatible rights layer' as a sociotechnical solution to enable standardized, machine-readable, and bi-directional communication for digital rights across diverse regulatory regimes.

Why it matters

This research highlights a fundamental challenge in the digital economy: the difficulty in translating legal and regulatory digital rights into enforceable technical mechanisms. Addressing this gap is critical for maintaining public trust, ensuring regulatory compliance, and fostering equitable data governance practices across international borders and diverse technological landscapes.

Key insights

• Digital rights, despite legal recognition, are challenging to operationalize within existing information systems.
• Key drivers for this operational gap include legal and regulatory inconsistencies, conflicting commercial and organizational motivations, and disaggregated system designs.
• Control over actions relevant to digital rights is often asymmetrical, favoring system operators over individuals.
• A proposed 'human-compatible rights layer' aims to standardize machine-readable communication for exercising digital rights.
• This layer would facilitate various rights-related interactions, including requests, consent, refusal, withdrawal, objection, and record-keeping.
• The concept differentiates itself by addressing jurisdictional plurality, contrasting with approaches like California's opt-out signals or the EU's mixed lawful-basis regime.

Source

arXiv — Computers and Society — https://arxiv.org/abs/2609.02455