Review Comment:
Thank you for your revisions to this paper, I think you've addressed my main points of concern with the previous version. In particular, the clarification that you're referring to incentivisation to participate in/understand the consent process, rather than incentivisation to share personal data, is much appreciated. The use of the competency questions to evaluate the ontologies also provides a stronger basis for your claims.
Table 4: I appreciate space might be a concern, but it would be easier to read if the Question column contained text rather than a question number - not necessarily the entire question, but enough to be able to see what each question is without having to keep looking back.
I do still think that the level of detail in describing implementations is unnecessary - to what extent does a reader need to know that a tool uses D3.js, or React, or PostgreSQL? They can find that out from the tool page, and these aren't details that contribute to the comparison with regard to consent handling.
I take your point that blockchains are not the topic of the paper, but in evaluating research which uses blockchain, it's important to note that:
1. Encryption and PKI isn't enough for anonymity - if multiple transactions are signed with the same private key, this can leak information in the public immutable data which could be used to deanonymise. To be concerned about privacy, an attention to non-obvious attacks on behalf of the researchers is a factor to look for in blockchain research.
2. While most widely-used current blockchains are computationally expensive, computational expense is not inherent to blockchain, and therefore isn't an inherent objection to a blockchain solution. (Ethereum has already started the move to computationally-cheap proof-of-stake, for example)
I again enjoyed reading the paper. Thank you for writing it.
|