Data Protection Law:Approaching Its Rationale, Logic and Limits


Book Description

The author evaluates the costs and/or gains and the interference (positive or negative) in the commercial, public administrative and social spheres that data protection laws have the potential to create, with numerous references to legislation and administrative decision making in a wide variety of jurisdictions.




Data Protection Law


Book Description

This book provides a comparison and practical guide for academics, students, and the business community of the current data protection laws in selected Asia Pacific countries (Australia, India, Indonesia, Japan Malaysia, Singapore, Thailand) and the European Union. The book shows how over the past three decades the range of economic, political, and social activities that have moved to the internet has increased significantly. This technological transformation has resulted in the collection of personal data, its use and storage across international boundaries at a rate that governments have been unable to keep pace. The book highlights challenges and potential solutions related to data protection issues arising from cross-border problems in which personal data is being considered as intellectual property, within transnational contracts and in anti-trust law. The book also discusses the emerging challenges in protecting personal data and promoting cyber security. The book provides a deeper understanding of the legal risks and frameworks associated with data protection law for local, regional and global academics, students, businesses, industries, legal profession and individuals.




Data Protection Implementation Guide


Book Description

The complexities of implementing the General Data Protection Regulation (GDPR) continue to grow as it progresses through new and ever-changing technologies, business models, codes of conduct, and decisions of the supervisory authorities, and the courts. This eminently practical guide to implementing the GDPR – written in an original, problem-solving style by a highly experienced data protection expert with equal knowledge of both law and technology – provides a step-by-step project management approach to building a GDPR-compliant data protection system, assessing, and documenting the risks and then implementing these changes through processes at the operational level. With detailed attention to case law (Member State, ECJ, and ECHR), especially where affecting high-risk areas that have attracted scrutiny, the guidance proceeds systematically through such topics and issues as the following: required documentation, policies, and procedures; risk assessment tools and analysis frameworks; children’s data; employee and health data; international transfers post-Schrems II; data subject rights including the right of access; data retention and erasure; tracking and surveillance; and effects of technologies such as artificial intelligence, biometrics, and machine learning. With its practical examples derived from the author’s experience in building GDPR-compliant software, as well as its analysis of case law and enforcement priorities, this incomparable guide enables company data protection officers and compliance staff to advise on key issues with full awareness of the legal and reputational risks and how to mitigate them. It is also sure to be of immeasurable value to concerned regulators and policymakers at all government levels. “…it's going to be the go to resource for practitioners.” Tom Gilligan, Data Protection Consultant, September 2021 "I purchased this book recently and I’m very glad I did. It’s the textbook I have been waiting for. As someone relatively new to data protection, I was finding it very difficult to find books on the practical side of data protection. This book is very clearly laid out with practical examples and case law given for each topic, which is immensely helpful. I would recommend it to any data protection practitioners." Jennifer Breslin, LLM CIPP/E, AIPP Member




Data Protection Around the World


Book Description

This book provides a snapshot of privacy laws and practices from a varied set of jurisdictions in order to offer guidance on national and international contemporary issues regarding the processing of personal data and serves as an up-to-date resource on the applications and practice-relevant examples of data protection laws in different countries. Privacy violations emerging at an ever-increasing rate, due to evolving technology and new lifestyles linked to an intensified online presence of ever more individuals, required the design of a novel data protection and privacy regulation. The EU General Data Protection Regulation (GDPR) stands as an example of a regulatory response to these demands. The authors included in this book offer an in-depth analysis of the national data protection legislation of various countries across different continents, not only including country-specific details but also comparing the idiosyncratic characteristics of these national privacy laws to the GDPR. Valuable comparative information on data protection regulations around the world is thus provided in one concise volume. Due to the variety of jurisdictions covered and the practical examples focused on, both academics and legal practitioners will find this book especially useful, while for compliance practitioners it can serve as a guide regarding transnational data transfers. Elif Kiesow Cortez is Senior Lecturer at the International and European Law Program at The Hague University of Applied Sciences in The Netherlands.




APEC Privacy Framework


Book Description




Handbook on European data protection law


Book Description

The rapid development of information technology has exacerbated the need for robust personal data protection, the right to which is safeguarded by both European Union (EU) and Council of Europe (CoE) instruments. Safeguarding this important right entails new and significant challenges as technological advances expand the frontiers of areas such as surveillance, communication interception and data storage. This handbook is designed to familiarise legal practitioners not specialised in data protection with this emerging area of the law. It provides an overview of the EU’s and the CoE’s applicable legal frameworks. It also explains key case law, summarising major rulings of both the Court of Justice of the European Union and the European Court of Human Rights. In addition, it presents hypothetical scenarios that serve as practical illustrations of the diverse issues encountered in this ever-evolving field.




Proskauer on Privacy


Book Description

This comprehensive reference covers the laws governing every area where data privacy and security is potentially at risk -- including government records, electronic surveillance, the workplace, medical data, financial information, commercial transactions, and online activity, including communications involving children.




Data Protection Law in the EU


Book Description

Practically every organisation in the world processes personal data. European data protection law imposes a series of requirements designed to protect individuals against the risks that result from the processing of their data. It also distinguishes among different types of actors involved in the processing and sets out different obligations for each type of actor. The most important distinction in this regard is the distinction between 'controllers' and 'processors'. This book seeks to determine whether EU data protection law should continue to maintain its current distinction.




EU Competition Law, Data Protection and Online Platforms: Data as Essential Facility


Book Description

All are agreed that the digital economy contributes to a dynamic evolution of markets and competition. Nonetheless, concerns are increasingly raised about the market dominance of a few key players. Because these companies hold the power to drive rivals out of business, regulators have begun to seek scope for competition enforcement in cases where companies claim that withholding data is needed to satisfy customers and cut costs. This book is the first focus on how competition law enforcement tools can be applied to refusals of dominant firms to give access data on online platforms such as search engines, social networks, and e-commerce platforms – commonly referred to as the ‘gatekeepers’ of the Internet. The question arises whether the denial of a dominant firm to grant competitors access to its data could constitute a ‘refusal to deal’ and lead to competition law liability under the so-called ‘essential facilities doctrine', according to which firms need access to shared knowledge in order to be able to compete. A possible duty to share data with rivals also brings to the forefront the interaction of competition law with data protection legislation considering that the required information may include personal data of individuals. Building on the refusal to deal concept, and using a multidisciplinary approach, the analysis covers such issues and topics as the following: – data portability; – interoperability; – data as a competitive advantage or entry barrier in digital markets; – market definition and dominance with respect to data; – disruptive versus sustaining innovation; – role of intellectual property regimes; – economic trade-off in essential facilities cases; – relationship of competition enforcement with data protection law and – data-related competition concerns in merger cases. The author draws on a wealth of relevant material, including EU and US decision-making practice, case law, and policy documents, as well as economic and empirical literature on the link between competition and innovation. The book concludes with a proposed framework for the application of the essential facilities doctrine to potential forms of abuse of dominance relating to data. In addition, it makes suggestions as to how data protection interests can be integrated into competition policy. An invaluable contribution to ongoing academic and policy discussions about how data-related competition concerns should be addressed under competition law, the analysis clearly demonstrates how existing competition tools for market definition and assessment of dominance can be applied to online platforms. It will be of immeasurable value to the many jurists, business persons, and academics concerned with this very timely subject.




GDPR: Personal Data Protection in the European Union


Book Description

GDPR: Personal Data Protection in the European Union Mariusz Krzysztofek Personal data protection has become one of the central issues in any understanding of the current world system. In this connection, the European Union (EU) has created the most sophisticated regime currently in force with the General Data Protection Regulation (GDPR) (EU) 2016/679. Following the GDPR’s recent reform – the most extensive since the first EU laws in this area were adopted and implemented into the legal orders of the Member States – this book offers a comprehensive discussion of all principles of personal data processing, obligations of data controllers, and rights of data subjects, providing a thorough, up-to-date account of the legal and practical aspects of personal data protection in the EU. Coverage includes the recent Court of Justice of the European Union (CJEU) judgment on data transfers and new or updated data protection authorities’ guidelines in the EU Member States. Among the broad spectrum of aspects of the subject covered are the following: – right to privacy judgments of the CJEU and the European Court of Human Rights; – scope of the GDPR and its key definitions, key principles of personal data processing; – legal bases for the processing of personal data; – direct and digital marketing, cookies, and online behavioural advertising; – processing of personal data of employees; – sensitive data and criminal records; – information obligation & privacy notices; – data subjects rights; – data controller, joint controllers, and processors; – data protection by design and by default, data security measures, risk-based approach, records of personal data processing activities, notification of a personal data breach to the supervisory authority and communication to the data subject, data protection impact assessment, codes of conduct and certification; – Data Protection Officer; – transfers of personal data to non-EU/EEA countries; and – privacy in the Internet and surveillance age. Because the global scale and evolution of information technologies have changed the data processing environment and brought new challenges, and because many non-EU jurisdictions have adopted equivalent regimes or largely analogous regulations, the book will be of great usefulness worldwide. Multinational corporations and their customers and contractors will benefit enormously from consulting and using this book, especially in conducting case law, guidelines and best practices formulated by European data protection authorities. For lawyers and academics researching or advising clients on this area, this book provides an indispensable source of practical guidance and information for many years to come.