Effective Enforcement of a Data Protection


Book Description

This paper presents ideas for a new approach to enforcement of a data protection regime, based on risk-based supervision and the use of a range of responsive enforcement tools that could be deployed in advance of a breach to prevent it, or after a breach to mitigate the effects. Building on the risk-based approach to supervision, the model proposes a methodology to identify those entities that potentially pose more risk (to individuals and the system) when the personal data they hold is compromised.Part 2 of this paper proposes a risk-based framework to identify and classify entities based on the risk they pose when the personal data they hold is compromised, using both qualitative and quantitative components. Part 3 sets out an enforcement toolkit for data protection, guided by the paradigm of responsive regulation (that also employs ex ante tools) to prevent and mitigate the effects of a compromise of personal data. This approach is a departure from the post-data breach sanctions that currently dominate data protection regimes worldwide. Part 4 sets out the features of institutional design and inter-sectoral coordination required for effective implementation of such a model approach for risk-based supervision and enforcement of data protection rights.




Enforcing Privacy


Book Description

This book is about enforcing privacy and data protection. It demonstrates different approaches – regulatory, legal and technological – to enforcing privacy. If regulators do not enforce laws or regulations or codes or do not have the resources, political support or wherewithal to enforce them, they effectively eviscerate and make meaningless such laws or regulations or codes, no matter how laudable or well-intentioned. In some cases, however, the mere existence of such laws or regulations, combined with a credible threat to invoke them, is sufficient for regulatory purposes. But the threat has to be credible. As some of the authors in this book make clear – it is a theme that runs throughout this book – “carrots” and “soft law” need to be backed up by “sticks” and “hard law”. The authors of this book view privacy enforcement as an activity that goes beyond regulatory enforcement, however. In some sense, enforcing privacy is a task that befalls to all of us. Privacy advocates and members of the public can play an important role in combatting the continuing intrusions upon privacy by governments, intelligence agencies and big companies. Contributors to this book - including regulators, privacy advocates, academics, SMEs, a Member of the European Parliament, lawyers and a technology researcher – share their views in the one and only book on Enforcing Privacy.




APEC Privacy Framework


Book Description




Research Handbook on Privacy and Data Protection Law


Book Description

This Research Handbook is an insightful overview of the key rules, concepts and tensions in privacy and data protection law. It highlights the increasing global significance of this area of law, illustrating the many complexities in the field through a blend of theoretical and empirical perspectives.




Data Localization Laws and Policy


Book Description

Countries are increasingly introducing data localization laws, threatening digital globalization and inhibiting cloud computing adoption despite its acknowledged benefits. This multi-disciplinary book analyzes the EU restriction (including the Privacy Shield and General Data Protection Regulation) through a cloud computing lens, covering historical objectives and practical problems, showing why the focus should move from physical data location to effective jurisdiction over those controlling access to intelligible data, and control of access to data through security.




EU Data Protection and the GDPR


Book Description

Buy a new version of this textbook and receive access to the Connected eBook on Casebook Connect, including lifetime access to the online ebook with highlight, annotation, and search capabilities. Access also includes an outline tool and other helpful resources. Connected eBooks provide what you need most to be successful in your law school classes. A clear, comprehensive, and cutting-edge introduction to the field of information privacy law with a focus on EU Data Protection and the GDPR. The volume is perfect as a stand-alone text for a seminar and as supplement to a course on EU law. It contains the latest cases and materials exploring issues of emerging technology, information privacy, OECD privacy guidelines, privacy protection in Europe, international transfers of data, and selected provisions of the GDPR. New to the 2nd Edition: Tighter editing and shorter chapters Full text of the GDPR Schrems II and the Data Privacy Framework




EU Data Protection and the GDPR


Book Description

Developed from the casebook Information Privacy Law, this short paperback contains key cases and materials focusing on privacy issues related to the GDPR and data protection in the European Union. Topics covered include the GDPR, Schrems cases, the right to be forgotten, and international data transfers. This book is designed for use in courses and seminars on: Comparative and international law EU law Privacy law Information law Consumer law Topics covered include: GDPR Schrems I and Schrems II cases The right to be forgotten International data transfers, including an account of the rise and fall of the Privacy Shield European Court of Human Rights cases European Court of Justice cases Comparative analysis of EU and US privacy law




The EU General Data Protection Regulation (GDPR)


Book Description

This book provides expert advice on the practical implementation of the European Union’s General Data Protection Regulation (GDPR) and systematically analyses its various provisions. Examples, tables, a checklist etc. showcase the practical consequences of the new legislation. The handbook examines the GDPR’s scope of application, the organizational and material requirements for data protection, the rights of data subjects, the role of the Supervisory Authorities, enforcement and fines under the GDPR, and national particularities. In addition, it supplies a brief outlook on the legal consequences for seminal data processing areas, such as Cloud Computing, Big Data and the Internet of Things.Adopted in 2016, the General Data Protection Regulation will come into force in May 2018. It provides for numerous new and intensified data protection obligations, as well as a significant increase in fines (up to 20 million euros). As a result, not only companies located within the European Union will have to change their approach to data security; due to the GDPR’s broad, transnational scope of application, it will affect numerous companies worldwide.




Research Handbook on EU Data Protection Law


Book Description

Bringing together leading European scholars, this thought-provoking Research Handbook provides a state-of-the-art overview of the scope of research and current thinking in the area of European data protection. Offering critical insights on prominent strands of research, it examines key challenges and potential solutions in the field. Chapters explore the fundamental right to personal data protection, government-to-business data sharing, data protection as performance-based regulation, privacy and marketing in data-driven business models, data protection and judicial automation, and the role of consent in an algorithmic society.




Keys to Delivering Effective Data Privacy Compliance


Book Description

The General Data Protection Regulation (GDPR) is taking shape across the European Union with the aim of improving data protection compliance across Europe. This article will address the role of GDPR, in force since May 2018, in data protection as well as its ability to harmonize pre-existent data protection laws across Europe. This article highlights also the role of data protection officers, who are key-players to the enforcement of the new GDPR, and their legal obligations.