{"title":"Decision-Making Practices in Transition","authors":"B. Bacher","doi":"10.21552/edpl/2023/1/8","DOIUrl":"https://doi.org/10.21552/edpl/2023/1/8","url":null,"abstract":"","PeriodicalId":36819,"journal":{"name":"European Data Protection Law Review","volume":"32 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"76921944","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Malta ∙ Maltese DPA Rules on Data Breach Involving an Illegal Voter Database and the Right of Access","authors":"M. M. Caruana, R. Borg","doi":"10.21552/edpl/2023/2/19","DOIUrl":"https://doi.org/10.21552/edpl/2023/2/19","url":null,"abstract":"","PeriodicalId":36819,"journal":{"name":"European Data Protection Law Review","volume":"130 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"83519107","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Opinions ∙ Privacy Is Hard and Seven Other Myths","authors":"J. Hoepman","doi":"10.21552/edpl/2023/2/5","DOIUrl":"https://doi.org/10.21552/edpl/2023/2/5","url":null,"abstract":"","PeriodicalId":36819,"journal":{"name":"European Data Protection Law Review","volume":"56 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"89374566","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Italy ∙ Italian DPA on the Vaccine Booking Procedure: Intimate Questions Possible, but Information Obligations Still Key","authors":"G. Bincoletto","doi":"10.21552/edpl/2023/3/13","DOIUrl":"https://doi.org/10.21552/edpl/2023/3/13","url":null,"abstract":"","PeriodicalId":36819,"journal":{"name":"European Data Protection Law Review","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"135709162","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
This article aims to introduce and describe a concept depicting a specific and novel form of constitutional right, to offer a basic theoretical proposition on – theory of – EU data protection law on the basis of this concept, and to demonstrate the theoretical worth and practical utility of this proposition. In this regard, the article introduces and describes the concept of the interface right – a specific and novel form of constitutional right which essentially functions to mitigate the consequences of uncertainty, brought about by change in social context, for the functionality of a set of substantive constitutional rights, by providing a legal infrastructure which ensures a reflexive relationship between the order of substantive rights and social context. Building on this concept, the article then offers, and demonstrates the theoretical worth of, the following basic theoretical proposition on – theory of – EU data protection law: the right to data protection can be considered as an interface right, and secondary EU data protection law represents the unfolding of this underlying interface right.To demonstrate the practical utility of the basic theoretical proposition, the article then takes four significant issues in EU data protection law and shows how analysis of these issues through the perspective of the proposition can lead to novel insights and novel lines of enquiry. These issues include: i) the values served by the right to data protection; ii) norm creation in Data Protection Impact Assessments; iii) the legal status of guidance from the European Data Protection Board; and iv) the relationship between EU data protection law and medical research ethics. The article concludes with a consideration of certain significant objections which might be put forward against the concepts and propositions offered. Keywords: theory, data protection, interface right, complexity, uncertainty
{"title":"A Theory of EU Data Protection Law","authors":"D. Hallinan","doi":"10.21552/edpl/2023/3/8","DOIUrl":"https://doi.org/10.21552/edpl/2023/3/8","url":null,"abstract":"This article aims to introduce and describe a concept depicting a specific and novel form of constitutional right, to offer a basic theoretical proposition on – theory of – EU data protection law on the basis of this concept, and to demonstrate the theoretical worth and practical utility of this proposition. In this regard, the article introduces and describes the concept of the interface right – a specific and novel form of constitutional right which essentially functions to mitigate the consequences of uncertainty, brought about by change in social context, for the functionality of a set of substantive constitutional rights, by providing a legal infrastructure which ensures a reflexive relationship between the order of substantive rights and social context. Building on this concept, the article then offers, and demonstrates the theoretical worth of, the following basic theoretical proposition on – theory of – EU data protection law: the right to data protection can be considered as an interface right, and secondary EU data protection law represents the unfolding of this underlying interface right.To demonstrate the practical utility of the basic theoretical proposition, the article then takes four significant issues in EU data protection law and shows how analysis of these issues through the perspective of the proposition can lead to novel insights and novel lines of enquiry. These issues include: i) the values served by the right to data protection; ii) norm creation in Data Protection Impact Assessments; iii) the legal status of guidance from the European Data Protection Board; and iv) the relationship between EU data protection law and medical research ethics. The article concludes with a consideration of certain significant objections which might be put forward against the concepts and propositions offered. Keywords: theory, data protection, interface right, complexity, uncertainty","PeriodicalId":36819,"journal":{"name":"European Data Protection Law Review","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"135710781","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"United Kingdom ∙ The DPDI No.2 Bill - GDPR Revamp or Rule Tinkering?","authors":"L. Roussev","doi":"10.21552/edpl/2023/2/20","DOIUrl":"https://doi.org/10.21552/edpl/2023/2/20","url":null,"abstract":"","PeriodicalId":36819,"journal":{"name":"European Data Protection Law Review","volume":"17 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"80296170","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"European Union ∙ EDPB Decision 1/2023: The Schrems Saga Back on the GDPR’s Enforcement Rails","authors":"L. Mustert","doi":"10.21552/edpl/2023/2/14","DOIUrl":"https://doi.org/10.21552/edpl/2023/2/14","url":null,"abstract":"","PeriodicalId":36819,"journal":{"name":"European Data Protection Law Review","volume":"14 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"82300361","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Austria ∙ Reconciling ‘Pay or Okay’ Models with the GDPR: The Austrian DPA Decision and other Recent Approaches in Europe","authors":"K. Kollmann","doi":"10.21552/edpl/2023/2/15","DOIUrl":"https://doi.org/10.21552/edpl/2023/2/15","url":null,"abstract":"","PeriodicalId":36819,"journal":{"name":"European Data Protection Law Review","volume":"13 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"84390321","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Opinions ∙ The GDPR at Five (and Beyond)","authors":"A. Talus","doi":"10.21552/edpl/2023/3/4","DOIUrl":"https://doi.org/10.21552/edpl/2023/3/4","url":null,"abstract":"","PeriodicalId":36819,"journal":{"name":"European Data Protection Law Review","volume":"59 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"135709167","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
The next decade will see increasing conflict between data privacy laws and international trade law. Governments are already concerned that privacy will be lost amid global data flows and have responded by enacting regulatory measures that might impede modern trade. While the European Union’s findings of ‘adequacy’ offer a potentially trade-friendly solution to cross-border data flows, fewer than a dozen countries have been found adequate. In addition, more than sixty countries have enacted laws where they too evaluate the adequacy of foreign privacy laws. This splintering of data privacy law complicates global trade as more nations review and potentially restrict outbound data flows. New solutions are needed to ensure the benefits of trade while safeguarding privacy. This paper argues that a broad international agreement is needed that sets minimum standards, develops common regulatory language, and creates binding commitments in the context of data privacy and trade law. Keywords: trade law, data protection law, World Trade Organization, adequacy finding, General Agreement on Trade in Services (GATS)
{"title":"Resolving the Conflict Between Trade and Data Protection Law","authors":"P. M. Schwartz, A. Chander","doi":"10.21552/edpl/2023/3/6","DOIUrl":"https://doi.org/10.21552/edpl/2023/3/6","url":null,"abstract":"The next decade will see increasing conflict between data privacy laws and international trade law. Governments are already concerned that privacy will be lost amid global data flows and have responded by enacting regulatory measures that might impede modern trade. While the European Union’s findings of ‘adequacy’ offer a potentially trade-friendly solution to cross-border data flows, fewer than a dozen countries have been found adequate. In addition, more than sixty countries have enacted laws where they too evaluate the adequacy of foreign privacy laws. This splintering of data privacy law complicates global trade as more nations review and potentially restrict outbound data flows. New solutions are needed to ensure the benefits of trade while safeguarding privacy. This paper argues that a broad international agreement is needed that sets minimum standards, develops common regulatory language, and creates binding commitments in the context of data privacy and trade law. Keywords: trade law, data protection law, World Trade Organization, adequacy finding, General Agreement on Trade in Services (GATS)","PeriodicalId":36819,"journal":{"name":"European Data Protection Law Review","volume":"138 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"135710788","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}