The sharing of genomic data across international borders presents significant privacy law challenges.Secured computed environments on smartphones allow the storing and processing of sensitive data without the underlying data being shared with processors.A novel technology, described here, to process genomic data within a secured computing environment seems to comport with EU and US privacy laws, despite their differing aims and rules.This technology suggests there may be technological solutions to privacy law fragmentation across jurisdictions, so long as data subjects socially trust the technology and have control over their data.
{"title":"A Sociotechnical Approach to Genomic Data Privacy: A Comparative Analysis.","authors":"Jacob S Sherkow","doi":"10.1093/idpl/ipaf018","DOIUrl":"10.1093/idpl/ipaf018","url":null,"abstract":"<p><p>The sharing of genomic data across international borders presents significant privacy law challenges.Secured computed environments on smartphones allow the storing and processing of sensitive data without the underlying data being shared with processors.A novel technology, described here, to process genomic data within a secured computing environment seems to comport with EU and US privacy laws, despite their differing aims and rules.This technology suggests there may be technological solutions to privacy law fragmentation across jurisdictions, so long as data subjects socially trust the technology and have control over their data.</p>","PeriodicalId":51749,"journal":{"name":"International Data Privacy Law","volume":" ","pages":""},"PeriodicalIF":1.9,"publicationDate":"2025-10-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC12573770/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"145432974","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"社会学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2024-12-18eCollection Date: 2024-11-01DOI: 10.1093/idpl/ipae017
Khaled El Emam, Anita Fineberg, Elizabeth Jonker, Lisa Pilgram
{"title":"Perspectives of Canadian privacy regulators on anonymization practices and anonymized information: a qualitative study.","authors":"Khaled El Emam, Anita Fineberg, Elizabeth Jonker, Lisa Pilgram","doi":"10.1093/idpl/ipae017","DOIUrl":"https://doi.org/10.1093/idpl/ipae017","url":null,"abstract":"","PeriodicalId":51749,"journal":{"name":"International Data Privacy Law","volume":"14 4","pages":"391-403"},"PeriodicalIF":2.6,"publicationDate":"2024-12-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC11970032/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"143796927","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"社会学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Transferring personal data to international organizations under the GDPR: an analysis of the transfer mechanisms","authors":"Massimo Marelli","doi":"10.1093/idpl/ipad022","DOIUrl":"https://doi.org/10.1093/idpl/ipad022","url":null,"abstract":"","PeriodicalId":51749,"journal":{"name":"International Data Privacy Law","volume":"27 19","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-11-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"135086766","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"社会学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Abstract • Cloud computing is a well-established and flourishing phenomenon, whose key activity on personal data is the storage thereof. This study analyses the allocation of the controller–processor roles under the General Data Protection Regulation (GDPR) to the cloud computing actors in the context of the storage of personal data. It examines the current controller–processor model and suggests a joint controllership interpretation to the EU regulators, as a more appropriate allocation of roles in the context of cloud computing. • We argue that the prevailing controller–processor interpretation stems from the current primacy of the purpose criterion, as well as the recognition of consent as a criterion to allocate controllership. This article suggests that cloud providers control some of the essential means of the storage of personal data, thereby shifting part of the control from cloud customers to cloud providers. • If the joint controllership approach was to be followed by the EU regulators, this article argues that it would better reflect the economic and technical reality, and provide a more appropriate responsibility and liability framework for cloud providers and customers, which in turn would enhance the level of protection that data subjects should benefit from under the GDPR.
{"title":"Re-thinking the allocation of roles under the GDPR in the context of cloud computing","authors":"Cyril Fischer","doi":"10.1093/idpl/ipad023","DOIUrl":"https://doi.org/10.1093/idpl/ipad023","url":null,"abstract":"Abstract • Cloud computing is a well-established and flourishing phenomenon, whose key activity on personal data is the storage thereof. This study analyses the allocation of the controller–processor roles under the General Data Protection Regulation (GDPR) to the cloud computing actors in the context of the storage of personal data. It examines the current controller–processor model and suggests a joint controllership interpretation to the EU regulators, as a more appropriate allocation of roles in the context of cloud computing. • We argue that the prevailing controller–processor interpretation stems from the current primacy of the purpose criterion, as well as the recognition of consent as a criterion to allocate controllership. This article suggests that cloud providers control some of the essential means of the storage of personal data, thereby shifting part of the control from cloud customers to cloud providers. • If the joint controllership approach was to be followed by the EU regulators, this article argues that it would better reflect the economic and technical reality, and provide a more appropriate responsibility and liability framework for cloud providers and customers, which in turn would enhance the level of protection that data subjects should benefit from under the GDPR.","PeriodicalId":51749,"journal":{"name":"International Data Privacy Law","volume":"29 11","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-11-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"135430044","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"社会学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"The interplay between machine learning and data minimization under the GDPR: the case of Google’s topics API","authors":"Cornelius Witt, Jan De Bruyne","doi":"10.1093/idpl/ipad020","DOIUrl":"https://doi.org/10.1093/idpl/ipad020","url":null,"abstract":"","PeriodicalId":51749,"journal":{"name":"International Data Privacy Law","volume":"62 4","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-10-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"136318184","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"社会学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Code as personal data: implications for data protection law and regulation of algorithms","authors":"Nadezhda Purtova, Ronald Leenes","doi":"10.1093/idpl/ipad019","DOIUrl":"https://doi.org/10.1093/idpl/ipad019","url":null,"abstract":"","PeriodicalId":51749,"journal":{"name":"International Data Privacy Law","volume":"48 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-10-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"136013047","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"社会学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Simple and advanced reflexivity in GDPR enforcement: empirical evidence from DPA activity","authors":"Maciej Pichlak, Klaudia Gaczoł","doi":"10.1093/idpl/ipad018","DOIUrl":"https://doi.org/10.1093/idpl/ipad018","url":null,"abstract":"","PeriodicalId":51749,"journal":{"name":"International Data Privacy Law","volume":"36 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-09-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"136376026","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"社会学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Theory and practice: the protection of children’s personal information in China","authors":"Lu Zhang, Konrad Kollnig","doi":"10.1093/idpl/ipad017","DOIUrl":"https://doi.org/10.1093/idpl/ipad017","url":null,"abstract":"","PeriodicalId":51749,"journal":{"name":"International Data Privacy Law","volume":"23 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134997460","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"社会学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Adnan Trakic, Ridoan Karim, Hanifah Haydar Ali Tajuddin
{"title":"It is time to recognize the tort of invasion of privacy in Malaysia","authors":"Adnan Trakic, Ridoan Karim, Hanifah Haydar Ali Tajuddin","doi":"10.1093/idpl/ipad016","DOIUrl":"https://doi.org/10.1093/idpl/ipad016","url":null,"abstract":"","PeriodicalId":51749,"journal":{"name":"International Data Privacy Law","volume":"87 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-08-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"135236203","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"社会学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"The one-stop-shop and the European Data Protection Board’s role in combatting data supervision forum shopping","authors":"Diogo Matos Brandão","doi":"10.1093/idpl/ipad014","DOIUrl":"https://doi.org/10.1093/idpl/ipad014","url":null,"abstract":"","PeriodicalId":51749,"journal":{"name":"International Data Privacy Law","volume":"95 1","pages":""},"PeriodicalIF":2.1,"publicationDate":"2023-08-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"76597288","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"社会学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}