Article 5 Principles relating to processing of personal data

Author(s):  
Cécile de Terwangne

Article 6(1) (Lawfulness of processing) (see too recitals 40–49); Article 6(4) (Exceptions to the requirement of compatible purposes for further processing and criteria to ascertain whether a purpose of further processing is compatible with the purpose for which the personal data are initially collected) (see too recital 50); Article 12 (Transparent information) (see too recitals 58–59); Articles 13–15 (Information and access to personal data) (see also recitals 60–64); Article 24 (Responsibility of the controller) (see too recitals 74–78) ; Article 32 (Security of processing) (see too recital 83); Article 89(1) (Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes) (see too recitals 158–163).

Author(s):  
Cécile de Terwangne

Article 5(d) (Principles relating to processing of personal data—accuracy) (see too recital 39); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject) (see too recital 59); Article 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing); Article 23 (Restrictions) (see too recital 73); Article 89 (Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes) (see too recital 156).


Author(s):  
Lee A. Bygrave

Article 4(5) (Definition of ‘pseudonymisation’) (see too recital 28); Article 5(2) (Accountability) (see too recital 11); Article 6(4)(e) (Compatibility); Article 22 (Automated individual decision-making, including profiling) (see too recital 71); Article 24 (Responsibility of controllers); Article 28 (Processors) (see too recital 81); Article 32 (Security of processing) (see too recital 83); Article 34(3)(a) (Communication of personal data breach to data subject) (see too recitals 87–88); Article 35 (Data protection impact assessment) (see too recital 84); Article 40 (Codes of conduct); Article 83(2)(d) and 83(4) (Fines); Article 89(1) (Safeguards relating to processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes).


Author(s):  
Christian Wiese Svanberg

Article 4 (Definitions) (see too recital 26); Article 5 (Principles relating to processing of personal data); Article 6 (Lawfulness of processing) (see too recital 50); Article 9 (Processing of special categories of personal data) (see too recitals 52–53).


Author(s):  
Jef Ausloos

This chapter zooms in on Article 17 GDPR, on the right to erasure (‘right to be forgotten’). It meticulously dissects the three paragraphs of this provision. The first paragraph lists six rights-to-erasure triggers which can be summarized as: (a) purpose expiration; (b) withdrawal of consent; (c) right to object; (d) unlawful processing; (e) legal obligation; and (f) withdrawal of consent by minors in the online environment. The second paragraph comprises an odd extension of the right to erasure, enabling data subjects to request that controllers who have made the personal data public, communicate potential erasure to anyone else processing that same personal data. The third paragraph lists five exemptions to the right to erasure, summarized as: (a) freedom of expression and information; (b) legal obligation or task carried out in the public interest or official authority; (c) public interest in the area of public health; (d) public interest archiving, scientific and historical research, or statistical purposes; and (e) legal claims. What becomes clear right away is how both the right-to-erasure’s triggers and exemptions all refer to other legal provisions in and outside the GDPR. As such, the right to erasure can be seen as a central hub in the GDPR, bringing together key data protection principles from the perspective of data subject empowerment.


Author(s):  
Gloria González Fuster

Article 4(9) (Definition of ‘recipient’); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject); Article 16 (Right to rectification), Article 17(1) (Right to erasure (‘right to be forgotten’)); Article 18 (Right to restriction of processing); Article 58(2)(g) (Powers of supervisory authorities); Article 89(3) (Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes).


Author(s):  
Gloria González Fuster

Article 4(3) (Definition of ‘restriction of processing’); Article 5(1)(d) (Principle of accuracy); Article 16 (Right to rectification); Article 5(1)(a) (Principle of lawfulness); Article 17(1)(d) (Right to erasure based on unlawful processing); Article 5(1)(c) (Principle of data minimisation); Article 17(3)(e) (Limitations to the right to erasure); Article 19 (Notification obligation); Article 21 (Right to object); Article 89 (Derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes); Article 58(1)(g) (Powers of supervisory authorities).


Author(s):  
Ana Nordberg

AbstractBiobanks are essential infrastructures in current health and biomedical research. Advanced scientific research increasingly relies on processing and correlating large amounts of genetic, clinical and behavioural data. These data are particularly sensitive in nature and the risk of privacy invasion and misuse is high. The EU General Data Protection Regulation (GDPR) developed and increased harmonisation, resulting in a framework in which the specific duties and obligations of entities processing personal data—controllers and processors—were defined. Biobanks, in the exercise of their functions, assume the role of controllers and/or processors and as such need to comply with a number of complex rules. This chapter analyses these rules in the light of Article 89 GDPR, which creates safeguards and derogations relating to ‘processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes’. It identifies key compliance challenges faced by biobanks as data controllers and processors, such as determining whether the GDPR is applicable and its intersection with other regulations; when a biobank should be considered controller and processor; and what are the main duties of biobanks as data controllers and processors and options for compliance.


2019 ◽  
Vol 1 (2) ◽  
Author(s):  
Laura Garbini Both ◽  
André Rodrigues Meneses

<p>O presente trabalho objetiva analisar a atuação, legalidade e eficiência das organizações sociais. Uma vez que, esta tem sido motivo de intensos questionamentos, por parte daqueles que não enxergam benefícios na criação de um terceiro setor econômico. Há quem defenda que, é dever exclusivo do poder público, executar e fiscalizar os serviços sociais. A contrário senso há quem defenda uma publicização dos serviços que não são executados apenas pelo poder estatal, mas também pelo setor privado. Sendo assim, porque contrariar uma parceria publico-privada que só objetiva trazer benefícios para a população brasileira?</p><p>No decorrer deste estudo, será respondido tal questionamento, por meio de reflexões acerca das discussões e alegações de inconstitucionalidade da lei 9.637/98, de parte da lei de licitações ─ 8.666/93. Bem como, da suposta violação dos seguintes preceitos constitucionais: artigo 5ª, XVII e XVIII; artigo 22, XXVII; artigo 23; artigo 37, II, X e XXI; artigo 40, caput e § 4º; artigos 70, 71 e 74; artigo 129; artigo 169; artigo 175; artigo 196; artigo 197; artigo 199, § 1º; artigo 205; artigo 206; artigo 208; artigo 209; artigo 215; artigo 216, § 1º; artigo 218 e artigo 225. Onde será comprovado por meio de dados percentuais a eficiência e os benefícios advindos da sua criação.</p><p> </p><p> </p><p> </p><p>This paper aims to analyze the performance, legality and efficiency of social organizations. Since this has been the subject of intense questions from those who do not see benefits in the creation of a third economic sector. There are those who argue that it is the exclusive responsibility of the public authorities to execute and supervise social services. On the contrary, there are those who advocate an advertisement of services that are not only carried out by state power, but also by the private sector. So, why oppose a public-private partnership that only aims to bring benefits to the Brazilian population?</p><p>In the course of this study, this question will be answered, through reflections on the discussions and allegations of unconstitutionality of Law 9.637 / 98, part of the law of bidding - 8.666 / 93. As well as the alleged violation of the following constitutional precepts: Article 5, XVII and XVIII; article 22, XXVII; Article 23; Article 37, II, X and XXI; article 40, caput and paragraph 4; Articles 70, 71 and 74; article 129; Article 169; article 175; Article 196; article 197; article 199, paragraph 1; Article 205; Article 206; article 208; Article 209; Article 215; article 216, paragraph 1; article 218 and article 225. Where will be proven by means of percentage data the efficiency and the benefits coming from its creation.mptions that justify the use of them with greater efficiency in the achievement of the public interest.</p>


2015 ◽  
pp. 1638-1652
Author(s):  
Panagiotis Kitsos ◽  
Aikaterini Yannoukakou

The events of 9/11 along with the bombarding in Madrid and London forced governments to resort to new structures of privacy safeguarding and electronic surveillance under the common denominator of terrorism and transnational crime fighting. Legislation as US PATRIOT Act and EU Data Retention Directive altered fundamentally the collection, processing and sharing methods of personal data, while it granted increased powers to police and law enforcement authorities concerning their jurisdiction in obtaining and processing personal information to an excessive degree. As an aftermath of the resulted opacity and the public outcry, a shift is recorded during the last years towards a more open governance by the implementation of open data and cloud computing practices in order to enhance transparency and accountability from the side of governments, restore the trust between the State and the citizens, and amplify the citizens' participation to the decision-making procedures. However, privacy and personal data protection are major issues in all occasions and, thus, must be safeguarded without sacrificing national security and public interest on one hand, but without crossing the thin line between protection and infringement on the other. Where this delicate balance stands, is the focal point of this paper trying to demonstrate that it is better to be cautious with open practices than hostage of clandestine practices.


2020 ◽  
Vol 30 (Supplement_5) ◽  
Author(s):  
M Mirchev ◽  
A Kerekovska

Abstract Background Health data is the key link between the prospects we face in improving health services and the context of current information reality. In the field of public health, the sheer scale of data collecting, digitalization and use is already raising questions related to the ethical norms among different stakeholders. The fact that it is personal data at stake, confronts at least two views: the individual versus the public interest. The more we ease the process of health data aggregation and use, the more risks of possible harms we face. So, whose interest is a priority? Aim To consider if it is possible to balance the conflicting interests of individuals and society in the digital health era by advocating for mutual compromises and rational argumentation. Methods Ethical, documental and historical research. Results The amount of digital health related personal data transforms both opportunities for improved healthcare and research, and possible uncertainties related to improper use, harms, abuses, injustice. This nourishes individuals' doubts and potentially restricts the public interest by putting limits on future use of data. A balance between the confronting interests is needed. Granting ownership rights over data requires entirely new legal frame, since property rights hardly encompass the unique nature of information. Moreover, data is a valuable artefact, and ownership could provoke further commercialization. On the other hand, it is virtually impossible to put a separating line between commercial and ideal use of health data for care improvements and science. Our focus should be on the ideal use and essentially on insuring individual's privacy and confidentiality, but not at the expense of public benefits and scientific progress. Conclusions Health information is a powerful tool, and its utilization suggests compromises, which are possible if rational argumentation and support is provided to individuals with the aim to overcome the existing discrepancies. Key messages The appearance of digital health fully represents the dynamic information reality in which constructing a balance between different stakeholder’s interests is vital and not impossible to achieve. Healthcare prospects depend on our individual responsibility and willing to share as we have the data and the means to use and secure it, and we have the duty to do it.


Sign in / Sign up

Export Citation Format

Share Document