Security and the future of personal data protection in the European Union

2013 ◽  
Vol 23 (4) ◽  
pp. 331-342 ◽  
Author(s):  
Gloria González Fuster
Hypertension ◽  
2021 ◽  
Vol 77 (4) ◽  
pp. 1029-1035
Author(s):  
Antonia Vlahou ◽  
Dara Hallinan ◽  
Rolf Apweiler ◽  
Angel Argiles ◽  
Joachim Beige ◽  
...  

The General Data Protection Regulation (GDPR) became binding law in the European Union Member States in 2018, as a step toward harmonizing personal data protection legislation in the European Union. The Regulation governs almost all types of personal data processing, hence, also, those pertaining to biomedical research. The purpose of this article is to highlight the main practical issues related to data and biological sample sharing that biomedical researchers face regularly, and to specify how these are addressed in the context of GDPR, after consulting with ethics/legal experts. We identify areas in which clarifications of the GDPR are needed, particularly those related to consent requirements by study participants. Amendments should target the following: (1) restricting exceptions based on national laws and increasing harmonization, (2) confirming the concept of broad consent, and (3) defining a roadmap for secondary use of data. These changes will be achieved by acknowledged learned societies in the field taking the lead in preparing a document giving guidance for the optimal interpretation of the GDPR, which will be finalized following a period of commenting by a broad multistakeholder audience. In parallel, promoting engagement and education of the public in the relevant issues (such as different consent types or residual risk for re-identification), on both local/national and international levels, is considered critical for advancement. We hope that this article will open this broad discussion involving all major stakeholders, toward optimizing the GDPR and allowing a harmonized transnational research approach.


2017 ◽  
Vol 17 (1) ◽  
pp. 78-106 ◽  
Author(s):  
David Lowe

In 2016 the European Union (eu) introduced a Passenger Name Record Data (pnr) Directive. There has been controversy in the eu over the acquisition and sharing of pnr data, related mainly to the lack of safeguards and protection of personal data protection. This article examines these issues related to earlier eu pnr agreements with third countries and why previous eu attempts to legislate in this area failed. By drawing a comparison with the 2011 pnr Directive proposal, the article argues that by meeting the strict eu law on data protection as well as being necessary to assist in preventing and detecting acts of terrorism and serious crime it is submitted the 2016 Directive is fit for purpose and able to withstand scrutiny by the Court of Justice of the European Union.


Author(s):  
Rita De Sousa Costa

[PT]No presente texto, apresentamos as grandes linhas de aplicação do direito europeu da protecção de dados conforme gizadas pela jurisprudência do TJUE, com o objectivo de demonstrar como e em que medida este Tribunal modelou – e continua a modelar – o quadro jurídico em vigor, na certeza de que aquela jurisprudência impõe um conjunto de desafios determinantes para a realização material do direito europeu da protecção de dados pessoais. [ESP]Este texto presenta las líneas generales de la aplicación de la legislación europea de protección de datos tal como se establece en la jurisprudencia del TJUE, con el objetivo de demostrar cómo y en qué medida este Tribunal ha configurado -y sigue configurando- el marco jurídico vigente, con la certeza de que la dicha jurisprudencia plantea una serie de retos cruciales para la aplicación material del derecho europeo de la protección de datos personales. [ENG]This text outlines the implementation of the European data protection law as laid down in the case-law of the Court of Justice of the European Union, with the aim of demonstrating how and to what extent the Court has shaped – and continues to shape – the current legal framework. The case-law analysed points out a plethora of challenges which are key to the implementation of the European personal data protection law.


2021 ◽  
Vol 273 ◽  
pp. 08099
Author(s):  
Mikhail Smolenskiy ◽  
Nikolay Levshin

The EU’s General Data Protection Regulation (GDPR) applies not only to the territory of the European Union, but also to all information systems containing data of EU’s citizens around the world. Misusing or carelessly handling personal data bring fines of up to 20 million euros or 4% of the annual turnover of the offending company. This article analyzes the main trends in the global implementation of the GDPR. Authors considered and analyzed results of personal data protection measures in nineteen regions: The USA, Canada, China, France, Germany, India, Kazakhstan, Nigeria, Russia, South Korea and Thailand, as well as the European Union and a handful of other. This allowed identifying a direct pattern between the global tightening of EU’s citizens personal data protection and the fragmentation of the global mediasphere into separate national segments. As a result of the study, the authors conclude that GDPR has finally slowed down the globalization of the online mediasphere, playing a main role in its regional fragmentation.


Law and World ◽  
2021 ◽  
Vol 7 (5) ◽  
pp. 40-46

The work discusses Personal Data Protection system under the European Union law, also Personal Data Protection in Georgia and the compatibility of those two regimes. Moreover, there were men- tioned ways how Georgia can adopt regulations and harmonize its legislation, to be compatible with the European Union Personal Data Protection regime. The work emphasized efforts of Georgia on the path of developing its Personal Data Protection system. The many citizens of Georgia don’t even have a knowledge that their Personal Data has to be defended. Although, the court practice of Georgia revealed good developing signs in this field. If before there were not any cases concerning personal data protection, today we have some good decisions regarding the personal data protection. The data transfer between the European Union and Georgia, is also implemented in the Association Agreement between the European Union and Georgia. Here as well has to be mentioned that the Association Agreement was the greatest step for Georgia, it was the great opportunity to harmonize Georgian Personal Data system with a European. Step by step, Georgia is straining to become a member of the European Union. Thus, this work is a look through past and future of Georgian and EU relations in the field of Personal Data system.


2021 ◽  
Vol 105 (5) ◽  
pp. 45-55
Author(s):  
Mark Entin ◽  
◽  
Dmitriy Galushko ◽  

The article explores the legal consequences of the UK's withdrawal from the European Union. The scope of personal data protection was taken as an example. The purpose of the article is to study and analyze the legal aspects of the termination of the UK's membership in the European Union, its impact on the cross-border transfer of personal data between the parties, as well as the development of legal regulation in this area. The article shows that, despite the signing of the Withdrawal Agreement, as well as the Trade and Cooperation Agreement, there is a complication of legal regulation, as well as the emergence of potential contradictions and threats to the interests of interested parties. The sphere of personal data protection clearly demonstrates that despite the desire for the sovereignization of legal regulation on the part of the UK, its legal system remains dependent on the legal order of the European Union. The UK's national regulation on personal data will be under constant monitoring by the competent EU authorities, which indirectly confirms the failure to achieve the goals of the full return of the UK's delegated sovereign powers. It is concluded that the EU Court of Justice still retains its jurisdiction over the United Kingdom, in particular, in connection with possibility to challenge decisions on adequacy, as well as through the adoption of its own practice on issues related to personal data protection.


2021 ◽  
Vol 5 (1) ◽  
pp. 25
Author(s):  
Indira Despuanitara Batara Randa ◽  
Imam Haryanto

The system of exchanging information on taxpayer data between countries called as AEoI  is follow up action on tax amesty which  provides many benefits for the country but has risks for taxpayers data. Law 9/2017 concerning the AEoI merely governs technical issues and does not regulate regarding taxpayer data protection even if taxpayer data protection is guaranteed in article 28G paragraph (1) of the 1945 Constitution. Personal data in Indonesia is currently not regulated in a specific law. The need for personal data protection arrangements is an urgent matter because personal data stores human dignity, especially in the AEoI system that has data permissions. This paper compares the personal data protection arrangements in the European Union and the regulatory principles applied in Indonesia because it is important for Indonesia to meet European Union standards regarding personal data protection.


2008 ◽  
Vol 12 (1) ◽  
pp. 63-74
Author(s):  
Calin Veghes

Protection of personal data represents a relatively recent concern for all the entities consumers, organizations and public institutions involved in the development of the direct marketing industry and the overall Romanian market. Noteworthy growth of the direct marketing campaigns, increase in the consumer demands and expectations and the background provided by the countrys adhesion to the European Union, have determined a strong necessity to build up a legal framework for protection of the personal data. Important steps have been made when laws no. 677 (on the protection of the personal data in terms of their processing and free circulation - 2001), no. 506 (on the processing of personal data and protection of privacy in the electronic communications sector - 2004) and no. 102 (regarding the setting up, organization and functioning of the National Supervisory Authority for Personal Data Processing - 2005) have been issued. Adoption of the Directive no. 95/46/EC has connected Romanian and European Union legal framework of the personal data protection. Enforcement of the existing legal background has revealed several problems that have affected activities conducted mainly by the direct marketing and marketing research companies. Relatively unclear definition of the content of personal data to be protected appeared to be one of the most important. From this point, at least the following questions should be answered:what is the specific meaning of the personal data? What data is personal and must be protected through dedicated laws and regulations?are public initiatives best ways and public institutions sole entities to handle the development of an effective legal background for the personal data protection?how important is the voice of the consumers in the process of development of a regulatory environment in this area? Should those to be protected represent the main source of initiating and building the related legal framework?An exploratory survey on a sample including 96 Romanian urban consumers aged 18 to 45 has been conducted aiming to provide information on the: importance of the data protection for the consumers, main characteristics of the data protection legal environment (area of protection, public-private, respectively national-international relationships in terms of the data protection, need for national or international laws and regulations), content of the personal data to be protected by a more precisely defined object of the law, consumer preferences regarding the opt-in and opt-out mechanisms, knowledge associated to the legal rights of consumers related to the personal data protection as they are granted through the existing law, major risks associated with the absence or improper personal data protection mechanisms, consumers exposure to the personal communication media, preferences for personal sources of information and perceived importance of personalization as potential factors to be considered for the development of the personal data protection legal framework, opportunity to develop and implement a Robinson list.Results of the survey may serve as a starting point for a future research conducted at the level of a national representative sample and the Romanian experience may be considered for the upcoming effort to develop a legal framework of the personal data protection in the European Union based on the consumers views, needs and expectations.


Sign in / Sign up

Export Citation Format

Share Document