GDPR Implementation Series ∙ Germany: Starting Implementation of the GDPR - Brief Overview of the Government Bill for a New Federal Data Protection Act

2017 ◽  
Vol 3 (1) ◽  
pp. 93-97 ◽  
Author(s):  
D. Broy
2003 ◽  
Vol 4 (8) ◽  
pp. 747-757 ◽  
Author(s):  
Jutta Geiger

Private sector companies face a major challenge in ensuring compliance with the many detailed data protection rules that can apply. The compliance burden is further increased if a business enterprise operates in several countries with different data protection rules. This may complicate the exchange of data within the enterprise. The purpose of this article is to plot a path through these rules governing the transfer of personal data abroad.


2021 ◽  
Vol 7 (1) ◽  
Author(s):  
Iwona Karasek-Wojciechowicz

AbstractThis article is an attempt to reconcile the requirements of the EU General Data Protection Regulation (GDPR) and anti-money laundering and combat terrorist financing (AML/CFT) instruments used in permissionless ecosystems based on distributed ledger technology (DLT). Usually, analysis is focused only on one of these regulations. Covering by this research the interplay between both regulations reveals their incoherencies in relation to permissionless DLT. The GDPR requirements force permissionless blockchain communities to use anonymization or, at the very least, strong pseudonymization technologies to ensure compliance of data processing with the GDPR. At the same time, instruments of global AML/CFT policy that are presently being implemented in many countries following the recommendations of the Financial Action Task Force, counteract the anonymity-enhanced technologies built into blockchain protocols. Solutions suggested in this article aim to induce the shaping of permissionless DLT-based networks in ways that at the same time would secure the protection of personal data according to the GDPR rules, while also addressing the money laundering and terrorist financing risks created by transactions in anonymous blockchain spaces or those with strong pseudonyms. Searching for new policy instruments is necessary to ensure that governments do not combat the development of all privacy-blockchains so as to enable a high level of privacy protection and GDPR-compliant data processing. This article indicates two AML/CFT tools which may be helpful for shaping privacy-blockchains that can enable the feasibility of such tools. The first tool is exceptional government access to transactional data written on non-transparent ledgers, obfuscated by advanced anonymization cryptography. The tool should be optional for networks as long as another effective AML/CFT measures are accessible for the intermediaries or for the government in relation to a given network. If these other measures are not available and the network does not grant exceptional access, the regulations should allow governments to combat the development of those networks. Effective tools in that scope should target the value of privacy-cryptocurrency, not its users. Such tools could include, as a tool of last resort, state attacks which would undermine the trust of the community in a specific network.


Author(s):  
Amy O’Hara

IntroductionThe US federal data landscape is evolving through the implementation of the Foundations for Evidence-Based Policymaking Act of 2018 and the 2020 Action Plan of the Federal Data Strategy (FDS). The Act and Plan seek better data governance; making data accessible and useful for the American public, businesses, and researchers; and improving how the government uses data to make decisions and for program oversight. Objectives and ApproachThis paper provides a brief overview of the Evidence Act, describing what has already been implemented and what is forthcoming and how it involves population data linkages. We will also describe the FDS, using the Five Safes framework to categorize its priorities for federal agencies. ResultsWe explain how the Evidence Act established new roles for Chief Data, Evaluation, and Statistical Officials. We describe efforts to set learning agendas and data inventories in agencies. We point to some successes, such as new repositories for tools and metadata, and progress on forming an advisory committee to explore how the US could build a National Secure Data Service. We tie the FDS action plan to these Evidence Act efforts, showing how agencies and communities of practice are expected to develop over time. We focus on the ten actions that involve shared solutions across government that focus on ethics, privacy, tools and standards. Conclusion / ImplicationsThis paper shares updates on US federal data policy that started with the 2016 Commission for Evidence-based Policymaking, up through the current administration’s efforts to leverage data as a strategic asset. We highlight accomplishments, opportunities, and challenges for federal policy, noting how political will and funding ultimately affect progress.


Author(s):  
Agnese Reine-Vītiņa

Mūsdienās tiesības uz privāto dzīvi nepieciešamas ikvienā demokrātiskā sabiedrībā, un šo tiesību iekļaušana konstitūcijā juridiski garantē fiziskas personas rīcības brīvību un vienlaikus arī citu – valsts pamatlikumā noteikto – cilvēka tiesību īstenošanu [5]. Personas datu aizsardzības institūts tika izveidots, izpratnes par tiesību uz personas privātās dzīves neaizskaramību saturu paplašinot 20. gadsimta 70. gados, kad vairāku Eiropas valstu valdības uzsāka informācijas apstrādes projektus, piemēram, tautas skaitīšanu u. c. Informācijas tehnoloģiju attīstība ļāva arvien vairāk informācijas par personām glabāt un apstrādāt elektroniski. Viena no tiesību problēmām bija informācijas vākšana par fizisku personu un tiesību uz privātās dzīves neaizskaramību ievērošana. Lai nodrošinātu privātās dzīves aizsardzību, atsevišķas Eiropas valstis pēc savas iniciatīvas pieņēma likumus par datu aizsardzību. Pirmie likumi par personas datu aizsardzību Eiropā tika pieņemti Vācijas Federatīvajā Republikā, tad Zviedrijā (1973), Norvēģijā (1978) un citur [8, 10]. Ne visas valstis pieņēma likumus par datu aizsardzību vienlaikus, tāpēc Eiropas Padome nolēma izstrādāt konvenciju, lai unificētu datu aizsardzības noteikumus un principus. Nowadays, the right to privacy is indispensable in every democratic society and inclusion of such rights in the constitution, guarantees legally freedom of action of a natural person and, simultaneously, implementation of other human rights established in the fundamental law of the state. The institute of personal data protection was established by expanding the understanding of the content of the right to privacy in the 70’s of the 19th century, when the government of several European countries initiated information processing projects, such as population census etc. For the development of information technology, more and more information on persons was kept and processed in electronic form. One of the legal problems was gathering of information on natural persons and the right to privacy. In order to ensure the protection of privacy, separate European countries, on their own initiative, established a law on data protection. The first laws on the protection of personal data in Europe were established in the Federal Republic of Germany, then in Sweden (1973), Norway (1978) and elsewhere. Not all countries adopted laws on data protection at the same time, so the Council of Europe decided to elaborate a convention to unify data protection rules and principles.


2021 ◽  
Vol 14 (2) ◽  
pp. 139-148
Author(s):  
Mriya Afifah Furqania ◽  
Tomy Michael

This study aims to analyze the Indonesian laws and regulations concerning the protection of intimate video makers. The research was conducted by analyzing the Pornography Law, the Information and Electronic Transaction Law, the Government Regulation on the Implementation of Electronic Transaction Systems, and the Regulation of the Minister of Information Communication on Personal Data Protection. This research found that data/documents that are made for oneself and for their own interests which are not prohibited by law and included to one of the privacy rights that must be protected by every human being and by the state. The making of this intimate video is included in the privacy rights to enjoy life and should not be contested. Activities contained in the video can range from holding hands, hugging, kissing to having sex with consent. Therefore, if there are those who oppose rights such as acquisition and distribution without consent, the owner of the personal data can file a lawsuit for damages and have a right to erase their electronic documents.Keywords: intimate video; protection; sexual lawAbstrakPenelitian ini bertujuan untuk menganalisis peraturan perundang-undangan Indonesia yang memuat tentang perlindungan terhadap pembuat video mesra. Penelitian dilakukan dengan menganalisis Undang-Undang Pornografi, Undang-Undang Informasi dan Transaksi Elektronik, Peraturan Pemerintah tentang Penyelenggaraan Sistem Transaksi Elektronik serta Peraturan Menteri Komunikasi dan Informasi tentang Perlindungan Data Pribadi. Penelitian ini menemukan bahwa data/dokumen yang dibuat untuk diri sendiri dan kepentingan sendiri bukanlah hal yang dilarang oleh undang-undang dan justru harus dilindungi baik oleh tiap manusia maupun negara. Pembuatan video mesra ini termasuk dalam hak pribadi untuk menikmati hidup dan tidak boleh diganggu gugat. Aktivitas yang termuat dalam video tersebut bisa dari bergandengan tangan, berpelukan, berciuman hingga berhubungan badan yang dilakukan atas persetujuan. Oleh sebab itu jika terdapat pelanggaran terhadap hak seperti perolehan dan penyebarluasan tanpa persetujuan, pemilik data pribadi dapat mengajukan gugatan kerugian dan mengajukan permohonan untuk menghapus data tersebut.


2021 ◽  
Vol 4 (1) ◽  
pp. 25-37
Author(s):  
Zaid Zaid

This article aims to determine the role and responsibility of the government in protecting personal data of all individuals, studied through normative research methods with a statutory and conceptual approach. The results of this study ultimately outlines what must be done by the government by forming law on personal data protection which guarantees its determination, implementation and supervision, forming its Sector Supervisory and Regulatory Agency, forming the Attorney General's Office to prepare a court that is responsive in handling personal data privacy violations.


Jurnal Hukum ◽  
2021 ◽  
Vol 37 (1) ◽  
pp. 1
Author(s):  
Giosita Kumalaratri ◽  
Yunanto Yunanto

The development of information technology in the era of globalization makes it easier for people to carry out their daily activities, apart from socializing, it can also be a channel for work. Behind the simplicity coveted by technological developments opens up loopholes related to personal data that is easily misused. Indonesia does not yet have specific laws governing the protection of personal data as a whole. So that the author will examine the urgency of the draft personal data law in Indonesia, personal data protection schemes, to the impact of the implementation of the personal data protection bill. This study uses a normative juridical research method. The results of the study point to a privacy rights protection scheme in which everyone has the right to publish personal data or the right not to publish personal data to the public. The weakness of personal data protection regulations in Indonesia that have not been specifically regulated increases the potential for crimes against the right to privacy, but the drafting of the Personal Data Protection Bill brings fresh air not only to the public but to the government sector to the international business environment.


Sign in / Sign up

Export Citation Format

Share Document