scholarly journals The State Archives of the Republic of Macedonia: Use of Archival Material and Data Protection Pursuant to the Law on Personal Data Protection and the General Data Protection Regulation

Atlanti ◽  
2018 ◽  
Vol 28 (2) ◽  
pp. 91-98
Author(s):  
Svetlana Usprcova

The aim of this paper is to explain the position of the State Archives of the Republic of Macedonia as guardian of the archival material, which is a subject of use for scientific, academic, administrative, public, publishing, exhibition and other purposes. In the process of use of the archival material, the archivists must be very careful in order to protect confidential, sensitive, legal and other information contained in the archival material, and take some measures in relation to the personal data protection. Herein, the author, also talks about the current Law on personal data protection and the harmonisation of the national law with the European legislation.

2021 ◽  
Vol 12 (1) ◽  
pp. 261-268
Author(s):  
Angel Manchev ◽  

The protection of personal data is one of the core values of modern European societies. This protection is provided by the law of the European Union and by the national legislations of the Member States, to which the Republic of Bulgaria also belongs. As of May 25, 2018, the protection of personal data is being expanded and updated in response to technological progress and the increasingly accelerated data exchange. The reason for this is the entry into force of Regulation (EU ) 2016/679 (General Data Protection Regulation, GDPR) and the changes in our national law that it imposes. In the sense of what has been said so far, the issues of personal data protection in children’s institutions are especially relevant, because these organizations actively handle personal data at any level of children, parents, teachers and staff. In this article, we will try to give short answers to some of the most important questions regarding personal data and the rules for their protection, according to European and Bulgarian legislation.


Atlanti ◽  
2016 ◽  
Vol 26 (2) ◽  
pp. 269-275
Author(s):  
Svetlana Usprcova

This paper is about the use of public archives in the State Archives of the Republic of Macedonia, with particular emphasis on publishing as one of the forms through which archival material is presented and distributed to the public. One of the roles of the State Archives of the Republic of Macedonia is to be a public service and should provide transparency and access to archival material stored in its repositories, which is largely achieved through the publication of collections of documents and monographs and is in accordance with existing legislation of the Republic of Macedonia, as well as with the laws of the State Archives.


Wajah Hukum ◽  
2020 ◽  
Vol 4 (1) ◽  
pp. 1
Author(s):  
Wahyu Beny Mukti Setiyawan ◽  
Hafid Zakariya ◽  
Delia Wahtikasari

The concept of a welfare state is the basis for the position and function of government (bestuurfunctie) in modern countries. The application of the law that is obeyed and followed will lead to law and order which maximize the potential of the community. Furthermore, in accordance with the objectives of the state set out in the fourth paragraph of the opening of the 1945 Constitution of the Republic of Indonesia that one of the objectives of the state is to protect the entire Indonesian nation and to advance the general welfare. By the establishment of the country’s goals in the fourth paragraph of the 1945 Constitution of the Republic of Indonesia, the answer is that in fact Indonesia has tried to create a welfare state. The main key in the welfare state is regarding the guarantee of people’s welfare given by the State. Basically, the regulation concerning the right to privacy of personal data is a manifestation of the recognition and protection of basic human rights. Therefore, the drafting of the Personal Data Protection Bill has a strong philosophical foundation and can be accounted for. Decision of the Constitutional Court Number 006 / PUU-I / 2003 further emphasized that the regulation of Personal Data Protection must be in the form of a law. In the Constitutional Court Decision, among others, it was stated that the provisions concerning human rights must be in the form of laws. As a form of the state present to protect as well as the welfare of its people, the government as the highest authority as well as those who run the government is obliged to carry out efforts that are felt needed. One way that the government can do to answer and minimize the problems faced is by implementing the Advance Data Protection System as a form of protection.


2021 ◽  
Vol 13 (3) ◽  
pp. 66
Author(s):  
Dimitra Georgiou ◽  
Costas Lambrinoudakis

The General Data Protection Regulation (GDPR) harmonizes personal data protection laws across the European Union, affecting all sectors including the healthcare industry. For processing operations that pose a high risk for data subjects, a Data Protection Impact Assessment (DPIA) is mandatory from May 2018. Taking into account the criticality of the process and the importance of its results, for the protection of the patients’ health data, as well as the complexity involved and the lack of past experience in applying such methodologies in healthcare environments, this paper presents the main steps of a DPIA study and provides guidelines on how to carry them out effectively. To this respect, the Privacy Impact Assessment, Commission Nationale de l’Informatique et des Libertés (PIA-CNIL) methodology has been employed, which is also compliant with the privacy impact assessment tasks described in ISO/IEC 29134:2017. The work presented in this paper focuses on the first two steps of the DPIA methodology and more specifically on the identification of the Purposes of Processing and of the data categories involved in each of them, as well as on the evaluation of the organization’s GDPR compliance level and of the gaps (Gap Analysis) that must be filled-in. The main contribution of this work is the identification of the main organizational and legal requirements that must be fulfilled by the health care organization. This research sets the legal grounds for data processing, according to the GDPR and is highly relevant to any processing of personal data, as it helps to structure the process, as well as be aware of data protection issues and the relevant legislation.


2021 ◽  
Author(s):  
Mirna El Ghosh ◽  
Habib Abdulrab

The primary goal of the General Data Protection Regulation (GDPR) is to regulate the rights and duties of citizens and organizations over personal data protection. Implementing the GDPR is recently gaining much importance for legal reasoning and compliance checking purposes. In this work, we aim to capture the basics of GDPR in a well-founded legal domain modular ontology named OPPD (Ontology for the Protection of Personal Data). Ontology-Driven Conceptual Modeling (ODCM), ontology layering, modularization, and reuse processes are applied. These processes aim to support the ontology engineer in overcoming the complexity of the legal knowledge and developing an ontology model faithful to reality. ODCM is used for grounding OPPD in the Unified Foundational Ontology (UFO). Ontology modularization and layering aim to simplify the ontology building process. Ontology reuse focuses on selecting and reusing Conceptual Ontology Patterns (COPs) from UFO and the legal core ontology UFO-L. OPPD intends to overcome the lack of a representation of legal procedures that most ontologies encountered. The potential use of OPPD is proposed to formalize the GDPR rules by combining ontological reasoning and Logic Programming.


Hypertension ◽  
2021 ◽  
Vol 77 (4) ◽  
pp. 1029-1035
Author(s):  
Antonia Vlahou ◽  
Dara Hallinan ◽  
Rolf Apweiler ◽  
Angel Argiles ◽  
Joachim Beige ◽  
...  

The General Data Protection Regulation (GDPR) became binding law in the European Union Member States in 2018, as a step toward harmonizing personal data protection legislation in the European Union. The Regulation governs almost all types of personal data processing, hence, also, those pertaining to biomedical research. The purpose of this article is to highlight the main practical issues related to data and biological sample sharing that biomedical researchers face regularly, and to specify how these are addressed in the context of GDPR, after consulting with ethics/legal experts. We identify areas in which clarifications of the GDPR are needed, particularly those related to consent requirements by study participants. Amendments should target the following: (1) restricting exceptions based on national laws and increasing harmonization, (2) confirming the concept of broad consent, and (3) defining a roadmap for secondary use of data. These changes will be achieved by acknowledged learned societies in the field taking the lead in preparing a document giving guidance for the optimal interpretation of the GDPR, which will be finalized following a period of commenting by a broad multistakeholder audience. In parallel, promoting engagement and education of the public in the relevant issues (such as different consent types or residual risk for re-identification), on both local/national and international levels, is considered critical for advancement. We hope that this article will open this broad discussion involving all major stakeholders, toward optimizing the GDPR and allowing a harmonized transnational research approach.


2020 ◽  
Vol 28 (4) ◽  
pp. 531-553 ◽  
Author(s):  
Aggeliki Tsohou ◽  
Emmanouil Magkos ◽  
Haralambos Mouratidis ◽  
George Chrysoloras ◽  
Luca Piras ◽  
...  

Purpose General data protection regulation (GDPR) entered into force in May 2018 for enhancing personal data protection. Even though GDPR leads toward many advantages for the data subjects it turned out to be a significant challenge. Organizations need to implement long and complex changes to become GDPR compliant. Data subjects are empowered with new rights, which, however, they need to become aware of. GDPR compliance is a challenging matter for the relevant stakeholders calls for a software platform that can support their needs. The aim of data governance for supporting GDPR (DEFeND) EU project is to deliver such a platform. The purpose of this paper is to describe the process, within the DEFeND EU project, for eliciting and analyzing requirements for such a complex platform. Design/methodology/approach The platform needs to satisfy legal and privacy requirements and provide functionalities that data controllers request for supporting GDPR compliance. Further, it needs to satisfy acceptance requirements, for assuring that its users will embrace and use the platform. In this paper, the authors describe the methodology for eliciting and analyzing requirements for such a complex platform, by analyzing data attained by stakeholders from different sectors. Findings The findings provide the process for the DEFeND platform requirements’ elicitation and an indicative sample of those. The authors also describe the implementation of a secondary process for consolidating the elicited requirements into a consistent set of platform requirements. Practical implications The proposed software engineering methodology and data collection tools (i.e. questionnaires) are expected to have a significant impact for software engineers in academia and industry. Social implications It is reported repeatedly that data controllers face difficulties in complying with the GDPR. The study aims to offer mechanisms and tools that can assist organizations to comply with the GDPR, thus, offering a significant boost toward the European personal data protection objectives. Originality/value This is the first paper, according to the best of the authors’ knowledge, to provide software requirements for a GDPR compliance platform, including multiple perspectives.


2021 ◽  
Vol 14 (2) ◽  
pp. 139-148
Author(s):  
Mriya Afifah Furqania ◽  
Tomy Michael

This study aims to analyze the Indonesian laws and regulations concerning the protection of intimate video makers. The research was conducted by analyzing the Pornography Law, the Information and Electronic Transaction Law, the Government Regulation on the Implementation of Electronic Transaction Systems, and the Regulation of the Minister of Information Communication on Personal Data Protection. This research found that data/documents that are made for oneself and for their own interests which are not prohibited by law and included to one of the privacy rights that must be protected by every human being and by the state. The making of this intimate video is included in the privacy rights to enjoy life and should not be contested. Activities contained in the video can range from holding hands, hugging, kissing to having sex with consent. Therefore, if there are those who oppose rights such as acquisition and distribution without consent, the owner of the personal data can file a lawsuit for damages and have a right to erase their electronic documents.Keywords: intimate video; protection; sexual lawAbstrakPenelitian ini bertujuan untuk menganalisis peraturan perundang-undangan Indonesia yang memuat tentang perlindungan terhadap pembuat video mesra. Penelitian dilakukan dengan menganalisis Undang-Undang Pornografi, Undang-Undang Informasi dan Transaksi Elektronik, Peraturan Pemerintah tentang Penyelenggaraan Sistem Transaksi Elektronik serta Peraturan Menteri Komunikasi dan Informasi tentang Perlindungan Data Pribadi. Penelitian ini menemukan bahwa data/dokumen yang dibuat untuk diri sendiri dan kepentingan sendiri bukanlah hal yang dilarang oleh undang-undang dan justru harus dilindungi baik oleh tiap manusia maupun negara. Pembuatan video mesra ini termasuk dalam hak pribadi untuk menikmati hidup dan tidak boleh diganggu gugat. Aktivitas yang termuat dalam video tersebut bisa dari bergandengan tangan, berpelukan, berciuman hingga berhubungan badan yang dilakukan atas persetujuan. Oleh sebab itu jika terdapat pelanggaran terhadap hak seperti perolehan dan penyebarluasan tanpa persetujuan, pemilik data pribadi dapat mengajukan gugatan kerugian dan mengajukan permohonan untuk menghapus data tersebut.


2021 ◽  
Vol 273 ◽  
pp. 08099
Author(s):  
Mikhail Smolenskiy ◽  
Nikolay Levshin

The EU’s General Data Protection Regulation (GDPR) applies not only to the territory of the European Union, but also to all information systems containing data of EU’s citizens around the world. Misusing or carelessly handling personal data bring fines of up to 20 million euros or 4% of the annual turnover of the offending company. This article analyzes the main trends in the global implementation of the GDPR. Authors considered and analyzed results of personal data protection measures in nineteen regions: The USA, Canada, China, France, Germany, India, Kazakhstan, Nigeria, Russia, South Korea and Thailand, as well as the European Union and a handful of other. This allowed identifying a direct pattern between the global tightening of EU’s citizens personal data protection and the fragmentation of the global mediasphere into separate national segments. As a result of the study, the authors conclude that GDPR has finally slowed down the globalization of the online mediasphere, playing a main role in its regional fragmentation.


2020 ◽  
pp. 155-186
Author(s):  
María Dolores Mas Badia

Despite the differences between credit risk and insurance risk, in many countries large insurance companies include credit history amongst the information to be taken into account when assigning consumers to risk pools and deciding whether or not to offer them an auto or homeowner insurance policy, or to determine the premium that they should pay. In this study, I will try to establish some conclusions concerning the requirements and limits that the use of credit history data by insurers in the European Union should be subject to. In order to do this, I shall focus my attention primarily on Regulation (EU) 2016/679. This regulation, that came into force on 24 May 2018, not only forms the backbone of personal data protection in the EU, but is also set to become a model for regulation beyond the borders of the Union. This article will concentrate on two main aspects: the lawful basis for the processing of credit history data by insurers, and the rules that should apply to decisions based solely on automated processing, including profiling.Received: 30 December 2019Accepted: 07 February 2020Published online: 02 April 2020


Sign in / Sign up

Export Citation Format

Share Document