Nomos eLibrary

Filter results

Results (6664)

Sort by:

Select all Select all

Page 1

Hans-Helmuth Gander, Walter Perron, Ralf Poscher, Gisela Riescher, Thomas Würtenberger - Resilienz in der offenen Gesellschaft

No access

Select

Hans-Helmuth Gander (ed.), Walter Perron (ed.), Ralf Poscher (ed.), Gisela Riescher (ed.), Thomas Würtenberger (ed.)

Resilienz in der offenen Gesellschaft

Series: Sicherheit und Gesellschaft. Freiburger Studien des Centre for Security and Society

Volume 1 2012

Results in this title

Jens-Peter Schneider Data protection in European Law (statement) S. 191-195

„… 191 Data protection in European Law Statement on Prof. Slobogin “Is the 4th amendment relevant …” „… data protection. The starting point of data protection in Europe has been the jurisprudence of the …” „… . – Marper, para 100. 192 Art. 8 (2) ECHR that any interference with the data protection rights must be in …”

Sandro Etalle, Daniel Trivellato A posteriori compliance control S. 125-133

„… be able to give with respect to the protection of confidential data. As in real life, detective …” „… Data Protection Compliance. In: Proceedings of the 5th International Conference on Security and …” „… heterogeneous systems and devices connect and exchange data in an ad-hoc and often unpredictable way. In fact …”

Christopher Slobogin Regulation of Government Surveillance Under the United States Constitution S. 149-167

„… good measure, they pay the data collection company Choicepoint for a report on all the information …” „… Amendment’s protections – warrants sworn under oath, particular descriptions of sought-after evidence, and …” „… elaborated on the latter idea by noting that the Fourth Amendment’s protection of people still usually …”

Gerhard J. A. Schneider Some thoughts on harming privacy by protecting critical infrastructures (statement) S. 133-139

„… to defend them appropriately. In the past, fortification was an accepted means of protection which …” „… vulnerable. Data accumulation and privacy Recent examples of the use of new data in Germany include …” „… the backyard. Deutsche Bahn used its vast amount of collected travel data to screen its employees in …”

Bernd Becker, Günter Müller, Ilia Polian Digital Tarnkappe: Stealth Technology for the Internet of Things S. 139-149

„… Müller and Ilia Polian I. Introduction Personal data have significant value. Private enterprises use …” „… these data to identify goods or services which an individual would be willing to buy. The ultimate goal …” „… which would maximize the profit. A second important class of organizations in need of personal data …”

Ralf Poscher Die Zukunft der informationellen Selbstbestimmung als Recht auf Abwehr von Grundrechtsgefährdungen S. 167-191

„… . 191 Data protection in European Law Statement on Prof. Slobogin “Is the 4th amendment relevant in …” „… data protection. The starting point of data protection in Europe has been the jurisprudence of the …” „… using our personal data? Be ready to suffer the consequences, Slate v. 7.4.2011 …”

Klaus Thoma, Tobias Leismann, Daniel Hiller The Concept of Resilience in the Context of Technical Sciences S. 321-341

„… can be questions concerning data protection or the impact of the application of technological …” „… on one side, and the protection of our sacredly held civil liberties? In effect, the ‘cost’ of …” „… already been established in order to improve the protection of German citizens, commodities and …”

Titelei/Inhaltsverzeichnis S. 2-8

„… Grundrechtsgefährdungen 167 Jens-Peter Schneider Data protection in European Law (statement) 191 3. Security Concepts …”

Jean-Pierre Galland A critique of the notion of critical infrastructure S. 301-321

„… Journal of Critical Infrastructure Protection (created in 2008). A quick search on Publish or Perish …” „… with the creation of the President’s Commission on Critical Infrastructure Protection (PCCIP …” „… inter alia a coordination centre within the FBI (known as the National Infrastructure Protection Center …”

Stefan Kaufmann, Sabine Blum Governing (In)Security: The Rise of Resilience S. 233-259

„… prevention or protection against threats. Exploring the concept, resilience may be preliminary defined as …” „… millennium, resilience has risen to the rank of a central paradigm not only for protection against …” „… ’ amount to a thorough restructuring of the realm of civil protection and a resilience-oriented expansion …”

doi.org/10.5771/9783845238098

Reiner Schulze, Dirk Staudenmayer, Sebastian Lohsse - Contracts for the Supply of Digital Content: Regulatory Challenges and Gaps

No access

Select

Reiner Schulze (ed.), Dirk Staudenmayer (ed.), Sebastian Lohsse (ed.)

Contracts for the Supply of Digital Content: Regulatory Challenges and Gaps

2017

Results in this title

Rolf H Weber Data Protection – An Overview S. 169-178

„… Data Protection 171 Data Protection – An Overview Rolf H Weber I. Introduction The creation …” „… data dissemination, tensions can occur with the principles of the data protection regime. So far, the …” „… protection of personal data are not adequately discussed by the regulators. In particular, the new General …”

Rolf H Weber Data Protection in the Termination of Contract S. 189-208

„… Data Protection in the Termination of Contract Rolf H Weber* I. Introduction The intersections …” „… between contract law and data protection law, particularly in the context of the delivery of digital …” „… ability of the concerned party to ensure compliance with its data protection obligations. The …”

Reiner Schulze, Dirk Staudenmayer, Sebastian Lohsse Contracts for the Supply of Digital Content: Regulatory Challenges and Gaps – An Introduction S. 9-30

„… law. VI. Data Protection Law The challenges in achieving legislative coherency are not limited to …” „… protection. Both the proposal and EU data protection law relate to different areas of legislation. Since 1995 …” „… particular the 1995 Data Protection Directive51 sets a fully harmonised and uniform European regime for the …”

Fryderyk Zoll Personal Data as Remuneration in the Proposal for a Directive on Supply of Digital Content S. 179-188

„… of 27 April 2016 on the protection of natural persons with regard to the processing of personal data …” „… right to withdraw the consent has not been explicitly foreseen by the Data Protection Directive4, albeit …” „… Data Protection Regulation (GDPR) there is a clear provision entitling the person to withdraw consent …”

Sebastian AE Martens Contracts for the Supply of Digital Content – Consequential Loss S. 155-168

„… , ‘Augmented reality – a leap into a new world’ (2013) 14 Privacy & Data Protection 7. Sebastian AE Martens …” „… digital content ‘to the extent that [it is] within the control of the user’. Data protection is likely …” „… 1 Flash Eurobarometer 396 ‘Retailers’ attitudes towards cross-border trade and consumer Protection …”

Susana Navas Navarro User-Generated Online Digital Content as a Test for the EU Legislation on Contracts for the Supply of Digital Content S. 229-254

„… the protection of natural persons with regard to the processing of personal data and on the free …” „… movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) [2016] OJ L …” „… internet user as producer is to be considered ‘responsible’ for the purposes of data protection legislation …”

Aurelia Colombi Ciacchi, Esther van Schagen Conformity under the Draft Digital Content Directive: Regulatory Challenges and Gaps S. 99-126

„… the New Measures for their Protection’ (2015) The Italian Law Journal 51; H Zech, ‘Data as a …” „… Fundamental Rights on the protection of personal data, and Arts 2 point 1a, 3(1) and (8), and 6(1) and (5a …” „… ), linking the draft Directive to Regulation 2016/679 on personal data protection, thereby underlining the …”

Martine Behar-Touchais Remedies in the Proposed Digital Content Directive: An Overview S. 127-140

„… the proposed provision.23 ‘Data portability’ as provided in the General Data Protection Regulation24 …” „… contribution by RH Weber, ‘Data Protection in the Termination of Contract’, in this volume. 24 Regulation …” „… )(a) DCD) – if the counter-performance consisted of data, the supplier shall refrain from using these …”

Titelei/Inhaltsverzeichnis S. 1-8

„… Content – Consequential Loss 155 Sebastian AE Martens Data Protection Data Protection – An Overview …” „… on Supply of Digital Content 179 Fryderyk Zoll Data Protection in the Termination of Contract 189 …” „… publication in the Deutsche Nationalbibliografie; detailed bibliographic data are available on the Internet …”

Hugh Beale Conclusion and Performance of Contracts: An Overview S. 31-58

„… digital data should be regulated, and to what effect – in other words, should traders be more widely …” „… Consumer Rights Directive3 (‘CRD’) and by the law governing intellectual property rights in data (eg …” „… of 23 April 2009 on the legal protection of computer programs [2009] OJ L111/16. 5 Directive …”

Piotr Machnikowski Regulation of Damages on National or European Level S. 141-154

„… Contracts for the Supply of Digital Content’, in this volume. Piotr Machnikowski 144 (a) data which is …” „… software, (b) a service allowing the creation, processing or storage of data in digital form, where …” „… such data is provided by the consumer, and (c) a service allowing sharing of and any other …”

Marco Loos Machine-to-Machine Contracting in the Age of the Internet of Things S. 59-82

„… to the Internet of Things, including the liability for data and machine-to-machine contracts, in a …” „… www.europarl.europa.eu/RegData/etud es/BRIE/2015/557012/EPRS_BRI(2015)557012_EN.pdf (accessed 25 January 2017). 7 European …” „… communication between them, and systems and methods for storing and analysing the data acquired by the smart …”

Nikolas Guggenberger The Potential of Blockchain Technology for the Conclusion of Contracts S. 83-98

„… ). 4 See A Badev/M Chen, ‘Bitcoin: Technical Background and Data Analysis’ (2014) Finance and …” „… pseudonymous structures, the energy consumption of proof of work models, sufficient consumer protection and …” „… , Bitcoin Bots, and Consumer Protection’ (2014) 71 Washington and Lee Law Review Online 47. The Potential …”

doi.org/10.5771/9783845281391

Thomas Kahler - Turning Point in Data Protection Law

No access

Select

Thomas Kahler (ed.)

Turning Point in Data Protection Law

2020

Results in this title

Toshihiro Wada Data Protection in Japan S. 145-150

„… Data Protection in Japan by Toshihiro Wada 16 November 2019 The European Commission adopted the …” „… Japanese data protection authority, the Personal Information Protection Commission (PPC), judged that the …” „… transferred between the EU and Japan under a high data protection standard. Moreover, European and Japanese …”

Tobias Jaquemain Liability of private parties for data protection breaches S. 115-120

„… Liability of private parties for data protection breaches Tobias Jaquemain 27 June 2019 The data …” „… data protection. Regulatory mechanisms are only complementary The applicable data protection law is …” „… data protection law provide for legal remedies, liability and sanctions. Two trends can be identified …”

Iheanyi Samuel Nwankwo The “Whitelist” and its Value during a Data Protection Impact Assessment S. 141-144

„… The “Whitelist” and its Value during a Data Protection Impact Assessment by Iheanyi Samuel Nwankwo …” „… 25 October 2019 Background The EU General Data Protection Regulation (GDPR) solidifies the riskbased …” „… approach in data protection through several references that tie the obligation of data controllers to the …”

Lukas Lezzi, Jutta Sonja Oberlin Joint Controllership within a group of entities S. 81-88

„… Data Protection Regulation)3 to answer the question as to whether such cooperation in data processing …” „… /EC (General Data Protection Regulation). 4 Art. 29 Data Protection Working Party, Opinion 1/2010 on …” „… 58. 7 Art. 29 Data Protection Working Party, Opinion 1/2010 on the terms "controller" and "processor …”

Thomas Kahler Turning point S. 11-12

„… data protection. The EU sets a worldwide standard which will generate a broad effect on the global …” „… personal data easily to the Data Protection Agencies (DPA). 'Processing Impect Assessment' which contains a …” „… file complaints against the companies to NGOs of data protection activists. E.g. Max Schrems with his …”

Thomas Kahler Accountability – the gravity centre of GDPR S. 25-30

„… controller.1 This shift has a far-reaching effect on the whole system of data protection principles within …” „… 95/46 the data subject or the DPA (Data Protection Agency) used to be in the position to show whether a …” „… controller infringed data protection law. This principle has now turned into the opposite. The controller has …”

Alexander Golland, Jan-Peter Ohrtmann Video surveillance: The supervisory authorities’ view and recent case law S. 175-178

„… topic in data protection law. On 29 January 2020, the European Data Protection Board (EDPB), the EU body …” „… responsible for harmonising the enforcement of the General Data Protection Regulation (GDPR), published a …” „… EDPB’s views correspond to ECJ case law: the court recently dealt with the data protection requirements …”

Thomas Kahler Ban of Facebook Customs Audience – decision of German DPA upheld S. 45-50

„… data and not on anonymised data. According to German Data Protection Act (BDSG) and Directive 95/46 a …” „… interprets the data transfer to Facebook as ‘processing’ according to German data protection law. ‘Data …” „… the German tradition interpreting data protection law. The German tradition regards the means as to be …”

Author directory S. 187-194

„… stateowned company; Certified Data Protection Officer; Lawyer specialised in IT law (Fachanwalt für IT-Recht …” „… Dr Alexander Golland, Attorney-atlaw and part of PwC Legal’s IP, IT & Data Protection practice group …” „… , where he advises enterprises on data protection law with a special focus on innovative technologies …”

Thomas Kahler The DPO and the messenger of bad news S. 133-136

„… DPO: “The controller ... shall ensure that the data protection officer does not receive any …” „… protection officer. 2 According to Art. 39 (1) (a) and (b) GDPR. 3 EDPB, Guidelines on Data Protection …” „… regard the DPO cooperates with the data protection authorities. On the other hand, the DPO is employee of …”

Thomas Kahler “Fashion ID“: ECJ opens door for class action against Facebook S. 127-132

„… “. But this consequence derives directly from the ratio of European data protection law. Finally, the ECJ …” „… Data Protection of the users.4 The infringement of European Data Protection law is obvious: Could …” „… infringement of data protection law for an individual user is not easy to calculate. GDPR clarifies that …”

Thomas Kahler Microsoft is driving it´s customers into non-compliance S. 75-80

„… , https://www.rijksoverheid.nl/binaries/rijksoverheid/documenten/rapporten/2 018/11/07/data-protection-impact-assessment-op-microsoft-office/DPIA+Microsoft+ Office+2016+and …” „… /2018/11/07/data-protection-impact-assessment-op-microsoft-office/DPIA+ Microsoft+Office+2016+and …” „… vision of data protection does not change. Since the software is now running on the premises of the …”

Alexander Golland Struggling with users’ consent: Economic approach to solve the issue of coupling S. 121-126

„… lurking in the shadows of the former German Federal Data Protection Act. A change is foreseeable with the …” „… General Data Protection Regulation (GDPR): Art. 7 para. 4 GDPR clarifies that the provision of services …” „… suited to the protection of the privacy of data subjects as well as the economic interests of service …”

Jutta Sonja Oberlin Data: The key role in fighting against the Coronavirus pandemic – Opportunities and risks of the contact tracing Apps S. 179-186

„… raise serious privacy and data protection concerns. While these apps are supposed to help limit the …” „… concerning data security and EU fundamental rights, such as privacy and data protection.4 In general, the …” „… Guidance for apps supporting the fight against COVID-19 pandemic in relation to data protection.6 Risk …”

Thomas Kahler The potential outcome of Max Schrems first legal actions against Facebook and Google S. 31-38

„… 06 June 2018 Max Schrems, the Austrian data protection activist, has taken the first legal actions …” „… against Facebook and Google.1 He has raised complaints with four national Data Protection Agencies (DPAs …” „… Art. 56 and 60 GDPR. 4 According to Art. 60 GDPR. 31 the EDPB (European Data Protection Board)5[ will …”

Thomas Kahler GDPR – not fit for corona? S. 171-174

„… are loosing their jobs, hospitals are overloaded and people are dying. Would data protection prevent …” „… would have been reasonable for the Right to Data Protection in case of such a pandemic if we had …” „… Member State law is required. Such a specific law has to weigh the Right to Data Protection against …”

Thomas Kahler In the face – of Facebook S. 93-96

„… infringing European Data Protection Law such as Directive 95/46 and GDPR. Therefore, this consent is legally …” „… inginfringement of European Data Protection Law by Facebook. The Bundeskartellamt clearly states that Facebook is …” „… in Germany and Europe.“ The decision goes back to a statement of the Data Protection Authority of …”

Thomas Kahler ‘Data processing on behalf’ within a group S. 51-54

„… participation or the rules which govern it or the power to have personal data protection rules implemented.”4 2 …” „… have personal data protection rules implemented. An undertaking which controls the processing of …” „… data protection within a group to offer easy and cost-effective ways for the consolidation of …”

Andreas Rohner, Gerald Trieb Junk mail from a dating portal (decision of Austrian DPA) S. 167-170

„… March 2020 The Austrian Data Protection Authority (DPA)1 ruled that the absence of a ”double opt-in …” „… Newsletter 1/2020 of the Austrian Data Protection Authority, p. 4. 167 address. Although the company sent the …” „… Data Protection Act (DSG)4. Under Section 1 (1) DSG everyone has the right to secrecy of personal data …”

Titelei/Inhaltsverzeichnis S. 1-10

„… Turning Point in Data Protection Law Thomas Kahler (ed.) Nomos Two years GDPR on DPOblog.eu …” „… Data Protection Law BUT_Kahler_6909-4.indd 3 30.09.20 11:30 The Deutsche Nationalbibliothek lists …” „… Cataloging-in-Publication Data Kahler, Thomas Turning Point in Data Protection Law Two years GDPR on DPOblog.eu Thomas …”

Thomas Kahler Irish DPC: liability for failure to act against Facebook S. 157-162

„… injured parties.2 1. 1 Irish Data Protection Commissioner. 2 EuGH C-5/94, 23 May 1996, Hedley Lomas, mn …” „… SAUGMANDSGAARD ØE, C-311/18, 19 December 2019, Data Protection Commissioner v Facebook Ireland Limited …” „… to Data Protection from the Irish DPC. The right to compensation of the non-material damage is laid …”

Thomas Kahler Fan pages jointly liable with Facebook – landmark of ECJ S. 39-44

„… Facebook when Facebook is infringing clients data. Facts and procedure The ULD, which is a Data Protection …” „… responsibility, while Facebook was infringing data protection law.6 After the judgment of the ECJ on joint …” „… controller infringes data protection law. Since administrators of fan pages are not compliant with data …”

Thomas Kahler The end of an “old“ consent? Consent faces legal action by Max Schrems and consumer agencies S. 17-20

„… being attacked by data protection activists. The German DPAs13, which are generally regarded as very …” „… WP29, since the WP29 will be transformed into the European Data Protection Board (EDPB), which will …” „… Kahler 07 May 2018 Consent will be a part of the first attacks of data activist Max Schrems under the …”

Peter Hense Google Analytics: Injunctive relief, information requests and damages S. 151-156

„… of protection of the general individual right to privacy also extends to personal data, which …” „… Hense 152 Comments Data protection law does not end with the GDPR The court solves the case at the level …” „… not possible to use Google Analytics in a manner compliant with data protection law without informed …”

Thomas Kahler Internal Audit, DPO and the adjustment of Three-Lines-of-Defense-Modell S. 163-166

„… audit is focussing on data protection. Nevertheless, internal audit has usually no expert knowledge in …” „… data protection and often no experience in auditing the new role of the DPO. This situation bears the …” „… itself bound by GDPR in its activities in data protection. Internal audit is not free to set criteria for …”

Thomas Kahler Google is tracking location of users without consent S. 55-58

„… legitimate interest of Google. But this interest is to be weighed against the Right to Data Protection of the …” „… intentional according to Article 83 (2)(b) GDPR. What is the reaction of the data protection watchdog? The …” „… were forced to act by a data protection activist.4 d. 2. 3 https://www.apnews.com/ef95c6a91eeb4d8e9dda9 …”

Thomas Kahler How to ‘provide’ information (Art. 12 GDPR)? European Court of Justice requires active behavior S. 13-16

„… transformed into the European Data Protection Board. Since 1 ECJ C-375/15, BAWAG PSK Bank vs Verein für …” „… Konsumenteninformation, 25.01.2017, paragraph 48. 13 that date the European Data Protection Board has the competence to …” „… overrule the interpretation of the European Data Protection Board, lies with the ECJ. Hence, the ECJ gave …”

Thomas Kahler Data breach: 72 hours period extended on weekend? S. 109-114

„… ; https://gdpr-info.eu/art-33-gdpr/. 2 § 193 BGB; https://www.gesetze-im-internet.de/bgb/__193.html. 3 Data Protection …” „… GDPR to define the general rules not only on the level of data protection but equally in respect of the …” „… breach commenses as soon as we are notified with it.8 2. 3. 3.1. 4 Euroean Data Protection Board …”

Katarina Barley The “one for all lawsuit” S. 89-92

„… violations affecting a large number of consumers. This scenario is not exactly uncommon. Data protection law …” „… specific social networks or corporations, data protection violations take place on a regular basis. And …” „… any rate, the possibility has not been ruled out. Article 82 of the General Data Protection Regulation …”

Thomas Kahler ‘Do not track’ without consent – as quoted by German regulators S. 21-24

„… DPAs is a binding interpretation of the GDPR for tracking and profiling. 1 Data Protection Agencies. 2 …” „… ECJ Art. 7 Directive 95/46 has a direct effect. As a consequence, any data protection law of a Member …” „… DPAs on cookies. While Germany has been observed to be very strict in terms of data protection, on the …”

Thomas Kahler IT maintenance is ‘Data processing on behalf’ according to German DPAs S. 59-62

„… German Data Protection Act (BDSG) that the provisions of data processing on behalf shall be applied by …” „… Data Protection Board (EDPB) will be required to provide a binding interpretation of the GDPR. Until …” „… IT maintenance is ‘Data processing on behalf’ according to German DPAs Thomas Kahler 1 Octobre 2018 …”

Thomas Kahler Cookies consent S. 67-70

„… to Data Protection Directive 95/46/EC on, How to ask for consent? Data Protection Directive 95/46/EC …” „… the essence of the Rigth to Data Protection. In a similar case the German High Court …” „… ) Freely given, (2) By a clear confirmative action,3 (3) Without being conditional for personal data that …”

Peter Schaar ECHR: Mass surveillance by British secret service violated European Convention on Human Rights S. 63-66

„… action by courts, independent data protection authorities, and parliaments is also crucial. None of this …” „… communication data”, in particular with regard to their verification. The mechanisms used by the GCHQ to obtain …” „… data stored by communications service providers also violate Article 8. Both the regime of mass …”

Thomas Kahler Facebook-hack: stress test for Irish DPC S. 71-74

„… , Facebook has a long history of infringements of data protection law. Most significant was the Cambridge …” „… ? Currently Facebook seems to follow the strategy, to claim against any decision in terms of data protection …” „… hack of 3 million European users personal data to the Irish DPC. The Irish DPC is under pressure to …”

Winfried Bausback “Enforcing the law in the digital era – a key task for Europe”1 S. 105-108

„… General Data Protection Regulation, for example, the general tenor of which is right but which pays too …” „… existential threat to this very society. Looking at the last 12 months alone, data integrity has simply taken …” „… have little or absolutely no confidence in the security of their own data and they hold tech giants …”

Thomas Kahler Consent to privacy policy – 'invalid' S. 101-104

„… – which is the conference of all German Data Protection Authorities – provided a recent statement as a …” „… given by a clear affirmative act establishing a freely given, ... unambiguous indication of the data …” „… subject's agreement to the processing of personal data relating to him or her,...“ The Bundeskartellamt …”

doi.org/10.5771/9783748921561

Matthias Lehmann, Christoph Kumpan - European Financial Services Law

No access

Select

Matthias Lehmann (ed.), Christoph Kumpan (ed.)

European Financial Services Law

Series: Kooperationswerke Beck - Hart – Nomos

Volume 2019

Results in this title

Article 28 Data protection S. 850-851

„… on persons working or having worked for or with a competent authority. Article 28 Data protection …” „… protection of business secrets and confidential information made available to ESMA is essential. Considering …” „… With regard to the processing of personal data within the framework of this Regulation, competent …”

Article 78 Data protection S. 378-379

„… protection The processing of personal data collected in or for the exercise of the supervisory powers …” „… an investment firm, a regulated market or a data reporting services provider the task described in …” „… disclosure of information and shall not involve such persons in liability of any kind. Article 78 Data …”

Article 104 a Data protection S. 1457

„… Article 104 a Data protection 1. Member States shall apply Directive 95/46/EC to the processing of …” „… information exchange in compliance with European data protection law. II. Overview All in all, data …” „… personal data carried out in the Member States pursuant to this Directive. 2. Regulation (EC) No 45/2001 of …”

Article 28 c Exercise of sanctioning powers S. 1222-1223

„… also the financial strength of the infringer or the financial advantage gained. III. Data protection …” „… investigation under the TD is carried out in accordance with the relevant data protection legislation, in …” „… Data Protection Regulation) [2016] OJ L119/1; and Regulation (EC) No 45/2001 of the European Parliament …”

Article 34 Publication of decisions S. 869-874

„… national law where such publication ensures the effective protection of the personal data concerned; (c …” „… competent authority for the period which is necessary in accordance with the applicable data protection …” „… anonymised decision. The phrase “where such publication ensures the effective protection of the personal data …”

Article 29 Publication of decisions S. 1223-1226

„… financial strength of the infringer or the financial advantage gained. III. Data protection Article 28c(2 …” „… is carried out in accordance with the relevant data protection legislation, in particular Regulations …” „… of 27 April 2016 on the protection of natural persons with regard to the processing of personal data …”

Article 104 Information exchange with monetary authorities, clearing houses; legislators S. 1454-1457

„… . Data protection issues are addressed in Art 104 a of UCITSD. First, in the case of bancrupcty or …” „… and Dominik Nast 5 6 7 8 9 10 11 12 Article 104 a Data protection 1. Member States shall apply …” „… seeks to bring the extensive information exchange in compliance with European data protection law. II …”

Article 105 Implementing legislation S. 1457-1458

Articles 32 to 41 S. 937-939

„… December 2000 on the protection of individuals with regard to the processing of personal data by the …” „… ) carry out on-site inspections, (d) require existing telephone and data traffic records, (e) require the …” „… , and with regard to the NCAs’ power to gather sensitive data, Art 34 SSR imposes the obligation of …”

Article 73 Reporting of infringements S. 373-375

„… whistleblowers with at least the features listed in Article 73. Insofar as Article 73 sets out data protection …” „… (point (b)), and adequate data protection for both the person who reports an infringement and the person …” „… communication channels for such reports; (b) appropriate protection for employees of financial institutions who …”

Article 32 Reporting of infringements S. 865-868

„… contract of employment and measures for the protection of personal data. Those implementing acts shall be …” „… obligations of the competent authorities. Inasmuch as Article 32 relates to data protection, it must be read …” „… reports, and Article 32(2)(c) requires adequate protection of data regarding both the reporter and the …”

Article 29 S. 1093-1095

„… national law, if such anonymous publication ensures an effective protection of the personal data concerned …” „… applicable data protection rules. Commentary Article 22 requires Member States to set out rules for …” „… infringements and their follow-up; (b) appropriate protection for employees who report infringements committed …”

Article 99 b Name and shame S. 1444-1445

„… such anonymous publication ensures effective protection of the personal data concerned; or (c) not …” „… applicable data protection rules. Commented below, see → Art 99 d. Article 99 c Factors to be taken into …” „… data of the natural persons is considered by the competent authority to be disproportionate following a …”

Article 27 Professional secrecy S. 849-850

„… persons working or having worked for or with a competent authority. Article 28 Data protection With regard …” „… protection of professional secrecy, also encompassed by Articles 15 and 16 of the CFR, in the exchange of …” „… information. 1. 5 Article 4(1) Protocol No. 7 to the Convention for the Protection of Human Rights and …”

Articles 83 to 91 S. 1679-1680

„… availability of the data on derivatives could be crucial for the implementation of other European provisions …” „… a particular asset class over a certain period of time; and (ii) Benchmark Regulation.1 Data to be …” „… made available by trade repositories Article 81 EMIR indicates the data to be published and made …”

Article 107 S. 618-620

„… 95/46/EC (General Data Protection Regulation) [2016] OJ L 119/1. Title VI Competent authorities and …” „… secret. Prime examples are business secrets and personal data (as defined in Art 4(1) of the General Data …” „… Protection Regulation).3 The confidential information must have been received by an employee or third-party …”

Article 27 Obligation to execute orders on terms most favourable to the client S. 195-202

„… instruments each execution venue makes available to the public, without any charges, data relating to the …” „… determine: (a) the specific content, the format and the periodicity of data relating to the quality of …” „… protection because the obligations mitigate against conflict of interest risk inherent when investment firms …”

Article 99 d Protection of whistleblowers S. 1445-1447

„… applicable data protection rules. Commented below, see → Art 99 d. Article 99 c Factors to be taken into …” „… ; (c) protection of personal data concerning both the person who reports the infringements and the …” „… from its publication. Personal data contained in the publication shall be kept on the official …”

Article 71 Publication of decisions S. 368-371

„… such anonymous publication ensures an effective protection of the personal data concerned; (c) not …” „… period which is necessary in accordance with the applicable data protection rules. Competent authorities …” „… data of the natural persons is considered by the competent authority to be disproportionate following a …”

Index S. 1785-1803

„… protection MAR 29 3 Data publication arrangements – access MiFIR 3 15 Data Reporting Service Providers …” „… pool trading MiFIR Foreword 5, 5 15 – impact of MiFIR Foreword 6 Data processing MAR 29 1 Data …” „… (CTP) MiFID II 63 15 – data security MiFID II 66 23 Index 1787 – market solution MiFID II 63 8 …”

Introduction to MiFID II and MiFIR Matthias Lehmann S. 1-6

„… commodity derivatives; (7) the regulation and supervision of data reporting services providers; (8) the …” „… protection of investors,4 in particular by overcoming information asymmetries. Traders often have crucial …” „… must ensure a minimum of investor protection. This principle is the natural counterpart of open markets …”

Article 72 Exercise of supervisory powers and powers to impose sanctions S. 371-373

„… published, aggregated data on all sanctions imposed, and all published decisions. The reporting obligations …” „… 1 may be confined to data collection and evaluation activities. The right to refer cases to …” „… communication channels for such reports; (b) appropriate protection for employees of financial institutions who …”

Article 23 Powers of competent authorities S. 838-843

„… following supervisory and investigatory powers: (a) to access any document and data in any form, and to …” „… , to enter the premises of natural and legal persons in order to seize documents and data in any form …” „… where a reasonable suspicion exists that documents or data relating to the subject matter of the …”

Article 16 Organisational requirements S. 65-120

„… , minimise the risk of data corruption and unauthorised access and to prevent information leakage maintaining …” „… the confidentiality of the data at all times. 6. An investment firm shall arrange for records to be …” „… , where investment firms safeguard client assets and client funds, specific risks to investor protection …”

Article 29 Disclosure of personal data to third countries S. 851-852

„… Article 29 Disclosure of personal data to third countries 1. The competent authority of a Member …” „… State may transfer personal data to a third country provided the requirements of Directive 95/46/EC are …” „… necessary for the purpose of this Regulation and that the third country does not transfer the data to …”

Titelei/Inhaltsverzeichnis S. I-XLII

„… . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .Article 77 378 Data protection …” „… . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .Article 27 849 Data protection …” „… illustrations, broadcasting, reproduction by photocopying machine or similar means, and storage in data …”

Article 4 Definitions S. 22-34

„… level of protection for third parties’ interests equivalent to that afforded by legal persons; and (b …” „… proprietor, that person must make provision for the protection of investors in the event of the firm’s …” „… bodies of an investment firm, market operator or data reporting services provider, which are appointed in …”

Article 76 Professional secrecy S. 377-378

„… of any kind. Article 78 Data protection The processing of personal data collected in or for the …” „… protection in cases that involve (alleged) violations of MiFIR or of laws transposing MiFID II into national …” „… Parliament and of the Council, performing in an investment firm, a regulated market or a data reporting …”

Article 31 Exercise of supervisory powers and imposition of sanctions S. 863-865

„… , discrimination or other types of unfair treatment at a minimum; and (c) protection of personal data both of the …” „… employment and measures for the protection of personal data. Those implementing acts shall be adopted in …” „… for such reports; (b) within their employment, appropriate protection for persons working under a …”

Article 5 Requirements for credit transfer and direct debit transactions S. 1759-1765

„… Art 5(2) must be consistent with the data protection rules in national law, which transposes the …” „… the payer provides the data elements specified in point (2)(a) of the Annex; (b) the payer’s PSP must …” „… provide the data elements specified in point (2)(b) of the Annex to the payee’s PSP; (c) the payee’s PSP …”

Article 99 c Factors to be taken into account when sanctioning S. 1445

„… applicable data protection rules. Commented below, see → Art 99 d. Article 99 c Factors to be taken into …” „… from its publication. Personal data contained in the publication shall be kept on the official …” „… . Article 99 d Protection of whistleblowers 1. Member States shall establish effective and reliable …”

Article 28 S. 1093

„… infringements and their follow-up; (b) appropriate protection for employees who report infringements committed …” „… ; (c) protection of the identity both of the person who reports the infringements and the natural …” „… , or identity or personal data of natural persons, is considered by the competent authority to be …”

Article 80 Safeguarding and recording S. 1676

„… withdrawn shall ensure orderly substitution including the transfer of data to other trade repositories and …” „… 1. A trade repository shall ensure the confidentiality, integrity and protection of the information …” „… received under Article 9. 2. A trade repository may only use the data it receives under this Regulation for …”

Articles 42 to 48 S. 939-941

„… Regulation (EU) 2016/679, while ESMA has to observe the new Regulation on the protection of …” „… individuals with regard to the processing of personal data by the Union institutions (see Arts 39(1) and 40 …” „… the data to a supervisory authority in a third country is necessary for the purposes of the SSR …”

Article 79 Operational reliability S. 1675-1676

„… that their objective is to control the risk to the data maintained by a trade repository. 8. A trade …” „… substitution including the transfer of data to other trade repositories and the redirection of reporting flows …” „… the confidentiality, integrity and protection of the information received under Article 9. 2. A trade …”

Article 62 Communication between feeder’s and master’s auditors S. 1403-1404

„… restrict the disclosure of information or relate to data protection where such rules are provided for in a …” „… Dominik Nast 1403 1 2 3 UCITSD lifts professional confidentiality and data protection requirements imposed …”

Article 27 S. 1092-1093

„… receipt of reports of actual or potential infringements and their follow-up; (b) appropriate protection …” „… , discrimination and other types of unfair treatment; (c) protection of the identity both of the person who reports …” „… publication of the identity of the legal entities, or identity or personal data of natural persons, is …”

Article 81 Transparency and data availability S. 1676-1678

Article 77 Recognition of trade repositories S. 1673-1675

„… data to a third country. Article 76 Cooperation arrangements Relevant authorities of third countries …” „… , including the protection of business secrets shared by the authorities with third parties. Article 77 …” „… authorities in third countries with trade repositories direct access to the data held in EU trade depositories …”

Article 61 Communication between feeder’s and master’s depositary S. 1401-1403

„… breach of any rules that restrict the disclosure of information or relate to data protection where such …” „… found to be in breach of any rules that restrict the disclosure of information or relate to data …” „… protection where such rules are provided for in a contract or in a law, regulation or administrative …”

Article 77 Relations with auditors S. 378

Chapter 2 Conduct of business rules S. 1637-1643

„… of the costs and level of protection referred to in paragraph 7 associated with each option. The …” „… recorded in another account. 7. CCPs and clearing members shall publicly disclose the levels of protection …” „… a conduct of business regime aiming at enhance the protection of CCP clearing members as defined …”

Article 37 Authorisation of non-EU AIFMs intending to manage EU AIFs and/or market AIFs managed by them in the Union in accordance with Article 39 or 40 S. 1541-1550

„… data protection provisions provided for in the relevant Union legislation. 21. In accordance with …” „… offering the same level of protection to the investors of the relevant AIF; and (c) the non-EU AIFM and/or …” „… offers the same level of protection to the investors of the relevant AIFs and that the AIFM complies with …”

Article 2 Scope S. 1234-1236

„… protections. In terms of content, the CRA Regulation was based on the IOSCO Code of Conduct and some duties it …” „… standard created by the OECD regulations, and the protection provided by the OECD standards was considered …” „… means a measure of credit quality derived from the aggregation and interpretation of data based solely …”

Article 33 Mechanism to avoid duplicative or conflicting rules S. 524-526

„… requirements resulting from Articles 28 and 29; (b) ensure protection of professional secrecy that is …” „… , equivalence requires that the third state provides protections of professional secrecy comparable to that of …” „… sound security mechanisms in place designed to minimise the risk of data corruption and unauthorised …”

Article 1 Scope S. 6-10

„… Directive shall apply to investment firms, market operators, data reporting services providers, and …” „… regulated markets; (d) authorisation and operation of data reporting services providers; and (e) supervision …” „… . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 3. Data reporting service providers …”

Article 99 a Minimum sanctioning S. 1442-1444

„… persons or of the personal data of the natural persons is considered by the competent authority to be …” „… data, or where publication jeopardises the stability of financial markets or an ongoing investigation …” „… which complies with national law, if such anonymous publication ensures effective protection of the …”

Article 67 Hearing of the persons concerned S. 1667

„… investigation and in particular to produce complete records, data, procedures or any other material required and …” „… legitimate interest of other persons in the protection of their business secrets. The right of access to the …” „… disproportionate damage to the parties involved. Such disclosure shall not contain personal data within the meaning …”

Article 66 Periodic penalty payments S. 1667

Article 22 Competent authorities S. 835-838

„… relevant provisions. There are, however, two bona fide exceptions to the rule. The protections offered …” „… data in any form, and to receive or take a copy thereof; (b) to require or demand information from any …” „… subparagraph, to enter the premises of natural and legal persons in order to seize documents and data in any …”

Introduction S. 1563-1574

„… of the data to be reported to trade repositories [2013] OJ L52/1Commission Delegated Regulation (EU …” „… regard to regulatory technical standards specifying the data to be published and made available by trade …” „… repositories and operational standards for aggregating, comparing and accessing the data [2013] OJ L52/33 …”

Introduction S. 941-951

„… Rechtswissenschaften 2015); Easterbrook F and Fischel D, ‘Mandatory Disclosure and the Protection of Investors’ (1984 …” „… rules on the conduct of business, the protection of investors. Moreover, such information provides an …” „… contested using data showing market irrationality and systemic biases which distort rational investor …”

Article 26 Replacement of depositary S. 1363-1364

„… management company and of the depositary and rules to ensure the protection of unit-holders in the event of …” „… ensure the protection of unit-holders in the event of such a replacement. I. General features Purpose …” „… with the overarching objective of investor protection (see the details in Art 22 of Commission …”

Introduction to Articles 39-43 Intro Art. 39-43 S. 538-541

„… fair reasonable and non discriminatory basis to: (i) relevant price and data feeds and information of …” „… Principles on Financial Consumer Protection of 2011 do not yet mention this specific power, but merely trust …” „… /OECD Task Force on Financial Consumer Protection 2013 envisage product intervention powers.4 Yet this …”

Article 68 Disclosure, nature, enforcement and allocation of fines and periodic penalty payments S. 1667-1668

Article 18 S. 590-591

„… private and family life), 8 (protection of personal data) and 47 (right to an effective remedy and to a …” „… may be, temporarily jeopardised or where protection of investors so requires. 2. The competent …” „… when protection of investors so requires. Situations where an NCA may suspend the listing of a security …”

Article 65 Fines S. 1666-1667

„… submit to an investigation and in particular to produce complete records, data, procedures or any other …” „… , subject to the legitimate interest of other persons in the protection of their business secrets. The right …” „… contain personal data within the meaning of Regulation (EC) No 45/2001. Title VI Registration and …”

Article 17 S. 588-590

„… (protection of personal data) and 47 (right to an effective remedy and to a fair trial) of the CFREU.9 Within …” „… the requesting NCA considers appropriate, when the protection of investors and the smooth operation of …” „… where protection of investors so requires. 2. The competent authorities may decide that the listing of …”

Article 26 b Implementing acts S. 1364-1365

„… company) may be replaced in line with the overarching objective of investor protection (see the …” „… meet its obligations and forward those data to its competent authority. Further details are usually …” „… address various forms of insolvency risks stemming results from divergence in the level of protection for …”

Article 48 Systems resilience, circuit breakers and electronic trading S. 268-292

„… markets make available to the competent authority data relating to the order book or give the competent …” „… ) . . . . . . . . . . . . . . . . . . . . . . . 82 XIII. Access to order book data (Art 48(11) MiFID II …” „… and of the Council with regard to regulatory technical standards for the maintenance of relevant data …”

Article 75 Equivalence and international agreements S. 1672-1673

„… professional secrecy exist, including the protection of business secrets shared with third parties by the …” „… apply Regulation (EC) No 45/2001 with regard to the transfer of personal data to a third country …” „… responsibilities and mandates, provided that guarantees of professional secrecy exist, including the protection of …”

Article 28 Obligation to trade on regulated markets, MTFs or OTFs S. 503-511

„… require access to stored information.25 Form and time The data provided must correspond to certain formats …” „… agreement on the form of data is needed.26 The transaction report must be transmitted “as quickly as …” „… data is not spelled out in Art 27 MiFIR. The connection with Art 26 MiFIR implies that the deadline is …”

Article 8 b Information on structured finance instruments S. 1271-1273

„… protection of confidentiality of information sources or the processing of personal data. 3. ESMA shall …” „… . Article 8b(2) CRA Regulation excludes personal, confidential data and information that is specifically …”

Foreword: The new transparency regime under MiFIR S. 389-392

„… all trading data was available in all market places. To remedy that situation, an extensive regime …” „… spectrum of order types and special investor protection techniques.12 Dark pools may be run by operators of …” „… arrangements. The more trading takes place in dark pools, the less trading data can be collected and made …”

Article 26 Provision of services through the medium of another investment firm S. 193-195

„… 54(12) subpara 2 MiFID II Delegated Regulation. 44 ESMA, Q&A on MiFID II and MiFIR investor protection …” „… 3 MiFID II Delegated Regulation. 46 ESMA, Q&A on MiFID II and MiFIR investor protection and …” „… Eddy Wymeersch (eds), Investor protection in Europe: corporate law making, the MiFID and beyond (OUP …”

Chapter 3 Prudential requirements S. 1643-1653

„… operators of securities settlement systems that ensure the full protection of those financial instruments …” „… protection. A CCP shall have prompt access to the financial instruments when required. 6. A CCP shall not …” „… on data covering at least the most recent 12 months;34 the minimum requirement for the liquidation …”

Article 17 Algorithmic trading S. 120-134

„… investor protection measures. Implementing legislation The Commission has exercised its implementing powers …” „… . Recital 64 MiFID); investor protection is not the focus of regulatory activity. The same concern justifies …” „… for trading and the data on trading orders, or their cancellations, must be held on record by the …”

Article 5 Exemption for buy-back programmes and stabilisation S. 661-670

„… authorities of any failure to comply with the reference data regime and, if the submissions are complete and …” „… , including the information set out in Art 4(3).14 While the first step of the reference data collection and …” „… ESMA (as well as the collection of the corresponding MiFIR reference and trading data). To this end …”

Article 1 Subject matter S. 1231-1234

„… Data Mining Researchers’, HPL-2003-4: http://www.hpl.hp.com/techreports/2003/HPL-2003-4.pdf (15.6.2018 …” „… a high level of consumer and investor protection. It lays down conditions for the issuing of credit …” „… and investor protection. This Regulation also lays down obligations for issuers, originators and …”

Article 26 a Information exchange with and among national competent authorities of depositary, UCITS and management company S. 1364

Article 76 Cooperation arrangements S. 1673

Article 7 Minimum information S. 987-990

„… auditors’ and ‘should not be confused with the disclosure of known trends or other factual data with …” „… information in a prospectus. The choice of the regulator is understandable; investors need protection …” „… comparable. Historical data, indeed, are cheap to verify 4 As defined under the 2004 Prospectus Regulation …”

Article 12 Penalties S. 1611

„… data within the meaning of Article 2(a) of Directive 95/46/EC. By 17 February 2013, the Member States …” „… 4, 9, 10 and 11; (b) ensure protection of professional secrecy that is equivalent to that set out in …”

Article 47 Equivalence decision S. 566-571

„… investment services within the Union delivers the appropriate level of investor protection. 4. A …” „… comparable level of protection across the EU/EEA (cf. Recital 40 MiFIR). For establishing equivalence, the …” „… into account the goals of promoting the internal market for financial services and the protection of …”

Article 48 Register S. 571-572

„… level of investor protection. It is noteworthy that cooperation agreements concluded by Member State …” „… See Art 46 MiFIR. II. Commentary The pan-European register ensures central data access and …”

Article 13 Mechanism to avoid duplicative or conflicting rules S. 1611-1612

Article 63 Additional disclosures to investors and feeder’s competent authority S. 1404-1405

„… UCITSD lifts professional confidentiality and data protection requirements imposed by law or …”

Article 1 Purpose and scope S. 951-958

„… classification on request to the issuer without prejudice to the relevant legislation on data protection …” „… promote investor protection by eliminating the previously applicable mutual recognition rules which were …” „… Prospectus Directive, the use of prospectus disclosures as a key investor-protection tool was the focus of …”

Article 34 Freedom to provide investment services and activities S. 222-227

„… Investor Protection & Intermediaries, 22 June 2012 | ESMA/ 2012/38, Question 4, on Art 32(2) MiFID 2004/39 …” „… addresses, phone services, data interfaces, data feeds etc.) and arrangements that faciliate the former …”

Article 60 Relationship between feeder and master S. 1399-1401

„… breach of any rules that restrict the disclosure of information or relate to data protection where such …”

Articles 36 to 39 S. 1301-1303

„… data protection considerations – excludes confidential information.5 The limitation periods applicable …”

Article 8 a Sovereign ratings S. 1269-1271

„… publication would breach national or Union law governing the protection of confidentiality of information …” „… sources or the processing of personal data. 3. ESMA shall develop draft regulatory technical standards to …”

Article 35 Establishment of a branch S. 227-233

„… texts ESMA, MiFID Q&A Investor Protection & Intermediaries, 22 June 2012 | ESMA/ 2012/38, Question 4, on …” „… Answers On MiFID II and MiFIR investor protection and intermediaries topics, 12 July 2018 | ESMA35-43-34 …” „… Commission Delegated Regulation (EU) 2017/1018 including, for instance, financial data and details on systems …”

Article 11 Risk-mitigation techniques for OTC derivative contracts not cleared by a CCP S. 1603-1611

„… calibrated and tested for validity using any available observable market data; (d) is validated and monitored …” „… data within the meaning of Article 2(a) of Directive 95/46/EC. By 17 February 2013, the Member States …” „… 4, 9, 10 and 11; (b) ensure protection of professional secrecy that is equivalent to that set out in …”

Article 2 Definitions S. 1317-1323

„… protection; Art. 2 UCITSD 4. Funds 1320 Dirk Zetzsche and Dominik Nast 3 4 5 6 (b) units in closed end …” „… managed by an entity which is subject to national regulation for the purpose of investor protection; (c …” „… data or on valuation models, including systems based on amortised costs. The criteria referred to in …”

Article 17 Public disclosure of inside information S. 778-799

„… and Korczak P, ‘Why does shareholder protection matter for abnormal returns after reported insider …” „… compromising investor protection.12 Legislative history As mentioned above, disclosure requirements for inside …” „… distinguished from general market data, which concern multiple issuers or an entire securities market – and …”

Article 21 Review and evaluation S. 1617-1621

„… data are provided in EMIR Review – Second set of amendments – June 2017. The proposal refers that there …” „… protection of the CCP against credit, counterparty, market, operational and business risks that are not …”

Article 13 Accepted market practices S. 756-767

„… , administrative proceedings may be awarded the same protection as criminal proceedings under the ECHR and the same …” „… formulation of AMPs.29 Guiding principles for national competent authorities are investor protection and the …” „… , the level of transparency, liquidity, or the protection of other market partic- 40 Ibid, Art 10. 41 …”

Article 7 Inside information S. 673-692

„… insider. It could be argued that full protection of uninformed investors requires that insiders must wait …” „… concerns the issuer indirectly, CESR lists, inter alia, data and statistics published by public statistical …” „… data and economic policy decisions with specific relevance to the capital markets, e.g. interest rate …”

Article 9 Management body S. 43-50

„… , ‘management body’ means the body or bodies of an investment firm, market operator or data reporting services …” „… the protection of investors. The requirements in Art 9(3) MiFID and Art 88 (1) CRD IV partly overlap …”

Article 2 Definitions S. 958-965

„… request to the issuer without prejudice to the relevant legislation on data protection. Investment firms …”

Introduction and overview S. 874-881

„… S, Rules for EU institutions’ processing of personal data, PE 608.754, April 2018 (cited as …” „… responsibility and consumer protection”. 22 For further detail on the legislative procedure, see …”

Article 57 Position limits and position management controls in commodity derivatives S. 317-334

„… cooperation arrangements including exchange of relevant data with each other in order to enable the monitoring …” „… Sec. 737 Dodd-Frank Act (Wall Street Reform and Consumer Protection Act 2010), amending sec. 4 a …”

doi.org/10.5771/9783845279893

Indra Spiecker gen. Döhmann, Vagelis Papakonstantinou, Gerrit Hornung, Paul De Hert - General Data Protection Regulation

No access

Select

Indra Spiecker gen. Döhmann (ed.), Vagelis Papakonstantinou (ed.), Gerrit Hornung (ed.), Paul De Hert (ed.)

General Data Protection Regulation

2023

Results in this title

Art. 68 European Data Protection Board Stephanie Schiedermair S. 986-990

„… protection boardArt. 68European Data Protection Board1. The European Data Protection Board (the ‘Board’) is …” „… Member State and of the European Data Protection Supervisor, or their respective representatives.4. Where …” „… referred to in Art. 65, the European Data Protection Supervisor shall have voting rights only on decisions …”

Art. 35 Data protection impact assessment Jens Ambrock and Moritz Karg S. 687-705

„… protection impact assessment and prior consultationArt. 35Data protection impact assessment1. Where a type of …” „… envisaged processing operations on the protection of personal data. A single assessment may address a set of …” „… the data protection officer, where designated, when carrying out a data protection impact assessment …”

Art. 50 International cooperation for the protection of personal data Stephanie Schiedermair S. 854-857

„… facilitate the effective enforcement of legislation for the protection of personal data;(b) provide …” „… international mutual assistance in the enforcement of legislation for the protection of personal data, including …” „… appropriate safeguards for the protection of personal data and other fundamental rights and freedoms;(c …”

Art. 91 Existing data protection rules of churches and religious associations Achim Seifert S. 1128-1135

„… initiated by the Comm (Art. 258 TFEU).Art. 91Existing data protection rules of churches and religious …” „… Existing data protection rules of churches and religious associations1128 Achim Seifert222324der …” „… ) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17I. General questionsPurposeArt. 91 refers to existing data protection rules adopted by churches …”

Art. 37 Designation of the data protection officer Stefan Drewes and Sebastian Bretthauer S. 714-724

„… authorisation is envisaged here instead of mere consultation.42Section 4Data protection officerArt. 37 …” „… Designation of the data protection officer1. The controller and the processor shall designate a data …” „… Consultation’ in Kuner/Bygrave/Docksey (eds), The EU General Data Protection Regulation, p. 686.39 Schneider in …”

Art. 39 Tasks of the data protection officer Stefan Drewes and Sebastian Bretthauer S. 730-735

„… DPO.Companies should restrain from combining compliance and data protection in one department. The position of a …” „… regarding possible data protection risks associated with data processing processes and thus prepare the …” „… them from being appointed as external DPO.Art. 39Tasks of the data protection officer1. The data …”

Art. 38 Position of the data protection officer Stefan Drewes and Sebastian Bretthauer S. 725-729

„… Art. 38Position of the data protection officer1. The controller and the processor shall ensure that …” „… the data protection officer is involved, properly and in a timely manner, in all issues which relate …” „… to the protection of personal data.2. The controller and processor shall support the data protection …”

Art. 98 Review of other Union legal acts on data protection Domingos Farinho S. 1161-1164

„… other Union legal acts on data protectionThe Commission shall, if appropriate, submit legislative …” „… protection.IV. Review of other EU legislation on the protection of personal dataThe first sentence of Art. 98 …” „… The GDPR is also seen to be a role model for global data protection ambitions, as other countries …”

Art. 25 Data protection by design and by default Marco Almada, Juliano Maranhao and Giovanni Sartor S. 580-601

„… where such measures fail to provide protection.Data protection principlesThe technical and …” „… Data protection by design and by default1. Taking into account the state of the art, the cost of …” „… , which are designed to implement data-protection principles, such as data minimisation, in an effective …”

Titelei/Inhaltsverzeichnis S. I-XXX

„… Data Protection.Dr. Philipp Richter works as a legal officer for the Data Protection and Freedom of …” „… Federal Constitutional Court, Germany)CAHDATA Adhoc Committee on Data ProtectionCCPA California Consumer …” „… SystemsCJEU Court of Justice of the European UnionCJ-PD Committee of experts on data protectionCLOUD-Act …”

Art. 1 Subject-Matter and Objectives Gerrit Hornung and Indra Spiecker gen. Döhmann S. 77-91

„… obligation to regulate and protect in favour of data protection.When balancing interests, it has to be …” „… strong and consistent data protection.V. Protection of fundamental rights and freedoms (para. 2)Whereas …” „… effective data protection.Arts. 7 and 8 CFR are vital for the significance of para. 2 (→ Introduction mn …”

Introduction S. 1-76

„… constitutional and political question.Necessary juridification of data protectionSecondly, the decision of the …” „… self-determination” as being synonymous with a right to data protection.Third, the link between informational …” „… )). Where the transfer is merely intended to pave the way to such a “data protection-free” third country …”

Art. 30 Records of processing activities Laura Carmichael, Emma Cradock and Sophie Stalla-Bourdillon S. 649-655

„… controller, the controller's representative and the data protection officer;(b) the purposes of the …” „… are different in the general data protection regime (DPD/GDPR) and the ePrivacy-Directive.Records of …” „… ), https://www.gegevensbeschermingsautoriteit.be/publications/aanbeveling-nr.-06-2017.pdf; Art. 29 WP, ‘Guidelines on Data Protection Impact Assessment (DPIA) and determining …”

Art. 88 Processing in the context of employment Achim Seifert S. 1094-1112

„… National Commission for Data Protection and Implementing the GDPR.25 CAP 586 (the “Data Protection Act …” „… Data Protection Act), § 11.30 Data Protection Act (1050/2018), p. 29.31 Uitvoeringswet Algemene …” „… Law 1983, Art. 8.34 Act No. 502 of 23 May 2018 (the Danish Data Protection Act), § 11.35 Data …”

Art. 24 Responsibility of the controller Jos Dumortier and Pieter Gryffroy S. 564-579

„… referred to in paragraph 1 shall include the implementation of appropriate data protection policies by the …” „… principle in data protection regulation: origin, development and future directions’, in: D. Guagnin, L …” „… ), Brussels 2018, 371–406; European Data Protection Board, Guidelines 07/2020 on the concepts of controller …”

Art. 42 Certification Irene Kamara S. 757-766

„… certification mechanisms, codes of conduct and data protection-by-design‘ In G. González Fuster, R. Van Brakel …” „… shall encourage, in particular at Union level, the establishment of data protection certification …” „… mechanisms and of data protection seals and marks, for the purpose of demonstrating compliance with this …”

Art. 44 General principle for transfers Peter Schantz S. 775-784

„… . Regulatory goal: continuity of the level of data protectionIn its judgements in Schrems I and Schrems II as …” „… Sluis, ‘Institutionalizing personal data protection in times of global institutional distrust: Schrems …” „… ’, CMLR, 2016, 53,1343; L. A. Bygrave, Data Protection Law – An International Perspective, Oxford 2014; L …”

Art. 46 Transfers subject to appropriate safeguards Peter Schantz S. 803-822

„… created Data Protection Review Court (DPRC) is allowed (Sec. 3(d)). Echoing the CJEUs Schrems II ruling …” „… ) standard data protection clauses adopted by the Commission in accordance with the examination procedure …” „… referred to in Article 93(2);(d) standard data protection clauses adopted by a supervisory authority and …”

Art. 2 Material scope Vagelis Papakonstantinou and Paul De Hert S. 92-115

„… commodity, data protection law contains elements of a law regulating the economy. Restrictions on the free …” „… , does not constitute a breach of para. 3. Incidentally, the precedence of data protection interests …” „… , however, the data is not the pivotal issue. A uniform and high level of protection for fundamental rights …”

Art. 45 Transfers on the basis of an adequacy decision Peter Schantz S. 785-802

„… authorities to personal data, as well as the implementation of such legislation, data protection rules …” „… responsibility for ensuring and enforcing compliance with the data protection rules, including adequate …” „… regional systems, in particular in relation to the protection of personal data.3. The Commission, after …”

Art. 89 Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes Laura Carmichael, Emma Crado... S. 1113-1121

„… Review 2020, 37, 105413; V. Chico, ‘The impact of the General Data Protection Regulation on health …” „… data protection: researchers' obligations under the GDPR framework’, Medico-Legal Journal of Ireland …” „… 2018, 24,2, 80–92; E. S. Dove, ‘The EU General Data Protection Regulation: Implications for …”

Art. 4(5) Pseudonymisation Marco Almada, Juliano Maranhao and Giovanni Sartor S. 162-167

„… ; Article 29 WP, ‘Opinion 05/2014 on Anonymisation Techniques’, Brussels: Article 29 Data Protection …” „… Protection Board, 2020; ‘Guidelines 4/2020 on the Use of Location Data and Contact Tracing Tools in the …” „… Context of the COVID-19 Outbreak’, EDPB Guidelines, European Data Protection Board, 2020; ‘Recommendations …”

Art. 4(1) Personal data Domingos Farinho S. 135-147

„… WP 105, Working document on data protection issues related to RFID technology, January 19, 2005; Art …” „… , Opinion 08/2012 providing further input on the data protection reform discussions, adopted on 5 October …” „… without knowing their names – Behavioural targeting, pseudonymous data, and the new Data Protection …”

Art. 85 Processing and freedom of expression and information Alexander Dix S. 1070-1085

„… necessary to reconcile the right to the protection of personal data with the freedom of expression and …” „… ; Article 29 Data Protection Working Party, Recommendation 1/97, Data protection law and the media, adopted …” „… ’, EDPL, 2019, 262; Council of Europe, Committee of Experts on Data Protection, Data protection and media …”

Art. 6(1)(f) Opinion and market research in the age of Big Data Domingos Farinho S. 340-344

„… of the data controller under Article 7 of impact of the development of big data on the protection of …” „… : a taxonomy of data reuse for balancing big data benefits and personal data protection’, IDPL, Vol. 6 …” „… , No.1 (2016), 4-15; ICO, Big data, artificial intelligence, machine learning and data protection …”

Art. 32 Security of processing Evangelia Papadaki and Sophie Stalla-Bourdillon S. 659-669

„… will transfer these limits of self-infliction to the area of data protection.Section 2Security of …” „… discussions regarding the data protection reform package, 27 February 2013; Art. 29 WP 136, Opinion 4/2007 on …” „… Hessische Datenschutzbeauftragte, Key data protection points for the trilogue on the General Data Protection …”

Art. 5 Principles relating to processing of personal data Alexander Roßnagel and Philipp Richter S. 261-290

„… ) processed in a manner that ensures appropriate security of the personal data, including protection against …” „… Data Protection Regulation?’, ZD-Aktuell 2015, 04618; P. Richter, ‘Datenschutz zwecklos? – Das Prinzip …” „… . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7IV. Importance of the data protection principles …”

Art. 17 Right to erasure (‘right to be forgotten’) Artemi Rallo and Jorge Viguri S. 487-495

„… forgotten in the Draft Data Protection Regulation’, IDPL, 2014, 5–1, 64–72; A. Rallo, El derecho al olvido …” „… en Internet. Google vs. Spain, Madrid 2014; J. F. Lopez Aguilar, ‘Data protection package y …” „… parlamento europeo’, in: A. Rallo, et al. (eds), Towards a new European Data Protection Regime, 2015, 29–81 …”

Art. 4(6) Filing system Vagelis Papakonstatinou and Paul De Hert S. 168-174

„… to pseudonymise personal data in court decisions is meant to balance the protection of the data …” „… risk mitigation. Therefore, pseudonymisation is likely to play a role in most data protection …” „… pressing recent data protection issues: the use of personal data in response to the Covid-19 pandemic25 and …”

Art. 47 Binding corporate rules Peter Schantz S. 823-834

„… to standard data protection clauses due to the approval procedure and require more time.98 Prior to …” „… binding nature, both internally and externally;(d) the application of the general data protection …” „… 14;(h) the tasks of any data protection officer designated in accordance with Article 37 or any other …”

Art. 23 Restrictions Alexander Dix S. 543-563

„… essence of the right to data protection and provide for suitable and specific measures to safeguard the …” „… ) the protection of the data subject or the rights and freedoms of others;(j) the enforcement of civil …” „… Datenschutzrecht der EU – Grundlagen/Gesetzgebungsverfahren/Synopse, Baden-Baden 2017; Article 29 Data Protection …”

Index S. 1169-1211

„… seq.– logic involved 15 19 et seq.– Magna Carta of Data Protection 15 1– notion of processed data …” „… or members 54 10Appropriate and effective measures 24 1Appropriate data protection policies 24 44 …” „… – Rome I Regulation 46 8– SA 46 11– SA, powers of 46 17 et seq.– standard data protection clauses …”

Art. 26 Joint controllers Jos Dumortier and Pieter Gryffroy S. 602-616

„… la protection des données (RGPD/GDPR), Brussels 2018, 371–406; European Data Protection Board …” „… ; European Data Protection Supervisor, EDPS guidelines on the concepts of controller, processor and joint …” „… ’, CLSR, 2012, 28, 25–43; B. Van Alsenoy, ‘Liability under EU Data Protection Law: From Directive 95/46 to …”

Art. 15 Right of access by the data subject Alexander Dix S. 466-479

„… : Article 29 Data Protection Working Party, Opinion 1/2006 on the application of EU data protection rules …” „… , 2017, 16, 18–84; European Data Protection Board, Guidelines 3/2019 on processing of personal data …” „… of access, Version 1.0 for public consultation, adopted on 18 January 2022; European Data Protection …”

Art. 86 Processing and public access to official documents András Jóri S. 1086-1089

„… access to official documents with the right to the protection of personal data pursuant to this …” „… https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu/eu-countries-gdpr-specific-notifications_en.127 Kranenborg in Kuner/Bygrave/Docksey, Art. 85 C. 5.Art. 86 Processing and public access to …” „… access to official documents with the right to the protection of personal data pursuant to this …”

Art. 51 Supervisory authority Eva Souhrada-Kirchmayer S. 858-862

„… ’, https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu/eu-countries-gdpr-specific-notifications_en; B. Körffer, ‘Art. 51’, in: B. Paal and D. Pauly (eds), Datenschutz-Grundverordnung, 3rd edn …” „… ) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172. The duty to cooperate with a view to contributing to the application of the GDPR data protection …” „… . Purpose and importance of the provisionTo harmonize European data protection law, the GDPR contains …”

Art. 95 Relationship with Directive 2002/58/EC Vagelis Papakonstantinou and Paul De Hert S. 1150-1154

„… Implementation; New Rules on Data Protection, Spam, Data Breaches and Protection of Intellectual Property Rights …” „… privacy (CFR, Art. 7) and the protection of personal data (CFR, Art. 8), the ePrivacy-Directive …” „… provisions clarifying the relationship between data protection law and the processing of personal data in …”

Art. 4(11) Consent Judith Rauhofer and Burkhard Schafer S. 195-215

„… the Regions, ‘A comprehensive approach on personal data protection in the European Union’, COM (2010 …” „… interplay between the Clinical Trials Regulation (CTR) and the General Data Protection regulation (GDPR …” „… between EU Consumer Law and Data protection Law’, Common Market Law Review, 54, pp. 1427-1466; E. Kosta …”

Art. 12 Transparent information, communication and modalities for the exercise of the rights of the data subject Alexander DixTransparent information, communication and modalities S. 434-447

„… verbesserte Information’, DuD, 2004, 518; S. Dreyer and W. Schulz, ‘The General Data Protection Regulation and …” „… , https://www.leibniz-hbi.de/de/publikationen/the-general-data-protection-regulation-and-automated-decision-making-will-it-deliver, (last accessed 11 February 2019); Z. Efroni, J. Metzger, L. Mischau and M. Schirmbeck, ‘Privacy …” „… Data Protection Board, Endorsement 1/2018; Guidelines 3/2019 on data processing through video devices …”

Art. 20 Right to data portability Alexander Dix S. 508-517

„… others.Literature: Article 29 Data Protection Working Party, Guidelines on the right to data portability, as last …” „… of big data – a call for transparency, user control, data protection by design and accountability …” „… the Sui Generis Database Right, Baden-Baden 2019; European Commission, Data protection as a pillar of …”

Art. 8 Conditions applicable to child's consent in relation to information society servicesThe authors would like to thank Ayça Atabey for her assistance in conducting the research for this chapter. J... S. 391-399

„… relation to a child.Literature: European Data Protection Board, Guidelines 5/2020 on consent under …” „… Regulation 2016/679, 4 May 2020; European Data Protection Supervisor, ‘Opinion on the Data Protection Reform …” „… Affecting Children’s Rights in the General Data Protection Regulation’, Computer Law and Security Review …”

Art. 49 Derogations for specific situations Peter Schantz S. 838-853

„… , 13.21 Brief of EU Data Protection and Privacy Scholars as Amici Curiae in the Case Microsoft Inc. v. U.S …” „… protection of personal data. The controller shall inform the supervisory authority of the transfer. The …” „… third countries: Applying Articles 25 and 26 of the EU data protection directive, adopted on 24 July …”

Art. 70 Tasks of the Board Stephanie Schiedermair S. 993-998

„… seek advice from the Board in all matters relating to the protection of personal data and can set the …” „… from the Commission to the European Parliament and the Council on Data protection as a pillar of …” „… General Data Protection Regulation, dated 24 June 2020, COM (2020) 264 final, pp. 19 et seq …”

Art. 80 Representation of data subjects Olivia Tambou S. 1030-1035

„… objectives which are in the public interest, and is active in the field of the protection of data subjects …” „… ' rights and freedoms with regard to the protection of their personal data to lodge the complaint on his or …” „… the area of personal data protection’, p. 12.27 In France for instance, the Court of Appeal of Paris …”

Art. 97 Commission reports Stephanie Schiedermair S. 1156-1160

„… level of protection for the fundamental rights of the data subjects (…)’. 4 An analysis in Moore, ‘Art …” „… , Data Protection Commissioner v Maximillian Schrems, Facebook Ltd; CJEU, Case C-362/14, 2015 …” „… , Maximillian Schrems v Data Protection Commissioner; Comm, Communications from the Commission to the European …”

Art. 40 Codes of conduct Alexander Roßnagel and Philipp Richter S. 736-749

„… of the data subjects requiring protection.Lit. c lists “the collection of personal data”. Codes of …” „… VI. Liability of the data protection officerIn addition to the question of the scope of their …” „… breach of data protection law. The DPO’s misconduct must take place in advance, which also raises …”

Art. 82 Right to compensation and liability Olivia Tambou S. 1041-1050

„… . Chamberlain, ‘The Relationship Between Damages and Administrative Fines in the EU General Data Protection …” „… Telecommunications Law Review (CTLR), 2018, 24, 8, 175–180; E. N. Truli, ‘The General Data Protection and Civil …” „… ), Personal Data in Competition, Consumer Protection and Intellectual Property: Towards a Holistic Approach …”

Art. 36 Prior consultation Jens Ambrock and Moritz Karg S. 706-713

„… processing where a data protection impact assessment under Art. 35 indicates that the processing would result …” „… details of the data protection officer;(e) the data protection impact assessment provided for in Art. 35 …” „… , ‘The Article 29 Working Party’s Provisional Guidelines on Data Protection Impact Assessment’, EDPL …”

Art. 58 Powers Eva Souhrada-Kirchmayer S. 894-900

„… related to the protection of personal data;(c) to authorise processing referred to in Art. 36 para. 5, if …” „… . 5;(g) to adopt standard data protection clauses referred to in Art. 28 para. 8 and in point (d) of …” „… Datenschutzrecht, 37th edn May 2021, Munich 2021; Agency for Fundamental Rights (FRA), Report ‘Data Protection in …”

Art. 90 Obligations of secrecy Cristina Pauner S. 1122-1127

„… this is necessary and proportionate to reconcile the right of the protection of personal data with the …” „… the General Data Protection Regulation (GDPR): Exemptions”, accessed February 28, 2021 …” „… , https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/exemptions.42 Also referred to as ‘dual purpose processing’ in: The National Archives, Guide to archiving …”

Art. 9 Processing of special categories of personal data András Jóri S. 400-419

„… include harmonisation of national provisions of contract law and clarifies that both data protection and …” „… right to data protection and provide for suitable and specific measures to safeguard the fundamental …” „… protection and provide Processing of special categories of personal data Art. 9András Jóri 401for suitable …”

Art. 13 Information to be provided where personal data are collected from the data subject Alexander Dix S. 448-457

„… meaning of certain pictures or symbols in different countries and cultures. The European Data Protection …” „… protection officer, where applicable;(c) the purposes of the processing for which the personal data are …” „… , Concise European IT Law, 2nd edn, 2010; S. Dreyer and W. Schulz, ‘The General Data Protection Regulation …”

Art. 69 Independence Stephanie Schiedermair S. 991-992

„… Commission to the European Parliament and the Council on Data protection as a pillar of citizens’ empowerment …” „… . Schiedermair, ‘Data Protection – is there a bridge across the Atlantic?’ in: D. Dörr and R. L. Weaver (eds …” „… . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3I. IntroductionLike the national data protection authorities, the EDPB is also independent and is …”

Art. 6 Lawfulness of processing Giovanni Sartor S. 291-327

„… and freedoms of the data subject which require protection of personal data, in particular where the …” „… on 13 July 2011; Art. 29 WP, Opinion 08/2012 providing further input on the data protection reform …” „… . Macenaite, ‘Legitimate Interest of the Data Controller New Data Protection Paradigm: Legitimacy Grounded on …”

Art. 4(14) Biometric data András Jóri S. 221-224

„… as facial images or dactyloscopic data;Literature: E. J. Kindt, Privacy and Data Protection Issues of …” „… Biometric Applications – A Comparative Legal Analysis, Dordrecht 2013; Article 29 Data Protection Working …” „… also in the context of data protection impact assessments; in the final text, the respective provision …”

Art. 33 Notification of a personal data breach to the supervisory authority Alexander Dix S. 670-680

„… ; reviewing and updating the data protection policies; establishing a programme of ongoing monitoring of the …” „… concerned;(b) communicate the name and contact details of the data protection officer or other contact point …” „… Article.Literature: Art. 29 Data Protection Working Party, Working Document 1/2011 on the current EU personal data …”

Art. 87 Processing of the national identification number Niko Tsakalakis S. 1090-1093

„… order to reconcile public access to official documents with the right to the protection of personal data …” „… “reconciliation” public access to information to the right to the protection of personal data, might prevent such …” „… prepared by the Committee of experts on data protection (CJ-PD) under the authority of the European …”

Art. 21 Right to object Laura Carmichael, Emma Cradock and Sophie Stalla-Bourdillon S. 518-524

„… reconcile the right to data protection with the freedom of expression and information (Art. 85 para. 2 …” „… Data Protection Board from international data rights academics, to inform regulatory guidance’ Journal …” „… life and the protection of personal data in electronic communications and repealing Directive 2002/58 …”

Art. 4(2) Processing Vagelis Papakonstantinou and Paul De Hert S. 148-155

„… Law, 5th edn, Oxford 2008; P. Voigt and A. von dem Bussche, The EU General Data Protection Regulation …” „… indicative. The legislator’s intent is to warrant a possibly wide protection for data subjects. “Processing …” „… all of the EU data protection - system comes to the fore. It refers to “personal data” and “set(s) of …”

Art. 3 Territorial scope Gerrit Hornung S. 116-134

„… forthcoming ePrivacy Regulation regime, the matter of the relationship between EU data protection and the …” „… data protection law to personal data processing on the Internet by non-EU based web sites, WP 56, 2002 …” „… , Opinion 01/2012 on the data protection reform proposals, WP 191, 2012; G. Borges, ‘Internationale …”

Art. 52 Independence András Jóri S. 863-872

„… Member States. In some Member States, authorities have one member (that is, a Data Protection/Information …” „… para. 3 on reconciling the right to data protection with the right to freedom of expression and …” „… ’, https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu/eu-countries-gdpr-specific-notifications_en, accessed 3 December 2022. Independence Art. 52András Jóri 86322232425263. Member or members of …”

Art. 16 Right to rectification Alexander Dix S. 480-486

„… statement.91 Cf. sec. 95 para. 1 lit. a of the UK Data Protection Act 2018 limiting the right to receive a …” „… effect of this exemption (p. 44 et seq.).92 See Data Protection Act 2018, sec. 184, and the guidance …” „… ? https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/right-of-access/can-we-force-an-individual-to-make-a-sar/ (last accessed on 9 February 2021).93 Cf. the results of EU-wide research presented by …”

Art. 57 Tasks Eva Souhrada-Kirchmayer S. 889-893

„… , insofar as they have an impact on the protection of personal data, in particular the development of …” „… relation to the requirement for data protection impact assessment pursuant to Art. 35 para. 4;(l) give …” „… safeguards, pursuant to Art. 40 para. 5;(n) encourage the establishment of data protection certification …”

Art. 34 Communication of a personal data breach to the data subject Alexander Dix S. 681-686

„… technical and organisational protection measures, and those measures were applied to the personal data …” „… the conditions referred to in paragraph 3 are met.Literature: European Data Protection Board …” „… Protection by Design and Data Subjects Rights Clash’, IDPL, 2018, 105. See also the select bibliography on …”

Art. 28 Processor András Jóri S. 626-645

„… the protection of the rights of the data subject.2. The processor shall not engage another processor …” „… opinion, an instruction infringes this Regulation or other Union or Member State data protection …” „… specific processing activities on behalf of the controller, the same data protection obligations as set out …”

Art. 11 Processing which does not require identification Laura Carmichael, Emma Cradock and Sophie Stalla-Bourdillon S. 426-433

„… Brakel, S. Gutwirth and P. De Hert (eds), Data Protection and Privacy: the Age of Intelligent Machines …” „… Identification Barriers for Exercising Data Protection Rights, in: Proceedings of the 2018 ACM International …” „… J. Ausloos, ‘When data protection by design and data subject rights clash’, in: International Data …”

Art. 22 Automated individual decision-making, including profiling Olivia Tambou S. 525-542

„… in: Voigt/von dem Bussche, ‘Rights of Data Subjects’, In The EU General Data Protection Regulation …” „… =2964855; B. Petkova and F. Boehm, ‘Profiling and the Essence of the Right to Data Protection’, in: J …” „… right to data protection: normative value in the context of counter-terrorism surveillance, Oxford 2017 …”

Art. 18 Right to restriction of processing Domingos Farinho S. 496-502

„… the protection of personal data with the right to freedom of expression and information. This also …” „… protection laws is uncertain.Art. 18Right to restriction of processing1. The data subject shall have the …” „… . Zanfir-Fortuna, ‘Tracing the Right to be Forgotten in the Short History of Data Protection Law: The 'New Clothes …”

Art. 43 Certification bodies Irene Kamara S. 767-774

„… authority for the requirements on data protection.V. Conditions of accreditation (para. 2, 3)Certification …” „… (…)”. Art. 29 Data Protection Working Party has pointed out that even “non-compliance with self-regulatory …” „… ;(c) established procedures for the issuing, periodic review and withdrawal of data protection …”

Art. 6(1)(f) Data processing for marketing purposes Domingos Farinho S. 345-355

„… ; European Parliament, Report on fundamental rights implications of big data: privacy, data protection …” „… , in particular regarding the competence, tasks and powers of data protection authorities, adopted on …” „… Protection, Spam, Data Breaches and Protection of Intellectual Property Rights’, 29 J. Marshall J. Computer …”

Art. 6(1)(f) Content personalisation Marco Almada, Juliano Maranhao, Giovanni Sartor S. 328-339

„… . Buttarelli, ‘Dark Patterns in Data Protection: Law, Nudging, Design and the Role of Technology’ (presented at …” „… Data through Europe’s New Data Protection Regulation’, Columbia Science and Technology Law Review 17 …” „… the reliance of content personalisation on personal data, data protection law can address some of the …”

Art. 4(12) Definitions Alexander Dix S. 216-218

„… Data Protection Commission and its Potential Influence on Future Financial Data Sharing’, EDPL 2022 …” „… , 278; European Data Protection Board, Guidelines 01/2021 on Examples regarding Data Breach …” „… the same time.2 The European Data Protection Board has illustrated this by extensive Guidelines …”

Art. 4(7) Controller András Jóri S. 175-185

„… important actor in data protection law. Various language versions emphasize different attributes of this …” „… applying data protection law. According to the EDPB, the concept of controller (along with those of joint …” „… autonomous concept, to be interpreted in the context of data protection law.1 In the view of the Board, the …”

Art. 4(13) Genetic data András Jóri S. 219-220

„… Protection, Cambridge 2012; Article 29 Data Protection Working Party Working Document on Genetic Data …” „… the context of data protection impact assessments as well. In the final text of Art. 35, however, the …” „… Data and the Law: A Critical Perspective on Privacy Protection, Cambridge 2012, p. 80. See also Art. 29 …”

Art. 4(16) Main establishment Sebastian Bretthauer S. 229-236

„… , ‘The concept of establishment and data protection law: rethinking establishment’, E.L. Rev. 2017, 491 …” „… European Data Protection Directive 95/46/EC did not contain a comparable definition.7 The Commission’s …” „… determining the 1 For general remarks on the concept of establishment and data protection law see: Sancho, E.L …”

Art. 4(21) Supervisory authority Sebastian Bretthauer S. 242-243

„… EU undertakes to adhere to BCR as personal data protection policies with regard to data transferred …” „… Article 51;Literature: A. Giurgiu and T. A. Larsen, ‘Roles and Powers of National Data Protection …” „… previously applicable European Data Protection Directive 95/46/EC did not contain a comparable definition.1 …”

Art. 75 Secretariat Stephanie Schiedermair S. 1004-1006

„… knowledge on data protection-related matters. The secretariat being provided by the EDPS further means that …” „… shall have a secretariat, which shall be provided by the European Data Protection Supervisor.2. The …” „… of the European Data Protection Supervisor involved in carrying out the tasks conferred on the Board …”

Art. 4(4) Profiling Olivia Tambou S. 158-161

„… 2018 on the protection of natural persons with regard to the processing of personal data by the Union …” „… , Issue 4 (2016) pp. 535-554; O. Tambou, ‘Profiling in the General Data Protection Regulation: Progress …” „… data subject, such as the right to private life (Art. 7 EU CFR), the right to the protection of …”

Art. 78 Right to an effective judicial remedy against a supervisory authority Olivia Tambou S. 1017-1022

„… . 47 of the CFR in the context of the right to the protection of personal data established by Art. 8 of …” „… illustrates the particular relevance of this right for EU data protection law.5 Data subjects shall have …” „… Brkan, ‘Data Protection and European Private International Law’ (2015) Working Paper …”

Art. 77 Right to lodge a complaint with a supervisory authority Olivia Tambou S. 1010-1016

„… protection of the data subjects’ rights in terms of remedies. The SAs are considered as an “essential …” „… component”1 of the European right to data protection under Art. 16 TFEU and Art. 8 of the CFR. Historically …” „… , the construction of the EU data protection law is based on the creation of a SA in charge of ensuring …”

Art. 6(1)(f) Credit scoring Hans-W. Micklitz and Giovanni Sartor S. 356-362

„… invoked under Art. 6 para. 1 lit. f it also foresees a higher protection for data subjects if such legal …” „… pertaining to data protection and privacy in relation to prospective borrowers, since an assessment of …” „… German Data Protection Law defines credit scoring and lays down requirements for its lawfulness. Under …”

Art. 6(1)(f) Video recording Domingos Farinho S. 363-375

„… addressing credit scoring from a data protection perspective are either redundant or unlawful: they are …” „… extent that they are rather motivated by purposes that go beyond data protection, such as increasing the …” „… Surveillance in Apartment Buildings under EU Data Protection Law’, EDPLR, Vol. 6, No. 2 (2020): pp. 314-318 …”

Art. 14 Information to be provided where personal data have not been obtained from the data subject Alexander DixInformation to be provided where personal data have not been obtained S. 458-465

„… , where applicable, of the controller's representative;(b) the contact details of the data protection …” „… ): Article 29 Working Party, Opinion 1/2006 on the application of EU data protection rules to internal …” „… Regulation 2016/679, last revised 11.4.2018 (WP 260 rev. 01); European Data Protection Board, Endorsement …”

Art. 60 Cooperation between the lead supervisory authority and the other supervisory authorities concerned Cooperation between the lead supervisory authority and other authorities S. 904-914

„… means, using a standardised format.Literature: European Commission ‘Data Protection as a Pillar of …” „… General Data Protection Regulation’, COM(2020) 264 final, 24 June 2020; European Commission. ‘A …” „… Comprehensive Approach on Personal Data Protection in the European Union’, COM(2010) 609 final, 11 April 2010; L …”

Art. 83 General conditions for imposing administrative fines Olivia Tambou S. 1051-1063

„… conditions for imposing administrative fines1052 Olivia Tambou(eds), The EU General Data Protection …” „… of data protection. Notably, the Art. 29 WP has provided for some guidelines to facilitate the …” „… created by the GDPR and aimed to improve enforcement of the European data protection law.3Art. 83 GDPR …”

Art. 4(9) Recipient András Jóri S. 189-191

„… authorities shall be in compliance with the applicable data protection rules according to the purposes of the …” „… (→ mn. 3) Recipient is more a function, a descriptive term, not a subject of data protection law; as the …” „… those data by those public authorities shall be in compliance with the applicable data protection rules …”

Art. 66 Urgency procedure Indra Spiecker gen. Döhmann S. 975-982

„… supervisory authorities, the EU-Commission announced to request all national supervisory data protection …” „… fundamental rights of data protection and respect for privacy.8 The preventive character of data protection …” „… approach must be prognostic and the preventive nature of data protection law must be taken into account …”

Art. 4(22) Supervisory authority concerned Sebastian Bretthauer S. 244-247

„… monitoring of and compliance with data protection rules. However, the fact that the supervisory authorities …” „… authorities con16 Case C-362/14, 6.10.2015, Schrems v Data Protection Commissioner, ECLI:EU:C:2015:650, para …” „… applicable European Data Protection Directive 95/46/EC did not contain a comparable definition. Likewise …”

Art. 79 Right to an effective judicial remedy against a controller or processor Olivia Tambou S. 1023-1029

„… private enforcement in the area of personal data protection’, MPILux Research Paper Series, 2019, 3; P …” „… . Voigt and A. von dem Bussche, The EU General Data Protection Regulation (GDPR) – A Practical Guide, Cham …” „… GDPR fines imposed by the CNIL7 have been made before the Conseil d’Etat.1.4 Access to data protection …”

Art. 10 Processing of personal data relating to criminal convictions and offences András Jóri S. 420-425

„… to the draft Guidelines 1/2020 of the European Data Protection Board on processing personal data in …” „… Act XXXIV of 2019 on the amendments of the acts necessary for carrying out the EU data protection …” „… e.g. Zsolt Bártfai, ’Comments to the draft Guidelines 1/2020 of the European Data Protection Board on …”

Art. 4(20) Binding corporate rules Peter Schantz S. 241

„… between companies under corporate law are not taken into account in data protection law, the GDPR makes …” „… single data protection officer. Furthermore, under Art. 47 para. 1a groups of undertakings can obtain …” „… third countries without an adequate level of data protection (→ Art. 4(20) mn. 1 et seq.; → Art. 47 mn …”

Art. 94 Repeal of Directive 95/46/EC Gerrit Hornung and Indra Spiecker gen. Döhmann S. 1146-1149

„… references to the European Data Protection Board established by this Regulation.Literature: E. Ehmann and M …” „… for the protection of data would arise.16 If no identical rule in the GDPR exists, a corresponding …” „… to this Regulation. References to the Working Party on the Protection of Individuals with regard to …”

Art. 64 Opinion of the Board Indra Spiecker gen. Döhmann S. 938-958

„… requirement for a data protection impact assessment pursuant to Article 35(4);(b) concerns a matter pursuant …” „… referred to in Article 42(5);(d) aims to determine standard data protection clauses referred to in point (d …” „… . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82. Adoption of a list of the processing operations subject to the requirement for a data protection …”

Art. 63 Consistency mechanism Indra Spiecker gen. Döhmann S. 927-937

„… from Art. 61 and the broader data protection purposes should be interpreted as creating an obligation …” „… decisive significance for the effective implementation of a consistent Data Protection Law in the EU.12 …” „… enforcement of Data Protection law.13 The consistency mechanism ensures the coordination of national …”

Art. 84 Penalties Olivia Tambou S. 1064-1069

„… spend these fines for new projects supporting data protection or to improve internal compliance of the …” „… technological Approaches, 2016, p. 130. 51 See Section 43 of the German Act to Adapt Data Protection Law to …” „… GDPR’, in: P. Voigt and A. von dem Bussche (eds), The EU General Data Protection Regulation, a …”

Art. 7 Conditions for consent Judith Rauhofer and Burkhard Schafer S. 376-390

„… Simitis/Hornung/Spiecker gen. Döhmann, mn. 92. At the same time, Klement also claims that the right to data protection …” „… method of pursuing that purpose, see ICO, Guide to the General Data Protection Regulation (GDPR): Lawful …” „… https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/#when; last accessed on 7 December 2020.55 While controllers commonly argue that this type of processing …”

Art. 4(23) Cross-border processing Sebastian Bretthauer S. 248-250

„… concept of establishment and data protection law: rethinking establishment’, E.L. Rev. 2017, 491; D. J. B …” „… . Legislative historyThe previously applicable European Data Protection Directive 95/46/EC did not contain a …” „… data, and repealing Directive 95/46/EC (General Data Protection Regulation), 7920/16, Art. 4(19b).5 …”

Art. 29 Processing under the authority of the controller or processor András Jóri S. 646-648

„… protection law (→ Art. 28 mn. 60 et seq.).3Note that, as in other cases (e.g. consent to various data …” „… traditional scope of data protection law, extending data protection obligations to a wider group of persons.4 …” „… analysed this term in the data protection context. According to the ePrivacy-Directive, traffic data …”

Art. 99 Entry into force and application Gerrit Hornung and Indra Spiecker gen. Döhmann S. 1165-1168

„… concerning personal data protection have been amended pursuant to Art. 98, such as:– Regulation (EC) No …” „… could adapt their data protection laws and align them with the opening clauses (→ mn. 5).1 In view of …” „… exercise of a “law of the strongest”2 at the expense of data protection would have been desirable. The …”

Art. 4(25) Definitions Judith Rauhofer and Burkhard Schafer S. 253-257

„… Commissioner’s Office, ‘The General Data Protection Regulation: Children and the GDPR’; C. Gardiner, ‘Star Taxi …” „… Directive 95/46/EC (General Data Protection Regulation), Brussels, 8 April 2016.8 Hans-Dieter Jundt, Hedwig …” „… that do not necessarily align with those that inform data protection law.It is likely that the courts …”

Art. 4(10) Third party András Jóri S. 192-194

„… “applicable data protection rules”, including those set out by the GDPR and the Member State laws implementing …” „… according to data protection law.1 As the literature states, the legislator originally used the term in the …” „… Act LXIII of 1992 on the protection of personal data and the publicity of data of public interest.2 …”

Art. 72 Procedure Stephanie Schiedermair S. 1000-1001

„… serves to further develop data protection, not only with regard to such protection in the EU, but also …” „… report is a status report on data protection within the Union.5Art. 72Procedure1. The Board shall take …” „… sub-groups on certain data protection issues, as was also the case with the Art. 29 WP.5The EDPB rules of …”

Art. 96 Relationship with previously concluded Agreements Stephanie Schiedermair S. 1155

„… (eds), The EU General Data Protection Regulation, 1294, 1298. 1 A discussion in Kühling/Raab in …” „… , in any event, the protection granted by the ePrivacy-Directive cannot result in a level of …” „… protection that is lower than that granted by the GDPR.20Art. 96Relationship with previously concluded …”

Art. 4(8) Processor András Jóri S. 186-188

„… data protection law. As opposed to the controller, a concept defined by the elements of control and …” „… the system of definitions used by the former Hungarian data protection act (Act LXIII of 1992 on the …” „… protection of personal data and on the publicity of data of public interest).3 EDPB Guidelines 07/2020 on the …”

Art. 93 Committee procedure Stephanie Schiedermair S. 1143-1145

„… . Other provisions similar to Art. 93 GDPR can be found in certain data protection legal instruments, such …” „… protection pursuant to Art. 45 paras. 3 and 5 when it comes to the transfer of data to third countries and 2 …” „… details, see Roßnagel/Richter Art. 40 para. 1 et seq.9 For details on certification and data protection …”

Art. 65 Dispute resolution by the Board Indra Spiecker gen. Döhmann S. 959-974

„… dispute settlement procedure. This is without precedent in data protection law1 and also in the rest of EU …” „… and similar procedures in data protection law Schöndorf-Haubold in Sydow Art. 65 mn. 3 et seq.2 The …” „… “decision[s] of the European Data Protection Board”. This proposal was largely implemented in the GDPR. The …”

Art. 31 Cooperation with the supervisory authority Eva Souhrada-Kirchmayer S. 656-658

„… . 57 para. 1 lit. v, “any other” task in connection with the protection of personal data counts to the …” „… , ‘Organisational Requirements’, in: The EU General Data Protection Regulation, 46.29 See APD-GBA, ‘Aanbeveling …” „… of the controller or the data protection official, who were obliged to notify the SA of a processing …”

Art. 27 Representatives of controllers or processors not established in the Union Gerrit Hornung S. 617-625

„… 20 DPD). According to this, if national data protection law of a Member State was applicable to …” „… (especially profiles), the processing of data of natural persons in need of protection (especially children …” „… to comply with any of the other substantial obligations of the GDPR, e.g., compliance with the data …”

Art. 81 Suspension of proceedings Olivia Tambou S. 1036-1040

„… subject.By contrast, section 187 of the UK Data Protection Act 201823 includes such provisions. Section 187 …” „… are concerned with the same data protection legal issues. The same subject matter could be brought …” „… .) Teil I Nr. 44. 23 Data Protection Act 2018, UK Public General Acts 2018 c. 12.Art. 81 Suspension of …”

Art. 4(26) International organisation Stephanie Schiedermair S. 258-260

„… data protection matters.1 This is based on the realisation that effective data protection in the …” „… international organisations in data protection matters, e.g. in the field of security, data protection in the …” „… private sector or the protection of data concerning health. For the field of security, the question raised …”

Art. 53 General conditions for the members of the supervisory authority Eva Souhrada-Kirchmayer S. 873-876

„… the protection of personal data, required to perform its duties and exercise its powers.3. The duties …” „… of the Council on the protection of individuals with regard to the processing of personal data by the …” „… , particularly in the area of the protection of personal data. The provision thus defines binding minimum …”

Art. 61 Mutual assistance S. 915-921

„… , ‘Making the Case for Enhanced Enforcement Cooperation between Data Protection Authorities: Insights from …” „… in the text of the GDPR. Indeed, a distinct characteristic of EU data protection since the time it …” „… ’ Blume, ‘The EU General Data Protection Regulation (GDPR)’, 981.11 See, e.g., Kloza/Moscibroda, ‘Making …”

Art. 76 Confidentiality Stephanie Schiedermair S. 1007-1009

„… Understanding between the European Data Protection Board and the European Data Protection Supervisor’ (Brussels …” „… Data Protection Board and the European Data Protection Supervisor’ (Brussels, 25 May 2018).5 This …”

Art. 41 Monitoring of approved codes of conduct Alexander Roßnagel and Philipp Richter S. 750-756

„… will lead to a fragmentation of data protection law and not to a consistent application. This is a …” „… . 57 para. 1 lit. q. The Data Protection Board needs to approve of the criteria for accreditation of …” „… . 2 and by the criteria developed according to para. 3 and approved by the Data Protection Board …”

Art. 4(24) Relevant and reasoned objection Indra Spiecker gen. Döhmann S. 251-252

„… cooperation on data protection. The term thus refers to relevant stakeholders. Art. 57 para. 1 lit. i uses the …” „… . Thus, data processing that is carried out by several establishments in the same Member State and may …” „… ensure the effective protection of fundamental rights. Therefore, in these cases, one of several …”

Art. 55 Competence Eva Souhrada-Kirchmayer S. 880-883

„… European data protection law. The GDPR as law of the Union is directly applicable in the Member States …” „… legislation. A similar provision was included in Regulation 45/2001 on data protection within the …” „… confidentiality is based, namely the violations of the GDPR reported by natural persons. This protects the data of …”

Art. 56 Competence of the lead supervisory authority Eva Souhrada-Kirchmayer S. 884-888

„… This exemption of judicial activity from data protection supervision by the SAs does not mean …” „… to the processing of personal data by courts and other judicial authorities. As a result, judicial …” „… judicial system of Member States should be entrusted with the supervision of these data processing …”

Art. 73 Chair Stephanie Schiedermair S. 1002

„… access to meetings and documentation, confidentiality matters, data protection, reporting and …” „… . Paal/Pauly, Art. 73, para. 1.2 See Proposition regarding the European Data Protection Board Internal …” „… data subjects.– ‘Final Provisions’: this title deals with the amendment procedure, the EDPB’s webpage …”

Art. 92 Exercise of the delegation Stephanie Schiedermair S. 1136-1142

„… power to use legal acts to set the requirements for the data protection certification mechanisms and the …” „… data protection seals and marks pursuant to Art. 42 para. 1.22The institution responsible for adopting …” „… Art. 43 para. 8 (on the specification of ‘the requirements to be taken into account for the data …”

Art. 62 Joint operations of supervisory authorities Vagelis Papakonstatinou S. 922-926

„… Enforcement Cooperation between Data Protection Authorities: Insights from Competition Law’, International …” „… between Data Protection Authorities: Insights from Competition Law’, International Data Privacy Law 4, no …” „… where a significant number of data subjects in more than one Member State are likely to be substantially …”

Art. 4(17) Representative Gerrit Hornung S. 237-238

„… the (entire) GDPR, a corresponding qualification in data protection law is …” „… However, the enterprise carrying out the cross-border data processing may have an interest in being …” „… the competent supervisory authorities where the relevant decisions on data processing are made and who …”

Art. 19 Notification obligation regarding rectification or erasure of personal data or restriction of processing Alexander DixNotification obligation regarding rectification or erasure of personal dat... S. 503-507

„… use of a data protection management system is highly recommended, which would allow the speedy …” „… controller considers that the restricted data have been used beyond further possibilities to …” „… support legal claims of the data subject under Art. 18 para. 1 lit. c.Finally, the duty to provide …”

Art. 54 Rules on the establishment of the supervisory authority Eva Souhrada-Kirchmayer S. 877-879

„… national data protection SAs are already in place, Art. 54 para. 1 obliges the Member States to issue the …” „… Member State should be obliged to supervise the data protection regulations. Furthermore, the members and …”

Art. 67 Exchange of information Indra Spiecker gen. Döhmann S. 983-985

„… GDPR must be observed, i.e. the principles and general data protection objectives of Art. 5 as well as …” „… However, there are no specific rules on data formats or transmission protocols; of course, EU law must be …”

doi.org/10.5771/9783845276984

2 3 ... 1333