Skip to main content

2021 | OriginalPaper | Buchkapitel

11. European Laws’ Effectiveness in Protecting Personal Data

verfasst von : Ambrogino G. Awesta

Erschienen in: Data Protection Around the World

Verlag: T.M.C. Asser Press

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config
loading …

Abstract

The fuel for the digital economy and business is data. Data is being harvested online on an unprecedented scale. Digital enterprises involved in this practice are thus quite active in collecting all sorts of data through pervasive techniques that track and collect huge amounts of information. This practice has drastic consequences for the privacy and security of such data. In order to ensure the security and privacy of those data, European legislators have recently enacted and adopted different legal instruments. However, a mere adoption of laws does not per se guarantee their effectiveness in achieving the intended goal. This presumption underpins the hypothesis of this research which comes down to the following: the mere adoption of legal tools does not automatically guarantee the enhancement of the privacy and security of personal data against online tracking and targeting. By putting this hypothesis to the test, this research attempts to address the question over the extent to which newly created obligations in recently adopted legal tools can effectively enhance and secure the privacy of users’ data against the tracking and targeting practices of digital enterprises. To this end, this study will firstly elaborate on the meaning and scope of the concept of privacy. Secondly, the applicability of privacy in relation to technologies that are employed for tracking and targeting in cyberspace is scrutinized. In the third place, we will take a closer look at the impact of obligations that are imposed on digital enterprises by the new legal instruments. Finally, a conclusion is drawn over the actual effectiveness of these instruments in protecting and securing the privacy of users against the technologies deployed by digital enterprises.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Fußnoten
1
Rosenberg et al. 2018. How Trump consultants exploited the Facebook data of millions. https://​www.​nytimes.​com/​2018/​03/​17/​us/​politics/​cambridge-analytica-trump-campaign.​html. Accessed 5 July 2018.
 
2
Cadwalladr et al. 2018. Revealed: 50 million Facebook profiles harvested for Cambridge Analytica in major data breach. https://​www.​theguardian.​com/​news/​2018/​mar/​17/​cambridge-analytica-facebook-influence-us-election. Accessed 5 July 2018.
 
3
Smout 2018. Facebook faces small but symbolic UK fine over data protection breaches. https://​uk.​reuters.​com/​article/​us-facebook-privacy-britain/​facebook-faces-small-but-symbolic-uk-fine-over-data-protection-breaches-idUKKBN1K033N. Accessed 5 July 2018.
 
6
Van Alsenoy et al. Draft 25 August 2015 From social media service to advertising network: A critical analysis of Facebook’s Revised Policies and Terms, version 1.3. https://​www.​law.​kuleuven.​be/​citip/​en/​news/​item/​facebooks-revised-policies-and-terms-v1-3.​pdf. Accessed 6 July 2018.
 
7
Serrels 2018. Facebook gave Apple, Samsung access to data about users—and their friends. https://​www.​cnet.​com/​news/​facebook-apple-samsung-cambridge-analytica-user-data-and-their-friends-data/​. Accessed 7 July 2018.
 
8
Englehardt and Narayanan 2016. Online tracking: A 1-million-site measurement and analysis. https://​webtransparency.​cs.​princeton.​edu/​webcensus/​. Accessed 7 July 2018.
 
9
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
 
10
Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union.
 
11
Proposal for a Regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing, Directive 2002/58EC.
 
12
Olmstead v. United States, 277 U.S. 438 (1928), Nos. 493, 532, and 533.
 
13
Ibid.
 
14
Warren and Brandeis 1890, p. 205.
 
15
Henkin 1974, p. 1419.
 
16
Henkin 1974, p. 1425.
 
17
Ibid.
 
18
Ziegler 2007, p. 1.
 
19
Ibid., Whitman 2004, p. 1151.
 
20
Miller and Wertheimer 2010, p. 61.
 
21
Maclean 2009, p. 9.
 
22
Maclean 2009, p. 10.
 
23
Schwartz 2003, p. 2058.
 
24
Ibid.
 
25
Article 6 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
 
26
For a definition of this notion, see Article 4 of Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union.
 
27
Ibid., Recital 63.
 
28
Ibid., Recital 79 and Article 2.
 
29
Ibid., Recital 75.
 
30
Article 4 (11) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
 
31
Recital 161 of the preamble of the Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union.
 
32
Miller and Wertheimer 2010, p. 56.
 
33
Recital 42 of the preamble of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
 
34
Article 29 Working Party, Guidelines on Consent under Regulation 2016/679, adopted on 28 November 2017; as last Revised and Adopted on 10 April 2018, p. 13.
 
35
Ibid., p. 14.
 
36
Ibid.
 
37
Ibid., p. 5.
 
38
Recital 42 of the preamble of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
 
39
Ibid., Recital 65.
 
40
Case C-543/09 Deutsche Telekom AG v Bundesrepublik Deutschland [2011] ECR I-03441.
 
41
Ibid., para 53.
 
42
Ibid, para 62.
 
43
Article 29 Working Party, Guidelines on Consent under Regulation 2016/679, adopted on 28 November 2017; as last Revised and Adopted on 10 April 2018, p. 15.
 
44
Ibid., p. 16.
 
45
Article 4 (4) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
 
46
Ibid., Recital 60.
 
47
Ibid., Recital 50.
 
48
Ibid., Recital 54.
 
49
Explanatory Memorandum to the Proposal for a Regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002/58EC.
 
50
Ibid.
 
51
Ibid.
 
52
Recital 18 of the preamble and Article 9 (1) of the Proposal for a Regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002/58EC.
 
53
Recital 32 of the preamble of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
 
54
Article 29 Working Party, Guidelines on Consent under Regulation 2016/679, adopted on 28 November 2017; as last Revised and Adopted on 10 April 2018, p. 17.
 
55
Ibid., p. 15.
 
56
Ibid., p. 16.
 
57
Recital 24 of the preamble of the Proposal for a Regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002/58EC.
 
58
Ibid.
 
59
Ibid., Articles 9 and 10.
 
60
Ibid., Recital 17.
 
61
Ibid., Recital 19.
 
62
Ibid., Recital 20.
 
63
Recital 60 of the preamble of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
 
64
Article 29 Working Party, Guidelines on Consent under Regulation 2016/679, adopted on 28 November 2017; as last Revised and Adopted on 10 April 2018, p. 21.
 
65
Article 9 (3) of the Proposal for a Regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002/58EC.
 
66
Recital 33 of the preamble of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
 
67
Ibid., Recital 42 and Article 7.
 
68
Ibid., Recital 43.
 
69
Article 29 Working Party, Guidelines on Consent under Regulation 2016/679, adopted on 28 November 2017; as last Revised and Adopted on 10 April 2018, p. 21.
 
70
Article 4 (8) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
 
71
Ibid., Article 4 (7).
 
72
Ibid., Article 24.
 
73
Recital 35 of the Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union.
 
74
Ibid., Recital 44.
 
75
Recital 18 of the Proposal for a Regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002/58EC.
 
76
Article 32 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
 
77
Recital 52 of the preamble of the Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union.
 
78
Ibid., Recital 49.
 
79
Ibid., Recital 60.
 
80
Ibid.
 
81
Ibid., Recital 65.
 
82
Ibid., Recital 75.
 
Literatur
Zurück zum Zitat Maclean A (2009) Autonomy, informed consent and medical law: A relational challenge. Cambridge University Press, Cambridge Maclean A (2009) Autonomy, informed consent and medical law: A relational challenge. Cambridge University Press, Cambridge
Zurück zum Zitat Miller F G, Wertheimer A (eds) (2010) The ethics of consent: Theory and practice. Oxford University Press, Oxford Miller F G, Wertheimer A (eds) (2010) The ethics of consent: Theory and practice. Oxford University Press, Oxford
Zurück zum Zitat Schwartz P M (2003) Property, privacy and personal data, Harv L Rev 117:2056–2128 Schwartz P M (2003) Property, privacy and personal data, Harv L Rev 117:2056–2128
Zurück zum Zitat Warren S D, Brandeis L D (1890) The right to privacy. Harv L Rev 4:193–220 Warren S D, Brandeis L D (1890) The right to privacy. Harv L Rev 4:193–220
Zurück zum Zitat Whitman J Q (2004) The two Western cultures of privacy: Dignity versus liberty. Yale L J 113:6 Whitman J Q (2004) The two Western cultures of privacy: Dignity versus liberty. Yale L J 113:6
Zurück zum Zitat Ziegler K S (ed) (2007) Human rights and private law: Privacy as autonomy. Hart Publishing, Oxford Ziegler K S (ed) (2007) Human rights and private law: Privacy as autonomy. Hart Publishing, Oxford
Metadaten
Titel
European Laws’ Effectiveness in Protecting Personal Data
verfasst von
Ambrogino G. Awesta
Copyright-Jahr
2021
DOI
https://doi.org/10.1007/978-94-6265-407-5_11