Consent for Data Processing Under the General Data Protection Regulation: Could 'Dynamic Consent' Assist Researchers?

2018 ◽  
Author(s):  
Megan Prictor ◽  
Harriet Teare ◽  
Jessica Bell ◽  
Mark J. Taylor ◽  
Jane Kaye
2021 ◽  
Vol 11 (22) ◽  
pp. 10574
Author(s):  
Sung-Soo Jung ◽  
Sang-Joon Lee ◽  
Ieck-Chae Euom

With the growing awareness regarding the importance of personal data protection, many countries have established laws and regulations to ensure data privacy and are supervising managements to comply with them. Although various studies have suggested compliance methods of the general data protection regulation (GDPR) for personal data, no method exists that can ensure the reliability and integrity of the personal data processing request records of a data subject to enable its utilization as a GDPR compliance audit proof for an auditor. In this paper, we propose a delegation-based personal data processing request notarization framework for GDPR using a private blockchain. The proposed notarization framework allows the data subject to delegate requests to process of personal data; the framework makes the requests to the data controller, which performs the processing. The generated data processing request and processing result data are stored in the blockchain ledger and notarized via a trusted institution of the blockchain network. The Hypderledger Fabric implementation of the framework demonstrates the fulfillment of system requirements and feasibility of implementing a GDPR compliance audit for the processing of personal data. The analysis results with comparisons among the related works indicate that the proposed framework provides better reliability and feasibility for the GDPR audit of personal data processing request than extant methods.


2018 ◽  
Vol 25 (2) ◽  
pp. 36-41
Author(s):  
Cassandra Yuill

AbstractIn May 2018, the European Union (EU) introduced the General Data Protection Regulation (GDPR) with the aim of increasing transparency in data processing and enhancing the rights of data subjects. Within anthropology, concerns have been raised about how the new legislation will affect ethnographic fieldwork and whether the laws contradict the discipline’s core tenets. To address these questions, the School of Oriental and African Studies (SOAS) at the University of London hosted an event on 25 May 2018 entitled ‘Is Anthropology Legal?’, bringing together researchers and data managers to begin a dialogue about the future of anthropological work in the context of the GDPR. In this article, I report and reflect on the event and on the possible implications for anthropological research within this climate of increasing governance.


2018 ◽  
Vol 18 (2) ◽  
pp. 76-79 ◽  
Author(s):  
Susan Doe

AbstractIn this article Susan Doe reports from the perspective of the law firm sector on the progress towards the introduction of the General Data Protection Regulation that became automatically ‘live’ on 25 May 2018. She provides an introduction to the Regulation, highlights some practicalities for law firms when considering compliance with GDPR and offers a ‘to do’ list with reference to the record of data processing, training needs, security, and contracts and documentation. She also provides advice on what should be considered especially in respect of client demands.


Author(s):  
Felipe Palhares

After several years discussing the creation of a comprehensive data protection law, Brazil finally has its first law that specifically addresses this area -and that will be a game-changer on regulating data processing activities in the country and abroad – in force. Although Brazil's data protection law bears many similarities with the European Union General Data Protection Regulation, it also deviates from its European counterpart in several aspects. This chapter intends to provide an overview of the background relating to laws that carry privacy and data protection provisions in their core and to thoroughly analyze Brazil's new data protection law.


Sign in / Sign up

Export Citation Format

Share Document