scholarly journals What Does it Mean for a Data Subject to Make their Personal Data “Manifestly Public”? An Analysis of GDPR Article 9(2)(e)

2020 ◽  
Author(s):  
Edward Dove ◽  
Jiahong Chen
Keyword(s):  
Personal Data ◽  
Article 9 ◽  
Data Subject

Article 4(11). Consent

2020 ◽  
Author(s):  
Lee A. Bygrave ◽  
Luca Tosoni
Keyword(s):  
Decision Making ◽  
Information Society ◽  
Personal Data ◽  
Individual Decision ◽  
Individual Decision Making ◽  
Article 9 ◽  
Data Portability ◽  
Article 5 ◽  
Data Subject

Article 5 (Principles relating to processing of personal data) (see also recitals 33, 39 and 50); Article 6(1)(a) (Lawfulness of processing on basis of consent) (see too recital 40); Article 7 (Conditions for consent) (see also recital 42); Article 8 (Conditions applicable to child’s consent in relation to information society services) (see too recital 38); Article 9(2)(a) (Processing of special categories of personal data on basis of consent) (see too recital 51); Article 13 (Information to be provided where personal data are collected from the data subject) (see too recitals 60–62); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 17 (Right to erasure) (see too recital 65); Article 20 (Right to data portability) (see too recital 68); Article 22 (Automated individual decision-making, including profiling) (see too recital 71); Article 49(1)(a) (Transfer of personal data to third country or international organisation on basis of consent) (see too recitals 111–112).

Article 20 Right to data portability

2020 ◽  
Author(s):  
Orla Lynskey
Keyword(s):  
Personal Data ◽  
Article 9 ◽  
Data Portability ◽  
Data Subject

Recital 68; Article 6 (Lawfulness of processing); Article 9 (Processing of special categories of personal data); Article 13 (Information to be provided when the personal data are collected from the data subject) (see too recitals 61–62); Article 14 (Information to be provided when the personal data have not been obtained from the data subject); Article 23 (Restrictions) (see further recital 73).

Article 27 Representatives of controllers or processors not established in the Union

2020 ◽  
Author(s):  
Christopher Millard ◽  
Dimitra Kamarinou
Keyword(s):  
Impact Assessment ◽  
Data Protection ◽  
Personal Data ◽  
Supervisory Authority ◽  
Criminal Convictions ◽  
Article 9 ◽  
Judicial Remedy ◽  
Data Subject

Article 3 (Territorial scope) (see also recitals 23–24); Article 4(17) (Definitions); Article 9 (Processing of special categories of personal data) (see also recitals 10, 51–54); Article 10 (Processing of personal data relating to criminal convictions and offences) (see also recital 97); Article 13 (Information to be provided where personal data are collected from the data subject) and Article 14 (Information to be provided where personal data have not been obtained from the data subject) (see also recitals 60–62); Article 30 (Records of processing activities) (see also recital 82); Article 31 (Cooperation with the supervisory authority); Article 35 (Data protection impact assessment) (see also recitals 89–93); Article 36 (Prior consultation) (see also recital 94); Article 79 (Right to an effective judicial remedy against a controller or processor) (see also recital 145).

Article 30 Records of processing activities

2020 ◽  
Author(s):  
Waltraut Kotschy
Keyword(s):  
Impact Assessment ◽  
Data Protection ◽  
Personal Data ◽  
Data Flows ◽  
Right Of Access ◽  
Data Subject ◽  
General Conditions

Article 13 (Information to be provided where personal data are collected from the data subject); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 15 (Right of access by the data subject); Article 24 (Responsibility of the controller); Article 32 (Security of processing); Article 35 (Data protection impact assessment); Article 37 (Designation of a data protection officer); Article 49 (Derogations for specific situations concerning transborder data flows); Article 83 (General conditions for imposing administrative fines)

Article 9 Processing of special categories of personal data

2020 ◽  
Author(s):  
Ludmila Georgieva ◽  
Christopher Kuner
Keyword(s):  
Decision Making ◽  
Data Protection ◽  
Personal Data ◽  
Genetic Data ◽  
Biometric Data ◽  
Individual Decision Making ◽  
Vital Interest ◽  
Data Portability ◽  
Definition Of ◽  
Data Subject

Article 4(1) (Definition of personal data); Article 4(2) (Definition of processing); Article 4(11) (Definition of consent); Article 4(13) (Definition of genetic data, see also recital 34); Article 4(14) (Definition of biometric data); Article 4(15) (Definition of data concerning health, see also recital 35); Article 6(4)(c) (Lawfulness of processing, compatibility test) (see too recital 46 on vital interest); Article 13(2)(c) (Information to be provided where personal data are collected from the data subject); Article 17(1)(b), (3)(c) (Right to erasure (‘right to be forgotten’)); Article 20(1)(a) (Right to data portability); Article 22(4) (Automated individual decision-making, including profiling); Article 27(2)(a) (Representatives of controllers or processors not established in the Union); Article 30(5) (Records of processing activities); Article 35(3)(b) (Data protection impact assessment) (see too recital 91); Article 37(1)(c) (Designation of the data protection officer) (see too recital 97); Article 83(5)(a) (General conditions for imposing administrative fines).

Conditions of the Right to Erasure

2020 ◽  
pp. 196-274
Author(s):  
Jef Ausloos
Keyword(s):  
Public Interest ◽  
Freedom Of Expression ◽  
Personal Data ◽  
Historical Research ◽  
Legal Obligation ◽  
The Public ◽  
The Third ◽  
Legal Provisions ◽  
The Right ◽  
Data Subject

This chapter zooms in on Article 17 GDPR, on the right to erasure (‘right to be forgotten’). It meticulously dissects the three paragraphs of this provision. The first paragraph lists six rights-to-erasure triggers which can be summarized as: (a) purpose expiration; (b) withdrawal of consent; (c) right to object; (d) unlawful processing; (e) legal obligation; and (f) withdrawal of consent by minors in the online environment. The second paragraph comprises an odd extension of the right to erasure, enabling data subjects to request that controllers who have made the personal data public, communicate potential erasure to anyone else processing that same personal data. The third paragraph lists five exemptions to the right to erasure, summarized as: (a) freedom of expression and information; (b) legal obligation or task carried out in the public interest or official authority; (c) public interest in the area of public health; (d) public interest archiving, scientific and historical research, or statistical purposes; and (e) legal claims. What becomes clear right away is how both the right-to-erasure’s triggers and exemptions all refer to other legal provisions in and outside the GDPR. As such, the right to erasure can be seen as a central hub in the GDPR, bringing together key data protection principles from the perspective of data subject empowerment.

Article 19 Notification obligation regarding rectification or erasure of personal data or restriction of processing

2020 ◽  
Author(s):  
Gloria González Fuster
Keyword(s):  
Public Interest ◽  
Personal Data ◽  
Historical Research ◽  
Information Communication ◽  
The Public ◽  
Right To Be Forgotten ◽  
Definition Of ◽  
Data Subject

Article 4(9) (Definition of ‘recipient’); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject); Article 16 (Right to rectification), Article 17(1) (Right to erasure (‘right to be forgotten’)); Article 18 (Right to restriction of processing); Article 58(2)(g) (Powers of supervisory authorities); Article 89(3) (Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes).

22. Data Protection and Data Exclusivity

2019 ◽  
pp. 497-512
Author(s):  
Justine Pila ◽  
Paul L.C. Torremans
Keyword(s):  
Data Protection ◽  
Patent Protection ◽  
Personal Data ◽  
Pharmaceutical Sector ◽  
Data Exclusivity ◽  
The Law ◽  
Data Subject

This chapter examines the law on data protection and data exclusivity. It focuses on the new GDPR Regulation. It covers rules on lawful processing of personal data, on the security of the processing, on the transparency of the processing, and on promoting compliance. It also discusses the rights of the data subject, the transfer of personal data to third countries, and the period of data exclusivity granted to the pharmaceutical sector independent of any form of patent protection.

Sign in / Sign up

Export Citation Format

Share Document