Data Protection Authorities and Information Technology

Abstract

The ability of data protection authorities (DPAs) to gain and deploy sufficient knowledge of new technological developments in their regulation of personal-information practices is an important consideration now and for the future. However, DPAs' capacity to keep abreast of these developments has been questionable, and improvements in this are a matter of concern, especially given DPAs' task requirements under the European Union's (EU) General Data Protection Regulation (GDPR). This article reports the findings of a recent survey of EU DPAs that explore the problems they have in comprehending new technologies and how they are dealing with them.

Analysis Principles of Personal Data Protection on COVID-19 Digital Contact Tracing Application: PeduliLindungi Case Study

“…55 Therefore, the existence of this body is vital because it can obtain and disseminate adequate knowledge about new technological developments in personal data protection practices to ensure security both now and in the future. 56 A concrete example is the EU in anticipating surveillance in the form of contact tracing applications that at the beginning of the emergence of the 2) Data Protection Officer (DPO) When implemented, the system at each data controller is assisted by an official acting as a personal data protection officer to perform electronic identification and electronic authentication when reporting and updating personal data. 60 A DPO is an official appointed and employed in a public agency or company to oversee regulations on personal data protection.…”

“Now We Are Struggling at Least”: Change & Continuity of Surveillance in Post-Communist Societies from the Perspective of Data Protection Authorities

“…The rationale for examining only post-communist societies is that they share cultural experiences of communism as a political system. Other researchers have studied the more general conditions for carrying out data protection in Europe (e.g., Raab and Szekely 2017). Future research could build on this study and compare post-communist societies with other post-authoritarian societies.…”

“…Data protection authorities are independent regulatory bodies that have a mandate to monitor and supervise the enforcement of data protection laws. They supervise the use of personal data, inform the public about privacy and surveillance, rectify illegal surveillance practices, and handle complaints (Jóri 2015;Raab and Szekely 2017). Among other duties, they give opinions on legal texts, provide advice and recommendations regarding data protection, publish guidelines relating to data protection laws, and cooperate with similar authorities in other countries.…”

“…Among other duties, they give opinions on legal texts, provide advice and recommendations regarding data protection, publish guidelines relating to data protection laws, and cooperate with similar authorities in other countries. The diversity of their activities makes it important that DPAs possess comprehensive knowledge on data protection in their countries, although Raab and Szekely (2017) have shown that they rarely do so. On the contrary, DPAs typically do not have sufficient resources to manage the wealth of responsibilities placed on them by data protection regulations.…”

“…Research into the role of DPAs does not specifically address post-communist countries. Rather, it occasionally touches upon these countries as part of a larger comparative study (Raab and Szekely 2017;Schütz 2012). To date, the historical aspect of data protection remains unexplored, which is unfortunate in light of the ongoing shift to more authoritarian politics discussed above.…”