2018
DOI: 10.2139/ssrn.3081069
|View full text |Cite
|
Sign up to set email alerts
|

When Data Protection by Design and Data Subject Rights Clash

Abstract: and others (n 2). 9 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ 2016 L 119/1 (hereafter 'GDPR').

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
2
1
1
1

Citation Types

0
25
0

Year Published

2019
2019
2022
2022

Publication Types

Select...
5
2
1
1

Relationship

1
8

Authors

Journals

citations
Cited by 17 publications
(25 citation statements)
references
References 4 publications
(1 reference statement)
0
25
0
Order By: Relevance
“…It should be remembered, however, that the usability of encrypted data is very limited and thus the purpose of transferring the data may be thwarted as a result. 105 Moreover, the effectiveness of encryption as a safeguard relies on the belief that US intelligence agencies will not be able to penetrate the encryption.…”
Section: The Implications Of Schrems IImentioning
confidence: 99%
“…It should be remembered, however, that the usability of encrypted data is very limited and thus the purpose of transferring the data may be thwarted as a result. 105 Moreover, the effectiveness of encryption as a safeguard relies on the belief that US intelligence agencies will not be able to penetrate the encryption.…”
Section: The Implications Of Schrems IImentioning
confidence: 99%
“…A major caveat is that DPIA results are not required to be publicly disclosed 93 . For this reason, legal experts have suggested giving third parties with algorithmic expertise (i.e., academic data scientists) information rights to assess the results of DPIAs and convey the information to individual data subjects 94 .…”
Section: Governments and Regulatorsmentioning
confidence: 99%
“…browsing-behaviour, voice-assistant data), claiming it would be too burdensome and/or they do not have a duty to deliver the data in question. 19 Considering the fact that these cases relate to personal data that is known to be collected by the respective companies, one may question the efficacy of using GDPR transparency measures for more exploratory purposes. Indeed, it might be hard to impossible to establish a response to an access request is (deliberately) incomplete.…”
Section: Break Through Information Monopolies (But Security Risks)mentioning
confidence: 99%