Data Protection Law

The rapid development of information technology has exacerbated the need for robust personal data protection, the right to which is safeguarded by both European Union (EU) and Council of Europe (CoE) instruments. Safeguarding this important right entails new and significant challenges as technological advances expand the frontiers of areas such as surveillance, communication interception and data storage. This handbook is designed to familiarise legal practitioners not specialised in data protection with this emerging area of the law. It provides an overview of the EU’s and the CoE’s applicable legal frameworks. It also explains key case law, summarising major rulings of both the Court of Justice of the European Union and the European Court of Human Rights. In addition, it presents hypothetical scenarios that serve as practical illustrations of the diverse issues encountered in this ever-evolving field.

Practically every organisation in the world processes personal data. European data protection law imposes a series of requirements designed to protect individuals against the risks that result from the processing of their data. It also distinguishes among different types of actors involved in the processing and sets out different obligations for each type of actor. The most important distinction in this regard is the distinction between 'controllers' and 'processors'. This book seeks to determine whether EU data protection law should continue to maintain its current distinction.

This book provides a comparison and practical guide for academics, students, and the business community of the current data protection laws in selected Asia Pacific countries (Australia, India, Indonesia, Japan Malaysia, Singapore, Thailand) and the European Union. The book shows how over the past three decades the range of economic, political, and social activities that have moved to the internet has increased significantly. This technological transformation has resulted in the collection of personal data, its use and storage across international boundaries at a rate that governments have been unable to keep pace. The book highlights challenges and potential solutions related to data protection issues arising from cross-border problems in which personal data is being considered as intellectual property, within transnational contracts and in anti-trust law. The book also discusses the emerging challenges in protecting personal data and promoting cyber security. The book provides a deeper understanding of the legal risks and frameworks associated with data protection law for local, regional and global academics, students, businesses, industries, legal profession and individuals.

"Canada has distinguished itself as a pioneer in the oversight of privacy and data protection through a co-regulatory approach that balances industry initiative with government protection of consumer preferences and citizen concerns. Incorporating key elements of the European and American approaches, Canada is the first North American country to enact comprehensive data protection regulation that sets appropriate standards for privacy practices across the country. In recognition of Canada's unique position, the International Association of Privacy Professionals (IAPP) has created the first credentialing program in Canadian privacy. The Certified Information Privacy Professional/Canada (CIPP/C) is the first certification to be designed by Canadian privacy officers for the benefit of information management professionals who work in the Canadian private sector. Canadian Privacy: Data Protection Law and Policy for the Practitioner is the official reference for the CIPP/C program. It brings into focus all of the notable Canadian data protection laws and standards including: The Privacy Act of Canada; The Personal Information and Electronic Documents Act ("PIPEDA"); The Personal Information Protection Acts of Alberta and British Columbia (the "PIPAs"); The Personal Health Information Protection Act of Ontario ("PHIPA"); The private sector Act of Québec ("Loi sur la protection des rensiegnments personeels dans le secrteur privé [sic]"); the Generally Acceptable Privacy Principles ("GAPP"). Canadian Privacy is a valuable reference for Canadian corporate privacy officers as well as any professional who is responsible for the information risk management, information security, information auditing or legal compliance needs of clients or organizations based in Canada."--P. [4] of cover.

This book provides a snapshot of privacy laws and practices from a varied set of jurisdictions in order to offer guidance on national and international contemporary issues regarding the processing of personal data and serves as an up-to-date resource on the applications and practice-relevant examples of data protection laws in different countries. Privacy violations emerging at an ever-increasing rate, due to evolving technology and new lifestyles linked to an intensified online presence of ever more individuals, required the design of a novel data protection and privacy regulation. The EU General Data Protection Regulation (GDPR) stands as an example of a regulatory response to these demands. The authors included in this book offer an in-depth analysis of the national data protection legislation of various countries across different continents, not only including country-specific details but also comparing the idiosyncratic characteristics of these national privacy laws to the GDPR. Valuable comparative information on data protection regulations around the world is thus provided in one concise volume. Due to the variety of jurisdictions covered and the practical examples focused on, both academics and legal practitioners will find this book especially useful, while for compliance practitioners it can serve as a guide regarding transnational data transfers. Elif Kiesow Cortez is Senior Lecturer at the International and European Law Program at The Hague University of Applied Sciences in The Netherlands.

The author evaluates the costs and/or gains and the interference (positive or negative) in the commercial, public administrative and social spheres that data protection laws have the potential to create, with numerous references to legislation and administrative decision making in a wide variety of jurisdictions.

This book on privacy and data protection offers readers conceptual analysis as well as thoughtful discussion of issues, practices, and solutions. It features results of the seventh annual International Conference on Computers, Privacy, and Data Protection, CPDP 2014, held in Brussels January 2014. The book first examines profiling, a persistent core issue of data protection and privacy. It covers the emergence of profiling technologies, on-line behavioral tracking, and the impact of profiling on fundamental rights and values. Next, the book looks at preventing privacy risks and harms through impact assessments. It contains discussions on the tools and methodologies for impact assessments as well as case studies. The book then goes on to cover the purported trade-off between privacy and security, ways to support privacy and data protection, and the controversial right to be forgotten, which offers individuals a means to oppose the often persistent digital memory of the web. Written during the process of the fundamental revision of the current EU data protection law by the Data Protection Package proposed by the European Commission, this interdisciplinary book presents both daring and prospective approaches. It will serve as an insightful resource for readers with an interest in privacy and data protection.