Search

This article emphasizes the crucial significance of personal data and the potential dangers arising from its unauthorized processing, which can violate an individual's basic rights and freedoms. To address these worries, the European Union has implemented a comprehensive regulatory structure, widely recognized as the General Data Protection Regulation (GDPR). In the domain of data privacy and security, personal data is defined as encompassing any information with the capacity to identify an individual, whether it be anonymized, encrypted, or pseudonymized data. The regulatory purview of GDPR spans all modes of data processing, automated or manual, and remains indifferent to the storage medium or technology employed. Illustrative examples of personal data comprise an individual's name, identification number (like a CNP), location data (such as GPS coordinates), online identifiers (for instance, specific types of cookies), and a diverse array of attributes pertaining to an individual's physical, physiological, genetic, psychological, economic, cultural, or social identity. This classification also encompasses information such as IP addresses, email addresses, or residential addresses. It is of utmost importance to acknowledge that personal data, whether examined in isolation or in conjunction with other data elements, retains the potential to unveil the identity of an individual. This paper expands the scope of analysis to critically assess the multifaceted implications of GDPR within the contemporary landscape of data privacy and security, with a specific focus on its relevance within the realm of management practices. The examination encompasses an indepth exploration of the foundational principles of GDPR, its legal framework, and its global impact across businesses, individuals, and regulatory bodies. Additionally, the study delves into the complexities associated with GDPR compliance, illuminating the evolving dynamics of data protection within an increasingly digitized world. It emphasizes the essential role played by effective management strategies in addressing these challenges. [ABSTRACT FROM AUTHOR]

E-government and electronic communication have been part of the Hungarian legal system for more than two decades. This paper describes the process by which these legal institutions have been shaped and developed through domestic legislation, in the context of the European Union's Information and Communications Technology and eGovernment policies. Since the Bangemann report in 1994, the European Union has given high priority to the development of e-public services and e-government, and this has placed a heavy burden on all Member States to implement the rules. In Hungary, the directed wayfinding started in the early 2000s, which, with some slowdowns, continues to this day. Two decades may not be a long time if we look at individual legal institutions, but in this case, it is a dynamic period full of paradigm shifts that justifiably deserves academic interest. In our study, we have broken down domestic regulation into six distinct periods, in parallel with EU regulation. If the application of domestic rules are taken into account and the results we have achieved in the use of e-services, it can be seen that we are still very far from even the EU average. We already have what appears to be a stable and coherent set of rules on which the environment of the e-services can be built, but we fear that this is still a very long way off. [ABSTRACT FROM AUTHOR]

Purpose: The purpose of this paper is to examine the relationship between the legal obligation of European libraries to ensure the transparent personal data processing and respect for user privacy. This paper will examine how libraries use privacy notices on websites to communicate with patrons about the processing of personal data and in what manner have libraries been guided by applicable transparency guidelines. Design/methodology/approach: The method used is the analysis of privacy policies and other privacy documents found on the websites of national libraries. The analysis sample includes documents of 45 European national libraries, 28 out of those being national libraries of European Union (EU) Member States. The elements for this analysis are derived from the mandatory elements of the General Data Protection Regulation and the recommendations of the WP29/EDPB Transparency Guidelines. Findings: The findings suggest that European national libraries largely adhere to EU data protection standards. In total, 60% libraries use a separate privacy page, and 53% of the EU Member State national libraries websites managed to comply with publishing all necessary data protection information in a way recommended by the Guidelines, compared to 47% of non-Member State national libraries. Originality/value: The research contributes to the understanding of the importance of the principle of transparency and its operationalization. [ABSTRACT FROM AUTHOR]

Considering that the base erosion and the profit shifting practiced by multinationals could deprive governments of their fair share in taxes and, as a consequence of the financial resources needed to achieve the sustainable development goals ('SDGs'), governments have started to be interested in the implementation of transfer pricing regulations. The objective of the paper is to analyze the transfer pricing regulations and practices adopted by the EU countries that record a good progress in terms of SDGs vs. EU countries that record a moderate progress in this respect. The results of the study show that the strictness of the transfer pricing system influences the progress regarding the achievement of the SDGs. More exactly, the countries which record a good progress in achieving SDGs have, in general, a stricter transfer pricing system. In order to increase the strictness of the transfer pricing system and the progress in terms of SDGs, countries could implement regulation which envisage: the preparation of an annual transfer pricing documentation; the preparation of a documentation on three levels according to BEPS 13; the adoption of certain measures in order to increase the number of APAs, MAPs and transfer pricing audits; imposing of penalties. [ABSTRACT FROM AUTHOR]

Privacy and protection of personal data on the Internet have become issues of public concern in Indonesia. There is growing public distrust of institutions that manage personal data. Poor management of personal data provides a fertile ground for cybercrime and lack of accountability, especially in the context of the new digital economy. In response, the Indonesian Communication Ministry drafted the Personal Data Protection Bill, which has been submitted to the parliament. This paper analyzes the PDP Bill to determine whether it meets international data privacy standards. The EU GDPR is selected as the benchmark for assessment as it is regarded as the toughest privacy law worldwide. The study finds that Indonesian citizens do not have the same level of protection as their European counterparts. Nonetheless, the implementation of this bill when it becomes law will lead to a high level of personal data protection in the new digital economy. [ABSTRACT FROM AUTHOR]

The paper deals with the issue of using genetic tests for insurance purposes. After introductory remarks, the paper provides an overview of various international and European legal sources both on data protection in general, and on the protection of data from genetic tests. The paper then researches into different solutions proposed by comparative law concerning the use of data from genetic tests for insurance purposes. Some solutions explicitly ban the use of genetic tests for insurance purposes (France, Austria, Portugal, Croatia), while others adopt a more liberal approach, allowing for its use (the USA, the UK, Germany). It is concluded that personal data protection does not exclude the possibility using data from genetic tests for insurance purposes, which proves the need for a common EU approach to the issue. [ABSTRACT FROM AUTHOR]

The inception of the African Continental Free Trade Area (AfCFTA) in 2018, an event which redefined the institutional dimensions of Africa-European relations, is at the centre of historic normative debates between two dominant contending schools on the imperatives of African unity. While Pan-Africanists advocate for African unity as a strategy to rupture trade relations between the two continents in question, Afro-European integrationists assert that the quest for African unity should not be divorced from deeper exchanges between Africa and Europe. The AfCFTA is embedded in an ensemble of Africa-EU free trade institutions and therefore is bound to be perceived by Pan-Africanists as Africa yielding to European domination and mobilized by Afro-European integrationists as a vindication of the validity of their assertions. With the aid of Bob Jessop's regulation analysis, Radhika Desai's concept of combined development, and my notion of syndic neo-corporatism as well as the method of sequence analysis, this paper makes a case beyond the normative perspectives of the two schools. It does so in order to demonstrate that while Pan-Africanists miss the point that African elites instrumentally value the AfCFTA as a rent extraction scheme, Afro-European integrationists fail to recognize that the AfCFTA fits the strategic quest of the EU to prevail over its global competitors. [ABSTRACT FROM AUTHOR]

This paper identifies an innovative mechanism of how the EU's internal policies could lead to policy adaptations within international institutions. Having authority over the single market, the EU regulates important market actors whose behaviour is oftentimes crucial for the effectiveness of global cooperation projects. By intentionally or unintentionally creating a vertical regulatory conflict with an international institution, the EU might influence the behaviour of European market actors in a way that it undermines the effectiveness of the international institution. To preserve its effectiveness, the external institution is forced to adapt towards European internal policies to dissolve conflict and to enable mutual compliance for European market actors. The potential of the mechanism is explored in two cases: The EU's externalisation of data protection to the Internet Corporation for Assigned Names and Numbers (ICANN) and the externalisation of European fundamental rights to the UN Security Council. The process tracing finds that the EU is able to carve out authority from international institutions under specific conditions. [ABSTRACT FROM AUTHOR]

This article discusses the legal implications of a novel phenomenon, namely, digital reincarnations of deceased persons, sometimes known as post-mortem avatars, deepfakes, replicas, holographs, or chatbots. To elide these multiple names, we use the term 'ghostbots'. The piece is an early attempt to discuss the potential social and individual harms, roughly grouped around notions of privacy (including post-mortem privacy), property, personal data and reputation, arising from ghostbots, how they are regulated and whether they need to be adequately regulated further. For reasons of space and focus, the article does not deal with copyright implications, fraud, consumer protection, tort, product liability, and pornography laws, including the non-consensual use of intimate images ('revenge porn'). This paper focuses on law, although we fully acknowledge and refer to the role of philosophy and ethics in this domain. We canvas two interesting legal developments with implications for ghostbots, namely, the proposed EU Artificial Intelligence (AI) Act and the 2021 New York law amending publicity rights to protect the rights of celebrities whose personality is used in post-mortem 'replicas'. The latter especially evidences a remarkable shift from the norm we have chronicled in previous articles of no respect for post-mortem privacy to a growing recognition that personality rights do need protection post-mortem in a world where pop stars and actors are routinely re-created using AI. While the legislative motivation here may still be primarily to protect economic interests, we argue it also shows a concern for dignitary and privacy interests. Given the apparent concern for the appropriation of personality post-mortem, possibly in defiance or ignorance of what the deceased would have wished, we propose an early solution to regulate the rise of ghostbots, namely an enforceable 'do not bot me' clause in analogue or digital wills. [ABSTRACT FROM AUTHOR]