Search

The paper deals with the issue of using genetic tests for insurance purposes. After introductory remarks, the paper provides an overview of various international and European legal sources both on data protection in general, and on the protection of data from genetic tests. The paper then researches into different solutions proposed by comparative law concerning the use of data from genetic tests for insurance purposes. Some solutions explicitly ban the use of genetic tests for insurance purposes (France, Austria, Portugal, Croatia), while others adopt a more liberal approach, allowing for its use (the USA, the UK, Germany). It is concluded that personal data protection does not exclude the possibility using data from genetic tests for insurance purposes, which proves the need for a common EU approach to the issue. [ABSTRACT FROM AUTHOR]

First of all, this paper tries to explain the principles of the General Data Protection Regulation (EU) 2016/67 of April 27 2016, which entered into the force on May 25 2018. Special attention was given to the territorial scope, and the influence on third countries, considering that the changes introduced by the Regulation are among the most important and at the same time the most controversial. Of course, this aspect of the Regulation is particularly important for Bosnia and Herzegovina, having in mind the obligations arising from the Stabilization and Association Agreement and the general economic, political and security orientation towards the European Union. Furthermore, in this paper, relation between protection of personal data and the right to privacy is considered, in accordance with the provisions of the Regulation and the Convention on Human Rights as well as Charter of Fundamental Rights of the European Union and in a very concise form relevant practice of the European Court of Human Rights in Strasbourg. Finally, this article suggests that, even though the Regulation is considered to be one of the most important and complex parts of the European Union legislation, which touches different spheres of life and society, and therefore the rights, respect for fundamental human rights and consistent application of the Convention in significant part results in respect for fundamental principle and essence of the Regulation. [ABSTRACT FROM AUTHOR]

Never before has cybersecurity been as significant for societies as today; its importance is still on the rise as people rely on computer systems every day. Recently, the ever-growing issues of personal data being stolen or misused have been addressed by several legal regulations, the most significant of them being the General Data Protection Regulation (GDPR). The paper deals with a specific cybersecurity measure, malware/stegomalware detection. This solution, which is meant to protect personal data from being used in a way that breaks the GDPR, has to be GDPR-compliant itself. This work describes the GDPR regulation in detail, indicates the specific challenges that may arise when applying malware/stegomalware solutions, and provides several recommendations for ensuring compliance with the regulation. [ABSTRACT FROM AUTHOR]

This paper explains how the concept of personal data should be delimited. Certainty on this matter is crucial, as it determines the material scope of the data protection obligations. The primary boundary delimiting the scope of personal data is the requirement that personal data 'relate to' an individual. The courts of the UK and the EU have sought to delineate this boundary, but there are serious difficulties in the present approaches that have emerged thus far. Two possible ways forward are suggested, taking into account the implications of the direct application of the GDPR in the UK. [ABSTRACT FROM AUTHOR]

This paper introduces the strategic approach to regulating personal data and the normative foundations of the European Union's General Data Protection Regulation ('GDPR'). We explain the genesis of the GDPR, which is best understood as an extension and refinement of existing requirements imposed by the 1995 Data Protection Directive; describe the GDPR's approach and provisions; and make predictions about the GDPR's implications. We also highlight where the GDPR takes a different approach than U.S. privacy law. The GDPR is the most consequential regulatory development in information policy in a generation. The GDPR brings personal data into a detailed regulatory regime, that will influence personal data usage worldwide. Understood properly, the GDPR encourages firms to develop information governance frameworks, to in-house data use, and to keep humans in the loop in decision making. Companies with direct relationships with consumers have strategic advantages under the GDPR, compared to third party advertising firms on the internet. To reach these objectives, the GDPR uses big sticks, structural elements that make proving violations easier, but only a few carrots. The GDPR will complicate and restrain some informationintensive business models. But the GDPR will also enable approaches previously impossible under less-protective approaches. [ABSTRACT FROM AUTHOR]