Search

The widespread use of digital technologies in banking allows banks to obtain and analyse huge amounts of data from different communication channels. While this phenomenon is conducive to improving the quality of services it also increases the risk of privacy breaches. The aim of this study is to identify what factors determine consumer acceptance of banks’ use of public access personal data found on social media accounts. The results indicate the importance of the financial incentive and consumers’ assessment of banks’ information activities regarding the processing of personal data. Determinants relating to the technological sophistication of respondents were also found to be significant, with a particular focus on the ethical evaluation of decisions made by Artificial Intelligence algorithms. The results of the work may be used by banks in practice to adapt the area of personal data management to the requirements of e-privacy and Trustworthy Artificial Intelligence.

Nowadays, effective protection of personal data is one of the fundamental issues of a democratic state under the rule of law. Therefore, the legislator should be very precise about the principles and standards of data processing. In the last few decades, in particular, the development of new technologies, digitalisation and the increase in the need for electronic communication has become evident, which leads to the adoption of appropriate regulations for the handling of personal data. In addition, the EU legislator has introduced the General Data Protection Regulation (GDPR) in order to harmonise the regulations of EU Member States regarding the protection of personal data. This provides a framework for the proper functioning of legal provisions across the European Union regarding the handling of personal data of its citizens. The aim of the article is to identify the legal changes resulting from the Personal Data Protection Regulation, with a particular focus on the persons to which they apply and then to analyse the regulation of ‘the right to be forgotten’. In the first part of the article, attention is drawn to the way personal data are processed and the scope of obligations incumbent on data controllers. This is because data controllers are, together with the personal data protection officer, responsible for recording data processing activities, including ongoing monitoring and responding to situations of inaccurate data processing. The second part focuses on the right to be forgotten and the assessment of this entitlement in the perspective of Regulation 2016/679. The research methods include an analysis of legal acts, at the same time using the subject literature.

With the development of modern data processing, mining and collection technologies, various companies and institutions will have more opportunities to make these data operations faster and more efficiently. From the economic perspective, processing personal data is evidently lucrative and companies would therefore like to obtain as much data as possible. This paper analyses and summarizes existing and emerging social and economic trends, implications and issues caused by clashes between European legislation on personal data protection (the GDPR) and current data processing practices. Utilizing both quantitative and qualitative data, the article attempts to scrutinize the implications of the conflict between the rising demand for privacy and personal data protection on the one hand and the ever-growing need to process and store personal data, especially by commercial organizations, on the other. Analysing databases, legislation, reports, statistical data and surveys, the paper attempts to provide an estimate of the value of personal data and the consequences of poor handling of personal data.

Personal data protection is one of the important areas of the EU’s operation and the general public is especially aware of the General Data Protection Regulation (GDPR). However, personal data protection has been an issue in the EU for a long time. The Court of Justice of the European Union (CJEU) plays a major role in personal data protection as their function is to interpret EU law and thus also EU legislation related to personal data protection. Until now, research papers have tackled specific issues related to interpreting EU legislation or analyses of specific decisions made by the CJEU. However, no comprehensive empirical legal study has been published so far which would evaluate the decision-making of the CJEU in the area of personal data protection using a combination of quantitative and qualitative methods. Therefore, no analysis has been carried out to determine how many decisions of the CJEU have been related to personal data protection, how their number has increased, or which participants and from which areas have participated in the proceedings. The results of the analysis presented here can be used as a basis for studying the future development of the CJEU’s decision-making in the area of personal data protection in relation to digitization and especially to the COVID-19 pandemic, which undoubtedly has contributed to a significant increase in online communication, posing new challenges towards a more efficient personal data protection in the online world.

(Series Information) European Papers - A Journal on Law and Integration, 2021 6(3), 1363-1365 | European Forum Highlight of 24 February 2022 | (Abstract) The evolution of an increasingly globalized market has resulted in the expansion of international trade through transnational data flows. Standard contractual clauses (SCC) are one of the most commonly used legal bases for transferring personal data beyond EU borders. The new Decision of the Commission on SCC represents a major innovation for the transfers of data. This Highlight offers an overview of the model clauses and addresses some of its new features, especially as to the relationship with art. 3(2) of Regulation (EU) 679/2016.

Health institutions are places where personal health data is intensively processed and maintained. These data are collected and processed during each examination and treatment. All kinds of information regarding the mental and physical health of a person may be considered within the field of personal health data. Hence, there are some data that every patient has to share with the administration in the process of examination and treatment. This data may be related to the health and sexuality of the individual and socio-demographic. It has become easier to obtain and process the personal health data. The protection of information is regulated as a fundamental right in various agreements at international level. With the development of information technology, it is necessary to provide personal data security and to take comprehensive protection measures by the administration. This review article aims to to explain the legal responsibility of the administration in the light of the decisions of the European Court of Human Rights and the Supreme Administrative Court by presenting the importance of ensuring privacy and the protection of personal health data in health care providers. In addition, suggestions for the protection of personal health data were presented during the conduct of administrative health activities.

The rapid development of computer technology over the past decades has brought about countless benefits across industries and social benefits as well—constant interpersonal connectivity is facilitated through numerous communication channels and social media outlets, energy-producing enterprises employ complex machinery management systems for increased efficiency, ease of access and safety, hedge funds make use of high-frequency trading algorithms to engage in trades happening at a fraction of a second, while medical professionals use predictive technologies to diagnose diseases and forecast viral outbreaks. Widespread adoption of technology necessitated the creation of regulatory frameworks that would ensure the safeguarding of rights and regulatory and judicial supervision over the exploitation of high technology. one such framework is the Gdpr, created due to the need for a comprehensive, contemporary legal regime governing the processing of personal data in a time when such data has become a commodity that is traded and sold in return for services or financial gain. However, in the authors’ view, the Gdpr suffers in terms of efficacy in the context of artificial intelligence-based technologies, and full compliance of data controllers and processors employing such technologies is unlikely to be achieved, particularly in regards to the right to information, the general principle of transparency and the right to erasure. The article provides an overview of these issues, including a discussion on the movement towards a regime of data ownership, and proposes legislative amendments as an effective method of mitigating these drawbacks.

The study seeks to highlight the most important legal guarantees provided by the law 18-07 on the protection of natural persons in the field of processing personal data, which stand out the gravity of the means of modern information technology of private life when the process of collection and storage of nominal data and operation and also when extracting this information from the memory of the intelligent system and its delivery to others, regardless of whether it is handled by a public or private person or even a natural person. It is therefore necessary to protect the rights of the person concerned with the treatment and to strengthen them with the legal guarantees that prevent the possibility of being attacked by the responsible for the processing or sub-processor or even by others as a violation of the privacy of natural persons in the scope of electronic information society.

The paper discusses the fundamental principles of personal data processing enshrined in EU Regulation No. 2016/679: legality, fairness, and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; responsibility (accountability). The need to study and implement the requirements outlined in the regulations is related to the extraterritorial nature of its operation and the potential possibility of extending its operation to Russian companies providing services and selling goods in the European Union countries. The Author gives comments regarding each principle on the difficulties of implementation and recommendations on their application, as well as some critical comments. The Author covers the disclosure of each of the principles in other articles of the Regulations and demonstrates the interaction of these principles with each other.

The most important aim of this study is to propose a model for protecting citizens’ information privacy in e-Government for developing countries. This study develops theoretical foundations and models of e-Government in judicial-legal dimension. The methodology of this study is qualitative including documentary study, content analysis and comparative study. Statistical population of this study includes 58 countries with information privacy act which 11 countries were selected by judgment sampling for documentary study. These countries include:, England, Canada, France, Germany, Spain, Italy, Norway, Sweden, Ireland, Belgium and Republic of Korea. Proposed model of this study includes seven dimensions: (1) data collection obligations, (2) data use obligations, (3) data retention obligations, (4) data disclosure obligations, (5) data subject rights, (6) controller responsibilities and (7) obligations of accessing to data by citizen. Of 124 identified obligations for protecting citizens’ information privacy in e-Government as indexes of these dimensions, 105 obligations have a weight over 0.5 and can be a pattern for developing countries in order to regulate the e-Government development in the in the field of citizens’ information privacy protection as standard principles. It is hoped that the proposed model of this study would help developing countries in order to protect citizens’ information privacy in e-Government.

The risk management was presented in the area of personal details processing and control mechanisms in the department of public finances were presented in this paper. In terms of control mechanisms the changes in the Personal Data Protection Act which is effective on 1 January 2015 was considered. The changes concern new role of an administrator of information safety.