Data Privacy and Gdpr Handbook - Sanjay Sharma

. .

Résumé :

1 Origins and Concepts of Data Privacy 1
1.1 Questions and Challenges of Data Privacy 2
1.2 The Conundrum of Voluntary Information 3
1.3 What is Data Privacy? 5
1.4 Doctrine of Information Privacy 6
1.5 Notice-and-Choice versus Privacy-as-Trust 9
1.6 Notice-and-Choice in the US 9
1.7 Enforcement of Notice-and-Choice Privacy Laws 11
1.8 Privacy-as-Trust: An Alternative Model 13
1.9 Applying Privacy-as-Trust in Practice: The US Federal Trade Commission 14
1.10 Additional Challenges in the Era of Big Data and Social Robots 16
1.11 The General Data Protection Regulation (GDPR) 18
1.12 Chapter Overview 19

2 A Brief History of Data Privacy 23
2.1 Privacy as One's Castle 23
2.2 Extending Beyond the Castle 24
2.3 Formation of Privacy Tort Laws 24
2.4 The Roots of Privacy in Europe and the Commonwealth 25
2.5 Privacy Encroachment in the Digital Age 26
2.6 The Gramm-Leach-Bliley Act Tilted the Dynamic against Privacy 28
2.7 Emergence of Economic Value of Individual Data for Digital Businesses 29
2.8 Legislative Initiatives to Protect Individuals' Data Privacy 31
2.9 The EU Path 33
2.10 End of the Wild West? 37
2.11 Data as an Extension of Personal Privacy 37
2.12 Cambridge Analytica: A Step Too Far 39
2.13 The Context of Privacy in Law Enforcement 39

3 GDPR's Scope of Application 45
3.1 When Does GDPR Apply? 45
3.2 The Key Players under GDPR 52
3.3 Territorial Scope of GDPR 54
3.4 Operation of Public International Law 57

4 Technical and Organizational Requirements under GDPR 61
4.1 Accountability 61
4.2 The Data Controller 62
4.3 Technical and Organizational Measures 69
4.4 Duty to Maintain Records of Processing Activities 72
4.5 Data Protection Impact Assessments 73
4.6 The Data Protection Officer 80
4.7 Data Protection by Design and Default 84
4.8 Data Security during Processing 92
4.9 Personal Data Breaches 94
4.10 Codes of Conduct and Certifications 107
4.11 The Data Processor 112

5 Material Requisites for Processing under GDPR 125
5.1 The Central Principles of Processing 125
5.2 Legal Grounds for Data Processing 132
5.3 International Data Transfers 161
5.4 Intragroup Processing Privileges 182
5.5 Cooperation Obligation on EU Bodies 183
5.6 Foreign Law in Conflict with GDPR 184

6 Data Subjects' Rights 193
6.1 The Controller's Duty of Transparency 194
6.2 The Digital Miranda Rights 197
6.3 The Right of Access 201
6.4 Right of Rectification 203
6.5 Right of Erasure 205
6.6 Right to Restriction 214
6.7 Right to Data Portability 216
6.8 Rights Relating to Automated Decision Making 221
6.9 Restrictions on Data Subject Rights 226

7 GDPR Enforcement 233
7.1 In-House Mechanisms 233
7.2 Data Subject Representation 240
7.3 The Supervisory Authorities 241
7.4 Judicial Remedies 253
7.5 Alternate Dispute Resolution 258
7.6 Forum Selection Clauses 265
7.7 Challenging the Existing Law 266

8 Remedies 271
8.1 Allocating Liability 271
8.2 Compensation 273
8.3 Administrative Fines 275
8.4 Processing Injunctions 279
8.5 Specific Performance 283

9 Governmental Use of Data 287
9.1 Member State Legislations 287
9.2 Processing in the Public Interest 291
9.3 Public Interest and the Rights of a Data Subject 294
9.4 Organizational Exemptions and Responsibilities 297
9.5 Public Documents and Data 301
9.6 Archiving 304
9.7 Handling Government Subpoenas 305
9.8 Public Interest Restrictions on GDPR 305
9.9 Processing and Freedom of Informatio...