General Data Protection Regulation: A Transformative Law

Year 2020, Volume: 9 Issue: 17, 209 - 216, 30.06.2020

Hassan Syed , Sema Yılmaz Genç

Abstract

From the beginning people seeking fundamental rights which they have from existing, had to face struggle with tyranny. End of the long process in the idea of human rights, people reached very fundamentally right those still continued to evolve. The personal data of individuals has been at the centre of international law since the 1940’s Universal Declaration of Human Rights (UDHR) by the United Nations (UN). Those rights were intertwined with other personal rights asserted in the UDHR. The European Union (EU) is a unique social example of an entire Continent coming together to form a community. The EU Law is a supranational law that has supremacy over the municipal laws of the EU Member States. EU has been at the forefront of legislating laws that concern human dignity and rights. The Charter of Rights (CFR) of the EU under Article 8, defines personal data as a fundamental human right. The European Convention ECHR recognizes personal data right as part of personal freedoms.EU General Data Protection Regulation (GDPR) came into force in May 2018. It has been transformative since it’s coming into force. This paper highlights the transformative nature of the GDPR under the Case Law of the European Courts. The paper also considers data protection rights under the broader concepts of identity and citizenship.

Keywords

Data, Personal Data, Data Rights, Identity, GDPR

Genel Veri Koruma Düzenlemesi: Dönüştürücü Bir Yasa

Abstract

Bireylerin kişisel verileri, 1940 Birleşmiş Milletler İnsan Hakları Evrensel Bildirgesi'nden bu yana uluslararası hukukun merkezinde yer almıştır. Bu haklar, İnsan Hakları Evrensel Bildirgesi'nde vurgulanan diğer kişisel haklarla iç içe geçmiştir. Avrupa Birliği (AB), bütün bir kıtanın bir topluluk oluşturmak üzere bir araya gelmesinin eşsiz bir sosyal örneğidir. AB Hukuku, AB Üye Devletleri’nin yerel yasaları üzerinde üstünlüğe sahip uluslarüstü bir hukuktur. AB, insan onuru ve hakları ile ilgili yasaları yapma konusunda hep ön planda yer almıştır. AB Haklar Şartı, Madde 8'de kişisel verileri bir temel insan hakkı olarak tanımlamaktadır. Avrupa İnsan Hakları Sözleşmesi ise, kişisel veri hakkını kişisel özgürlüklerin bir parçası olarak tanımaktadır. AB Genel Veri Koruma Düzenlemesi, Mayıs 2018'de yürürlüğe girmiştir. Yürürlüğe girdiğinden bu yana dönüştürücü olmuştur. Bu çalışma, Avrupa Mahkemelerinin İçtihatları çerçevesinde Genel Veri Koruma Düzenlemesi’nin dönüştürücü niteliğini vurgulamaktadır. Çalışma ayrıca, kimlik ve vatandaşlığın veri koruma haklarını daha geniş kavramlar altında ele almaktadır.

Keywords

Veri, Kişisel Veriler, Veri Hakları, Kimlik, GVKD

References

• Bantaș, D. A., & Beldiman, E. (2017). Postwar international organizations predecessor of the European Union. Challenges of the Knowledge Society, 374-383.
• Cate, F. H. (1994). The EU data protection directive, information privacy, and the public interest. Iowa L. Rev., 80, 431.
• Cate, F. H., Kuner, C., Lynskey, O., Millard, C., Ni Loideain, N., & Svantesson, D. J. B. (2018). An Unstoppable Force and an Immoveable Object? EU Data Protection Law and National Security.
• Ciriani, S. (2015). The economic impact of the European reform of data protection. Communications & Strategies, (97), 41-58.
• de Andrade, N. N. G. (2010). Data protection, privacy and identity: distinguishing concepts and articulating rights. In IFIP PrimeLife International Summer School on Privacy and Identity Management for Life (pp. 90-107). Springer, Berlin, Heidelberg.
• De Hert, P., & Papakonstantinou, V. (2016). The new General Data Protection Regulation: Still a sound system for the protection of individuals?. Computer law & security review, 32(2), 179-194.
• de Leeuw, K. M. M., & Bergstra, J. (Eds.). (2007). The history of information security: a comprehensive handbook. Elsevier.
• de Than, C. (2003). Positive obligations under the European Convention on Human Rights: towards the human rights of victims and vulnerable witnesses?. The Journal of Criminal Law, 67(2), 165-182.
• Dedman, M. (2006). The origins and development of the European Union 1945-1995: a history of European integration. Routledge.
• Doyle, J. (2018). Unreal objects: Digital materialities, technoscientific projects and political realities, Kate O’Riordan, SAGE Publications, England.
• Fleming, J. (2015). EU Lawmaker Warns of Data Protection Rules Delay till 2016, (Accessed on: 20.01.2020),
• https://www.euractiv.com/section/digital/news/eu-lawmaker-warns-of-data-protection-rules-delay-till-2016/. Floridi, L. (2011). The informational nature of personal identity. Minds and machines, 21(4), 549.
• Forgó, N., Hänold, S., & Schütze, B. (2017). The principle of purpose limitation and big data. In New technology, big data and the law (pp. 17-42). Springer, Singapore.
• Fossum, J. E. (2001). Identity‐politics in the European Union. Journal of European Integration, 23(4), 373-406.
• Gubitz, A. S. (2004). The US Aviation and Transportation Security Act of 2001 in Conflict With the EU Data Protection Laws: How Much Access to Airline Passenger Data Does the United States Need to Combat Terrorism. New Eng. L. Rev., 39, 431.
• Jones, T. C. (2012). America, oil, and war in the Middle East. The Journal of American History, 99(1), 208-218.
• Kokott, J., & Sobotta, C. (2013). The distinction between privacy and data protection in the jurisprudence of the CJEU and the ECtHR. International Data Privacy Law, 3(4), 222-228.
• Lénárt, L. (2003). Sir Winston Spencer Churchill and the Movement of the Unification of Europe. European Integration Studies, 2(2), 17-28.
• Lewis Jr, H. S. (1982). Three Deaths of State Sovereignty and the Curse of Abstraction in the Jurisprudence of Personal Jurisdiction. Notre Dame L. Rev., 58, 699.
• Lyon, D. (2014). Surveillance, Snowden, and big data: Capacities, consequences, critique. Big data & society, 1(2).
• Mantelero, A. (2017). Regulating big data. The guidelines of the Council of Europe in the context of the European data protection framework. Computer law & security review, 33(5), 584-602.
• Marston, G. (1993). The United Kingdom part in the preparation of the european convention on human rights, 1950. International & Comparative Law Quarterly, 42(4), 796-826.
• Merrill, D. (2006). The Truman doctrine: containing communism and modernity. Presidential Studies Quarterly, 36(1), 27-37.
• Nesterova, I. (2017). Crisis of Privacy and Sacrifice of Personal Data in the Name of National Security: The CJEU Rulings Strengthening EU Data Protection Standards. In European Society of International Law (ESIL) 2016 Annual Conference (Riga).
• Reding, V. (2014). A data protection compact for Europe. European Commission, (Accessed on: 04.01.2020), https://ec.europa.eu/commission/presscorner/detail/de/SPEECH_14_62.
• Rodotà, S. (2009). Data protection as a fundamental right. In Reinventing Data Protection? (pp. 77-82). Springer, Dordrecht.
• Schwartz, P. M. (2003). Property, privacy, and personal data. Harv. L. Rev., 117, 2056.
• Simitis, S. (1994). From the market to the polis: The EU directive on the protection of personal data. Iowa L. Rev., 80, 445.
• Tattersall, A., & Grant, M. J. (2016). Big Data–What is it and why it matters. Health Information & Libraries Journal, 33(2), 89-91.
• Van den Brink, M. J. (2012). EU citizenship and EU fundamental rights: taking EU citizenship rights seriously?. Legal Issues of Economic Integration, 39(2), 273-289.
• Virdee, S., & McGeever, B. (2018). Racism, crisis, brexit. Ethnic and racial studies, 41(10), 1802-1819.
• Von Grafenstein, M. (2018). Principle of Purpose Limitation in Data Protection Laws. Nomos Verlagsgesellschaft mbH & Company KG.
• Wessels, W. (1994). Rationalizing Maastricht: the search for an optimal strategy of the new Europe. International Affairs, 70(3), 445-457.
• Wright, D., & Kreissl, R. (2014). European responses to the Snowden revelations. In Surveillance in Europe (pp. 20-64). Routledge.
• Wu, X., Zhu, X., Wu, G. Q., & Ding, W. (2013). Data mining with big data. IEEE transactions on knowledge and data engineering, 26(1), 97-107.
• Yoo, J. (2014). The Legality of the National Security Agency's Bulk Data Surveillance Programs. Harv. JL & Pub. Pol'y, 37, 901.