This book analyses the legal approach to personal data taken by different fields of law. An increasing number of business models in the digital economy rely on personal data as a key input. In exchange for sharing their data, online users benefit from personalized and innovative services. But companies’ collection and use of personal data raise questions about privacy and fundamental rights. Moreover, given the substantial commercial and strategic value of personal data, their accumulation, control and use may raise competition concerns and negatively affect consumers. To establish a legal framework that ensures an adequate level of protection of personal data while at the same time providing an open and level playing field for businesses to develop innovative data-based services is a challenging task.With this objective in mind and against the background of the uniform rules set by the EU General Data Protection Regulation, the contributions to this book examine the significance and legal treatment of personal data in competition law, consumer protection law, general civil law and intellectual property law. Instead of providing an isolated analysis of the different areas of law, the book focuses on both synergies and tensions between the different legal fields, exploring potential ways to develop an integrated legal approach to personal data.

This book was published in 2003.This book offers a broad and incisive analysis of the governance of privacy protection with regard to personal information in contemporary advanced industrial states. Based on research across many countries, it discusses the goals of privacy protection policy and the changing discourse surrounding the privacy issue, concerning risk, trust and social values. It analyzes at length the contemporary policy instruments that together comprise the inventory of possible solutions to the problem of privacy protection. It argues that privacy protection depends upon an integration of these instruments, but that any country's efforts are inescapably linked with the actions of others that operate outside its borders. The book concludes that, in a ’globalizing’ world, this regulatory interdependence could lead either to a search for the highest possible standard of privacy protection, or to competitive deregulation, or to a more complex outcome reflecting the nature of the issue and its policy responses.

This study provides recommendations on how to make personal data portability more effective. This will truly empower consumers to use the services they want and share their data with whoever they wish and stimulate innovation in Europe. With the entry into force of the GDPR, European citizens gained new rights, notably with data portability. But two years later, there is still little sign of people exercising this right, and of companies offering an easy and convenient service for data portability. While the European Commission is finalising its evaluation of the GDPR and closes its consultation on the European data strategy, the authors, professors Jan Krämer, Pierre Senellart and Alexandre de Streel*, warn that the current legal framework requires clarifications to better empower European citizens in a data-driven society. In this study, they identify barriers to data portability, including the lack of possibilities to import data as well as the lack of common standards and tools to access data as easy as the click of a button. The ability to provide users with a centralised dashboard for monitoring and controlling the flow of their data is also critically missing. “Today, consumers do not widely use data portability for reasons that can and should be overcome. Making data portability more effective is better for competition, for innovation and to empower users,” stress the authors. “There should be no second-guessing on whether to make data portability more effective, the time to act is now.” The current EU framework encourages data portability, but there are legal gaps that the EU should fill. The authors insist on the need for detailed guidance on how data portability can be facilitated and on which data is subject to data portability without violating privacy rights. They advocate that data provided by users when using a service, such as search history (i.e. “observed data”) should clearly be included under the scope of data portability. The authors consider it essential that the obligation to offer standardised Application Programming Interfaces (APIs) be much more widespread to enable consumers to continuously port their data. “We believe that standardised APIs that enable continuous data portability is a prerequisite for encouraging more organisations to import personal data, and for encouraging more consumers to initiate such transfers,” explain the authors. Projects, such as the Data Transfer Project have highlighted that continuous data portability is technically feasible. The authors argue that Personal Management Information Systems (PIMSs) facilitate the complex consent management and offer users a centralised dashboard for monitoring and controlling the flow of their data will have a crucial role to play for the wider adoption of data portability. “It must be as easy as clicking a button for consumers to continuously share data they created with one provider to another provider. This may also require educating and informing users on their rights through information campaigns alongside clear policy measures,” explain the authors. Nevertheless, they stress that PIMSs are not likely to find a sustainable business model, and thus, policy makers should support the emergence of open-source projects by setting common standards for data transfers, consent management, and identity management.

La obra de Elena Gil González, que el lector tiene en sus manos, analiza el impacto en el derecho a la privacidad del nuevo fenómeno conocido como Big data, que implica el tratamiento y almacenamiento masivo de información. Uno de los retos actuales de la sociedad de la información es que el sector empresarial alcance un elevado cumplimiento de las obligaciones que la normativa de protección de datos le impone, fomentando una cultura de preservación de datos de carácter personal, que suponga una clara mejora de la competitividad compatible con el desarrollo económico. En este sentido, el Big data es un reflejo del impacto de la tecnología en la esfera de la vida privada. El despliegue de tecnologías como el Big data, el internet de las cosas, el uso de wearables o las smartcities, entre otras, requiere de un análisis y valoración técnica y jurídica para promover buenas prácticas que garanticen su adecuación a la normativa en la materia y, en consecuencia, el respeto por los derechos de los ciudadanos. La obra contribuye a difundir algunos aspectos esenciales de esta tecnología, aportando propuestas para minimizar los riesgos de intrusión en la privacidad. El deber de transparencia y consentimiento, las técnicas de anonimización, la privacidad por defecto y desde el diseño que se abordan en el trabajo son elementos esenciales para un desarrollo respetuoso del Big data. © Elena Gil González © AGENCIA ESPAÑOLA DE PROTECCIÓN DE DATOS © AGENCIA ESTATAL BOLETÍN OFICIAL DEL ESTADO NIPO: 007-16-097-4 ISBN: 978-84-340-2309-3 Depósito Legal: M-16320-2016

This volume is a critical exploration of multiple posthuman possibilities in the 21st century and beyond. Due to the global engagement with advanced technology, we are witness to a species-wise blurring of boundaries at the edge of the human. On the one hand, we find ourselves in a digital age in which human identity is being transformed through networked technological intervention, a large part of our consciousness transferred to "smart" external devices. On the other hand, we are assisted---or assailed---by an unprecedented proliferation of quasi-human substitutes and surrogates, forming a spectrum of humanoids with fuzzy borders. Under these conditions, critical posthumanism asks, who will occupy and control our planet: Will the "superhuman" merely serve as another sign under which new regimes of dominance are spread across the earth? Or can we discover or invent technologies of existence to counter such dominance? It is issues such as these which are at the heart of this new volume of explorations of the posthuman. The essays in this volume offer leading-edge thought on the subject, with special emphases on postmodern and postcolonial futures. They engage with questions of subalternity and feminism vis-à-vis posthumanism, dealing with issues of subjugation, dispensability and surrogacy, as well as the possibilities of resistance, ethical politics or subjective transformation from South Asian archives of cultural and spiritual practice. This volume is a valuable addition to the on-going global dialogues on posthumanism, indispensable to those, from across several disciplines, who are interested in postcolonial and planetary futures.

Enterprise Cybersecurity empowers organizations of all sizes to defend themselves with next-generation cybersecurity programs against the escalating threat of modern targeted cyberattacks. This book presents a comprehensive framework for managing all aspects of an enterprise cybersecurity program. It enables an enterprise to architect, design, implement, and operate a coherent cybersecurity program that is seamlessly coordinated with policy, programmatics, IT life cycle, and assessment. Fail-safe cyberdefense is a pipe dream. Given sufficient time, an intelligent attacker can eventually defeat defensive measures protecting an enterprise’s computer systems and IT networks. To prevail, an enterprise cybersecurity program must manage risk by detecting attacks early enough and delaying them long enough that the defenders have time to respond effectively. Enterprise Cybersecurity shows players at all levels of responsibility how to unify their organization’s people, budgets, technologies, and processes into a cost-efficient cybersecurity program capable of countering advanced cyberattacks and containing damage in the event of a breach. The authors of Enterprise Cybersecurity explain at both strategic and tactical levels how to accomplish the mission of leading, designing, deploying, operating, managing, and supporting cybersecurity capabilities in an enterprise environment. The authors are recognized experts and thought leaders in this rapidly evolving field, drawing on decades of collective experience in cybersecurity and IT. In capacities ranging from executive strategist to systems architect to cybercombatant, Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, and Abdul Aslam have fought on the front lines of cybersecurity against advanced persistent threats to government, military, and business entities.

This book contains selected papers presented at the 15th IFIP WG 9.2, 9.6/11.7, 11.6/SIG 9.2.2 International Summer School on Privacy and Identity Management, held in Maribor, Slovenia, in September 2020.* The 13 full papers included in this volume were carefully reviewed and selected from 21 submissions. Also included is a summary paper of a tutorial. As in previous years, one of the goals of the IFIP Summer School was to encourage the publication of thorough research papers by students and emerging scholars. The papers combine interdisciplinary approaches to bring together a host of perspectives, such as technical, legal, regulatory, socio-economic, social or societal, political, ethical, anthropological, philosophical, or psychological perspectives. *The summer school was held virtually.