Lecture

Legal Aspects: Personal Data Processing

Graph Chat

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

Description

This lecture covers the legal aspects of personal data processing, including the definition of personal data, the scope of the law, legal bases for processing, principle-based regulation, data protection rights, and real-life cases. It delves into the GDPR, consent requirements, and the rights of individuals regarding their data. The lecture also explores the challenges posed by online tracking, the same origin policy, and crafty workarounds used by websites to track users. Additionally, it discusses the implications of data tracking in apps and the concerning use of personal data by the US military. The lecture concludes with insights into real-time bidding and a major breach in a biometrics system.

Official source

Related concepts (16)

General Data Protection Regulation

The General Data Protection Regulation (Regulation (EU) 2016/679, abbreviated GDPR) is a European Union regulation on Information privacy in the European Union (EU) and the European Economic Area (EEA). The GDPR is an important component of EU privacy law and human rights law, in particular Article 8(1) of the Charter of Fundamental Rights of the European Union. It also governs the transfer of personal data outside the EU and EEA.

Data Protection Directive

The Data Protection Directive, officially Directive 95/46/EC, enacted in October 1995, was a European Union directive which regulated the processing of personal data within the European Union (EU) and the free movement of such data. The Data Protection Directive was an important component of EU privacy and human rights law. The principles set out in the Data Protection Directive were aimed at the protection of fundamental rights and freedoms in the processing of personal data.

Personal data

Personal data, also known as personal information or personally identifiable information (PII), is any information related to an identifiable person. The abbreviation PII is widely accepted in the United States, but the phrase it abbreviates has four common variants based on personal or personally, and identifiable or identifying. Not all are equivalent, and for legal purposes the effective definitions vary depending on the jurisdiction and the purposes for which the term is being used.

National data protection authority

There are several national data protection authorities across the world, tasked with protecting information privacy. In the European Union and the EFTA member countries, their status was formalized by the Data Protection Directive and they were involved in the Madrid Resolution. This project is a part of the work of the International Law Commission of the United Nations. On the European level, it is the G29 and the European Data Protection Supervisor (EDPS).

Pseudonymization

Pseudonymization is a data management and de-identification procedure by which personally identifiable information fields within a data record are replaced by one or more artificial identifiers, or pseudonyms. A single pseudonym for each replaced field or collection of replaced fields makes the data record less identifiable while remaining suitable for data analysis and data processing. Pseudonymization (or pseudonymisation, the spelling under European guidelines) is one way to comply with the European Union's new General Data Protection Regulation (GDPR) demands for secure data storage of personal information.

Related lectures (60)

Data Protection Law: Principles and Rights

Covers the principles and rights of data protection law under GDPR.

Data Protection Law: Principles and Practices

Explores the historical development and legal aspects of data protection laws, international instruments, challenges of online tracking, legal bases for processing personal data, and privacy regulations.

Legal Aspects: Personal Data Processing and GDPR Compliance

Explores legal aspects of personal data processing, GDPR compliance, web tracking history, app privacy challenges, and online advertising practices.

Data Protection Principles

Discusses the importance of data protection, including the right to be forgotten and principles of data processing.

Data Management: FAIR Principles