The General Data Protection Regulation of 2016 (GDPR) Meets its Sibling the Artificial Intelligence Act of 2024: A Power Couple, or a Clash of Titans?
Keywords:
GDPR and AI Act interplay, Balancing data protection and AI innovation, Responsible AI Development, Technological advancement, Data protection standardsAbstract
The European Union (EU) Parliament and Council of the European Union adopted the General Data Protection Regulation of 2016 (“the GDPR, 2016”) (European Data Protection Supervisor, 2024) on 14 April 2016, to become effective on 25 May 2018 as an EU regulation (instead of a directive), GDPR is directly applicable with force of law on its own without the need of transposition and, widely considered one of the strictest data privacy and security laws globally while on March 13, 2024, the European Union (EU) Parliament adopted the world’s first law governing “artificial inelegance” the EU Artificial Intelligence Act of 2024 (“the AI Act, 2024”)[1]. In the ever-evolving landscape of data governance and technological advancement, the intersection between the GDPR and the newly introduced AI Act, 2024 stands as a pivotal point of examination. While both regulations share the goal of protecting individuals’ rights, their specific areas of focus and compliance requirements raise intriguing questions about their potential interplay. This research article explores the complex relationship between these two regulatory frameworks, exploring whether they function as a synergistic “power couple” or engage in a tumultuous “clash of titans”. Through comprehensive analysis and critical evaluation, the article scrutinizes how the “power couple” of GDPR and the AI Act, 2024 function together, we aim to shed light on whether they will truly be a force for responsible AI development or lead to a “clash of titans” hindering innovation. Drawing upon legal, ethical, and practical perspectives, the study navigates through the complexities of data protection, algorithmic governance, and the ethical deployment of artificial intelligence. By elucidating the nuances of this regulatory interplay, the article contributes to a deeper understanding of the challenges and opportunities presented by the convergence of data protection and AI governance in the digital age. It will be of particular interest to researchers, policymakers, and businesses involved in the development and deployment of AI systems.
References
Antonaros, V. (24 April, 2024). The Intersection of AI Law with the GDPR: Ensuring Data Protection in Artificial Intelligence Systems. Retrieved from https://repository.ihu.edu.gr//xmlui/handle/11544/30371.
Asatiani, A.; Copeland, O. & Penttinen, E. (2023). Deciding on the robotic process automation operating model: A checklist for RPA managers. Business Horizons, Vol. 66(1), pp. 109-121.
Bauroth, M.; Rath-Manakidis, P.; Langholf, V.; Wiskott, L. & Glasmachers, T. (2024). tachAId—An interactive tool supporting the design of human-centered AI solutions. Frontiers in Artificial Intelligence, 7. Retrieved from https://www.frontiersin.org/journals/artificial-intelligence/articles/10.3389/frai.2024.1354114/full.
Borgesius, F. Z.; Hacker, P.; Baranowska, N. & Fabris, A. (2024). Non-discrimination law in Europe: a primer for non-lawyers. Elsevier Analytical Services Research Paper Series. Retrieved from https://ssrn.com/abstract=4786956.
Bratu, I. & Leiser, M. (2024). Navigating the convergence of law, computers & technology. International Review of Law, Computers & Technology, pp. 1-3.
Butt, J. (2023). A Comparative Analysis of the Regulatory Approach And Management Practice For Digital Currencies, And the Role Of International Financial Organizations, In Developing A Global Regulatory Framework For Accounting Standards of Digital Crypto-Currency. The Journal of Accounting and Management, Vol. 13(3), pp. 7-21. Retrieved from https://dj.univ-danubius.ro/index.php/JAM/article/view/2586.
Matheson, L. L. P. (15 January, 2024). CJEU provides clarity on right to compensation for GDPR infringements. European Union. Retrieved from https://www.lexology.com/library/detail.aspx?g=f4989994-f25d-4363-875a-beee197d2378.
Butt, J. (2023). The Impact of Artificial Intelligence (AI) on the Efficiency of Administrative Decision Making Including Ethical & Legal Considerations and Comparative Study about Countries Already Incorporated AI for Administrative Decisions. The Acta Universitatis Danubius. Juridica, Vol. 19(3), pp. 7-25. Retrieved from https://dj.univ-danubius.ro/index.php/AUDJ/article/view/2560.
Butt, J. (2024). Analytical Study of the World’s First EU Artificial Intelligence (AI) Act. International Journal of Research Publication and Reviews, Vol. 5(3), pp. 7343-7364.
Butt, J. (2024). The Impact of Digitalization (AI) On Administrative Decision-Making Processes and Access to Justice– A Nordic Perspective. Acta Universitatis Danubius. Juridica, Vol. 20(1), pp. 22–42. Retrieved from https://dj.univ-danubius.ro/index.php/AUDJ/article/view/2712.
Butt, J. (2024). The Role of Artificial Intelligence (AI) In Productivity & Economic Growth in Nordic Welfare States. Acta Universitatis Danubius. Œconomica, Vol. 20(2). Retrieved from https://dj.univ-danubius.ro/index.php/AUDOE/article/view/2714.
Byanjankar, A.; Mezei, J. & Heikkilä, M. (2021). Data-driven optimization of peer-to-peer lending portfolios based on the expected value framework. Intelligent Systems in Accounting, Finance and Management, Vol. 28(2), pp. 119-129. Retrieved from https://onlinelibrary.wiley.com/doi/10.1002/isaf.1490.
Cabrera, L. (13 March, 2024). EU’s much-heralded AI Act agreed by EU Parliament – but serious human rights holes in law remain. Retrieved from Euractiv: https://www.euractiv.com/section/artificial-intelligence/opinion/eus-much-heralded-ai-act-agreed-by-eu-parliament-but-serious-human-rights-holes-in-law-remain/.
Christof, W.; Jonas, F.; Hinz, O. & Wil, M. P. (2024). Digital Democracy: A Wake-Up Call. Business & Information Systems Engineering, Vol. 66, pp. 127–134.
Collan, M.; Savolainen, J.; Virolainen, V. & Luukka, P. (2023). A Vision for a Highly Automated Digital Local Manufacturing Network—Solutions and Challenges. In Huang, C.; Dekkers, R.; Chiu, S. Popescu, D. & Quezada, L. Intelligent and Transformative Production in Pandemic Times, pp. 377–384. Retrieved from https://link.springer.com/chapter/10.1007/978-3-031-18641-7_36.
Cowley, B.; Charles, D.; Pfuhl, G. & Rusanen, A. (2023). Artificial Intelligence in Education as a Rawlsian Massively Multiplayer Game: A Thought Experiment on AI Ethics. In Niemi, H.; Pea, R. & Lu, Y. AI in Learning: Designing the Future. Springer, Cham.
Davoodi, L. & Mezei, J. (2022). Comparative Study of Machine Learning Models for Sentiment Analysis: Customer Reviews of E-commerce Platforms. In Pucihar, A.; Kljajić, M. B.; Bons, R.; Sheombar, A.; Ongena, G. & Vidmar, D. 35th Bled eConference: Digital Restructuring and Human (Re)Action.
Díaz-Rodríguez, N.; Del Ser, J.; Coeckelbergh, M.; López de Prado, M.; Herrera-Viedma, E. & Herrera, F. (2023). Connecting the dots in trustworthy Artificial Intelligence: From AI principles, ethics, and key requirements to responsible AI systems and regulation. Information Fusion, Vol. 99, pp. 1-24.
Duflot, A. (2024). Artificial Intelligence in the French Law of 2024. Legal Issues in the Digital Age, Vol. 5(1), pp. 37-56.
Earley, S.; Henderson, D. & Association, D. M. (2017). DAMA-DMBOK: Data Management Body of Knowledge. New Jersey: Technics Publications. Retrieved from https://pdfcoffee.com/dama-international-dama-dmbok-2nd-edition-data-management-body-of-knowledge-technics-publications-2017pdf-4-pdf-free.html.
Eguia, L. M. (2024). The Magical Mystery Data Transfer Mechanism: An insight into how the adequacy of a third country is determined under Article 45(2) GDPR (Master’s thesis). Retrieved from https://www.duo.uio.no/bitstream/handle/10852/110615/8/ICTLTHESIS_9014_H23.pdf.
Erkkilä, T. (2024)). Hybridity in digital and algorithmic public governance. In Giuseppe, G. & Jarmo, V. Handbook of Accounting and Public Governance, pp. 32-46. Edward Elgar Publishing. Retrieved from https://www.ippapublicpolicy.org/file/paper/60da17e9ae141.pdf.
*** (2024). European Data Protection Supervisor. Retrieved from The History of the General Data Protection Regulation: https://www.edps.europa.eu/data-protection/data-protection/legislation/history-general-data-protection-regulation_en.
Fresz, B.; Dubovitskaya, E.; Brajovic, D.; Huber, M. & Horz, C. (2024). How should AI decisions be explained? Requirements for Explanations from the Perspective of European Law, pp. 1-18. Retrieved from https://arxiv.org/pdf/2404.12762.
Gkritsi, E. (2024). AI Act’s global effects might be overstated, experts say. Retrieved from Euractiv: https://www.euractiv.com/section/artificial-intelligence/news/ai-acts-global-effects-might-be-overstated-experts-say/.
Green, D. (2024). Strategic Indeterminacy and Online Privacy Policies: (Un)informed Consent and the General Data Protection Regulation. International Journal of Semiotics of Law, pp. 1-29.
Gritsenko, D. & Wood, M. (2022). Algorithmic governance: A modes of governance approach. Regulation & Governance, Vol. 16(1), pp. 45-62. Retrieved from https://www.researchgate.net/publication/346876996_Algorithmic_governance_A_modes_of_governance_approach.
G’sell, F. (2024). An Overview of the European Union Framework Governing Generative AI Models and Systems. Elsevier Analytical Services Research Paper Series, pp. 1-102. Retrieved from https://ssrn.com/abstract=4762804 or http://dx.doi.org/10.2139/ssrn.4762804.
Hakobyan, M. (2024). Artificial Intelligence rulebook fails to stop proliferation of abusive technologies. Retrieved from Amnesty international. https://www.amnesty.org/en/latest/news/2024/03/eu-artificial-intelligence-rulebook-fails-to-stop-proliferation-of-abusive-technologies/.
Hallamaa, J. & Kalliokoski, T. (2022). AI Ethics as Applied Ethics. Frontiers in computer science, Vol. 4. Retrieved from https://www.researchgate.net/publication/359803298_AI_Ethics_as_Applied_Ethics.
Harju, A.; Hallikas, J.; Immonen, M. & Lintukangas, K. (2023). The impact of procurement digitalization on supply chain resilience: empirical evidence from Finland. Supply Chain Management, Vol. 28(7), pp. 62-76. Retrieved from https://www.emerald.com/insight/content/doi/10.1108/SCM-08-2022-0312/full/html.
Kalliokoski, T. (2023). Intelligence Biological understanding is needed in the development of technologies. Theological Journal, Vol. 128(2), pp. 121-122. Retrieved from https://helda.helsinki.fi/server/api/core/bitstreams/37085aa7-76de-4095-8fff-4a4e7cbf43d9/content.
Kalsi, M. (2024). Still losing the race with technology? Understanding the scope of data controllers’ responsibility to implement data protection by design and by default. International Review of Law, Computers & Technology, pp. 1–23.
Karttunen, E.; Lintukangas, K. & Hallikas, J. (n.d.). Digital transformation of the purchasing and supply management process. International Journal of Physical Distribution & Logistics Management, Vol. 53(5/6), pp. 685-706. Retrieved from https://www.emerald.com/insight/content/doi/10.1108/IJPDLM-06-2022-0199/full/html.
Khakurel, J. & Blomqvist, K. (2022). Artificial Intelligence Augmenting Human Teams. A Systematic Literature Review on the Opportunities and Concerns. In Degen, H. & Ntoa, S. Artificial Intelligence in HCI. HCII 2022. Lecture Notes in Computer Science Vol. 13336. Retrieved from https://www.researchgate.net/publication/360600948_Artificial_Intelligence_Augmenting_Human_Teams_A_Systematic_Literature_Review_on_the_Opportunities_and_Concerns.
Khalfa, R.; Theinert, N. & Hardyns, W. (2024). From human intervention to meaningful human oversight? Mapping the opportunities and constraints in the decision-making process of place-based big data policing. AI-Experiences and public safety. Rotterdam, The Netherlands.
Koivisto, I. (2023). Automated decision making is coming - are you ready? Retrieved from Constitution blog: https://perustuslakiblogi.wordpress.com/2023/03/02/ida-koivisto-automaattinen-paatoksenteko-tulee-oletko-valmis/
Korpisaari (ex. Tiilikka), P. (2022). In Teoksessa, A.-S. & Pihlajarinne, T. Artificial Intelligence and the Media: Reconsidering Rights and Responsibilities, pp. 61-91. Retrieved from https://www.elgaronline.com/edcollchap/edcoll/9781839109966/9781839109966.00009.xml.
Kosurko, A.; Arminen, I.; Herron, R.; S. M. & Stevanovic, M. (2021). Observing Social Connectedness in a Digital Dance Program for Older Adults: An EMCA Approach. In Gao, Q. Z. Human Aspects of IT for the Aged Population. Technology Design and Acceptance. HCII 2021. Lecture Notes in Computer Science, Vol. 12786. Retrieved from https://helda.helsinki.fi/server/api/core/bitstreams/58fa92ee-3f55-4a26-a5a4-ac1bbc6b8dc6/content.
Kruse, N.; Wachter, P. & Schöning, J. (2024). Compliance of agricultural AI systems – app-based legal verification throughout the development. P344 - 44th GIL Annual Conference 2023 - Focus: Promoting biodiversity through digital agriculture, pp. 119-130. Retrieved from https://dl.gi.de/items/03873650-c7ea-4aaf-b91e-324ca7bafc1f.
Lamberg, J.-A. & Luoma, J. (2021). Ideology in Vicarious Learning–Related Communication. Organization Science, Vol. 32(3), pp. 708-730.
Laukkanen, T.; Laukkanen, T.; Xi, N.; Xi, N.; Hallikainen, H.; Hallikainen, H. & Hamari, J. (2021). Virtual technologies in supporting sustainable consumption: From a single-sensory stimulus to a multi-sensory experience. International Journal of Information Management, Vol. 63(4). Retrieved from https://www.researchgate.net/publication/356121754_Virtual_technologies_in_supporting_sustainable_consumption_From_a_single-sensory_stimulus_to_a_multi-sensory_experience#fullTextFileContent.
Leikin, E.; Riede, L.; Hofer, M. & Sue,N. G, (2024.). Technology Disputes and Arbitration. Retrieved from The European Arbitration Review. https://globalarbitrationreview.com/review/the-european-arbitration-review/2024/article/technology-disputes-and-arbitration.
Lynch, S. (2024). Davos 2024: Six Takeaways on the AI Conversation at WEF. Retrieved from The World Economic Forum: https://hai.stanford.edu/news/davos-2024-six-takeaways-ai-conversation-wef.
Mäkelä, E.; Lagus, K.; Lahti, L.; Säily, T.; Tolonen, M.; Hämäläinen, M.; Nevalainen, T. (2020). Wrangling with non-standard data. In Reinsone, S.; Skadiņa, I.; Baklāne, A. & Daugavietis, J. Proceedings of the Digital Humanities in the Nordic Countries 5th Conference, pp. 91-96. Retrieved from http://ceur-ws.org/Vol-2612/paper6.pdf.
Mesinovic, M. (2024). Explainability and the Law: Needs and Requirements. Elsevier Analytical Services Research Paper Series. Retrieved from https://ssrn.com/abstract=4808607.
Miller, K. (2024). Spotting Visual Signs of Gentrification at Scale. Economy and Markets. Retrieved from https://hai.stanford.edu/news/spotting-visual-signs-gentrification-scale.
Mlynář, J. & Arminen, I. (2023). Respecifying social change: the obsolescence of practices and the transience of technology. Frontiers in Sociology, Vol. 8. Retrieved from https://www.frontiersin.org/articles/10.3389/fsoc.2023.1222734/full#h8.
Nadeem, M.; Ali, Y.; Rehman, O. U. & Saarinen, L. T. (2023). Barriers and Strategies for Digitalisation of Economy in Developing Countries: Pakistan, a Case in Point. Journal of the Knowledge Economy, Vol. 15.
Nguyen, Q.; Tran, D. T.; Kanniainen, J.; Iosifidis, A. & Gabbouj, M. (2023). Cryptocurrency Portfolio Optimization by Neural Networks. IEEE Symposium Series on Computational Intelligence (SSCI), pp. 25-32. Retrieved from https://ieeexplore.ieee.org/document/10371855/authors#authors.
Nikunen, K. (2023). The threat and allure of data capitalis. Media & Communication, Vol. 46(2), pp. 115–117.
Oinas, S. & Hotulainen, R. (2022). Remote learning experiences when you prefer pen & paper over digital devices. Proceedings of Society for Information Technology & Teacher Education International Conference, pp. 776-781. San Diego, United States: Association for the Advancement of Computing in Education (AACE). Retrieved Martie 25, 2024, from https://www.learntechlib.org/primary/p/220811/.
Parkatti, A.; Saari, T.; Tammelin, M. & Villi, M. (2022). Framing digital competence in media work – The case of Finland. International Journal of Sociology and Social Policy, Vol. 42(13/14), pp. 15-29.
Pathak, M. (2024, February 6). Data Governance Redefined: The Evolution of EU Data Regulations from the GDPR to the DMA, DSA, DGA, Data Act and AI Act. Elsevier Analytical Services Research Paper Series. Retrieved from https://ssrn.com/abstract=4718891 or http://dx.doi.org/10.2139/ssrn.4718891.
Peeters, B. (2024). Editorial: European Law Restrictions on Tax Authorities’ Use of Artificial Intelligence Systems: Reflections on Some Recent Developments. EC Tax Review, Vol. 33(2), pp. 54-57. Retrieved from https://kluwerlawonline.com/journalarticle/EC+Tax+Review/33.2/ECTA2024006.
Picht, P. & Richter, H. (2022). EU Digital Regulation 2022: Data Desiderata. GRUR International, Vol. 71(5), pp. 395–402. Retrieved from https://doi.org/10.1093/grurint/ikac021.
Pihlajarinne, T. & Alen-Savikko, A. (2022). Conclusions on artificial intelligence, media and regulation. In Pihlajarinne, T. & Alén-Savikko A. Artificial Intelligence and the Media: Reconsidering Rights and Responsibilities, pp. 296-299. Edward Elgar.
Polyzou, F. (2024). The draft AI Act through the lens of the GDPR (Master’s thesis). University Center of International Programmes of Studies, School of Humanities, Social Sciences and Economics. Retrieved from https://repository.ihu.edu.gr/xmlui/bitstream/handle/11544/30378/Fani%20Polyzou%20%281%29.pdf?sequence=1.
Premathilake, G.; Li, H.; Liu, Y. & Helander, N. (2021). A Review of the Empirical Literature on Service Robots in Information Systems Literature. Retrieved from http://urn.fi/URN:NBN:fi:tuni-202108186636.
Rantanen, V. & Komp-Leukkunen, K. (2023). Self-employment and Adaptation to Transformative Digitalization during Later Working Life. Nordic Journal of Working Life Studies, Vol. 14(S12).
Romero-Moreno, F. (2024). Generative AI and deepfakes: a human rights approach to tackling harmful content. International Review of Law, Computers & Technology, pp. 1–30. Retrieved from https://doi.org/10.1080/13600869.2024.2324540.
Ruohonen, J. & Mickelsson, S. (2023). Reflections on the Data Governance Act. Digital Society, Vol. 2.
Sankari, S.; Koulu, R.; Hirvonen, H. & Heikkinen, T. (2023). Artificial intelligence and the law: can we and should we regulate AI systems. In Brożek, B.; Kanevskaia, O. & Pałka, P. Research Handbook on Law and Technology, pp. 427-449. Edward Elgar. Retrieved from https://www.elgaronline.com/edcollchap/book/9781803921327/chapter26.xml.
Schutte, S.; Majewski, L. & Havu, K. (2021). Damages Liability for Harm Caused by Artificial Intelligence – EU Law in Flux. Helsinki Legal Studies Research Paper, Vol. 69. Retrieved from https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3897839.
Sharon, T. & Gellert, R. (2023). Regulating Big Tech expansionism? Sphere transgressions and the limits of Europe’s digital regulatory strategy. Information, Communication & Society, pp. 1–18.
Siitonen, M.; Laajalahti, A. & Venäläinen, P. (2024). Mapping Automation in Journalism Studies 2010–2019: A Literature Review. Journalism Studies, Vol. 3, pp. 299-318. Retrieved from https://converis.jyu.fi/converis/portal/detail/Publication/197574764?lang=en_GB.
Sjödin, D.; Liljeborg, A. & Mutter, S. (2024, March). Conceptualizing ecosystem management capabilities: Managing the ecosystem-organization interface. Technological Forecasting and Social Change, Vol. 200(1), pp. 123-187. Retrieved from https://www.researchgate.net/publication/378641715_Conceptualizing_ecosystem_management_capabilities_Managing_the_ecosystem-organization_interface.
Stark, A.; Ferm, K.; Hanson, R.; Johansson, M.; Khajavi, S.; Medbo, L. & Holmström, J. (2023). Hybrid digital manufacturing: Capturing the value of digitalization. Journal of Operations Management, Vol. 69(6), pp. 890-910. Retrieved from https://onlinelibrary.wiley.com/doi/10.1002/joom.1231.
Stockman, C.; O’Connell, A. & Nottingham, E. (2024). When it’s cute but also dark: critical analysis of FarmVille 3’s game design in the digital economy. International Review of Law, Computers & Technology, pp. 1–23.
Susarla, A. (2024). The conversation. Retrieved from Generative AI could leave users holding the bag for copyright violations: https://theconversation.com/generative-ai-could-leave-users-holding-the-bag-for-copyright-violations-225760.
Toset, S.; Late, E. & Kumpulainen, S. (2023, December 15). More than data repositories: perceived information needs for the development of social sciences and humanities research infrastructures. Information Research an International Electronic Journal, Vol. 28(4), pp. 83–101. Retrieved from https://informationr.net/infres/article/view/598.
van Gerven, M. (2022). Studying social policy in the digital age. In Nelson,K.; Nieuwenhuis, R. & Yerkes, M. Social Policy in Changing European Societies, pp. 251-264. Retrieved from https://www.elgaronline.com/edcollchap-oa/book/9781802201710/book-part-9781802201710-25.xml.
van Zoonen, W. S. & Treem, J. W. (2024). Algorithmic management of crowdworkers: Implications for workers’ identity, belonging, and meaningfulness of work. Computers in Human Behavior, Vol. 152.
Vellinga, N. E. (2024). Rethinking compensation in light of the development of AI. International Review of Law, Computers & Technology, pp. 1–22.
Viljanen, M. & Parviainen, H. (2022). AI Applications and Regulation: Mapping the Regulatory Strata. Frontiers in Computer Science, Vol. 3. Retrieved from https://www.frontiersin.org/articles/10.3389/fcomp.2021.779957/full.
Weismann, M. F. (2024). Getting global cooperation right on internet governance: strategic roadmaps for the future. International Review of Law, Computers & Technology, pp. 1–27.
Wingström, R.; Hautala, J. & Lundman, R. (2022). Redefining Creativity in the Era of AI? Perspectives of Computer Scientists and New Media Artists. Creativity Research Journal, Vol. 36(2), pp. 177-193. Retrieved from https://www.tandfonline.com/doi/epdf/10.1080/10400419.2022.2107850?needAccess=true.
Wolff, J.; Lehr, W. & Yoo, C. S. (2023, August 1). Lessons from GDPR for AI Policymaking. Virginia Journal of Law & Technology, Vol. 27. Retrieved from SSRN: https://ssrn.com/abstract=4528698.
Yigit, Y.; Buchanan, W. J.; Tehrani, M. G. & Maglaras, L. (2024). Review of Generative AI Methods in Cybersecurity. Retrieved from https://arxiv.org/html/2403.08701v2#S7.
Zanfir-Fortuna, G. (2024). Follow the (personal) Data: Positioning Data Protection Law as the Cornerstone of EU’s ‘Fit for the Digital Age’ Legislative Package. Elsevier Analytical Services Research Paper Series, pp. 01-16.
Zanfir-Fortuna, G. (2024, March 15). Follow the (personal) Data: Positioning Data Protection Law as the Cornerstone of EU’s ‘Fit for the Digital Age’ Legislative Package. Elsevier Analytical Services Research Paper Series, pp. 01-16. Retrieved from https://ssrn.com/abstract=4794182 or http://dx.doi.org/10.2139/ssrn.4794182.
*** Court of Justice of the European Union (2021). Case C-340/21: Request for a preliminary ruling from the Varhoven administrativen sad (Bulgaria) lodged on 2 June 2021 — VB v Natsionalna agentsia za prihodite. Retrieved from https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A62021CN0340.
*** Court of Justice of the European Union (2022). Judgment of the Court (Third Chamber) of 14 December 2023. VX and AT v Gemeinde Ummendorf. Request for a preliminary ruling from the Landgericht Ravensburg. Reference for a preliminary ruling – Protection of personal data – Regulation (EU) 2016/679 – Article 82 – Right to compensation and liability – Concept of ‘non-material damage’ – Online publication of the agenda for a municipal council meeting containing personal data – Publication without the consent of the data subjects – Claim of those data subjects seeking compensation for non-material damage. Case C-456/22. Retrieved from https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0456.
*** Court of Justice of the European Union (5 December, 2023). Judgments in Cases C-683/21 and C-807/21. Retrieved from https://www.debandt.eu/fr/node/665.
*** Court of Justice of the European Union (2023, January 12). Judgment of the Court (First Chamber) of 12 January 2023. RW v Österreichische Post AG. Request for a preliminary ruling from the Oberster Gerichtshof. Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 15(1)(c) – Data subject’s right of access to his or her data – Information about the recipients or categories of recipient to whom the personal data have been or will be disclosed – Restrictions. Case C-154/21. Retrieved from https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX:62021CJ0154.
*** Court of Justice of the European Union (2023, May 4). Judgment of the Court (Fifth Chamber). In Case C-60/22. Retrieved from https://curia.europa.eu/juris/document/document.jsf?text=&docid=273289&pageIndex=0&doclang=EN&mode=lst&dir=&occ=first&part=1&cid=4850182.
*** Court of Justice of the European Union (2023, May 4). Judgment of the Court (Third Chamber). In Case C-300/21. Retrieved from https://eu.vlex.com/vid/ui-contro-osterreichische-post-930388280
*** Court of Justice of the European Union (2023, October 23). Reference for a preliminary ruling – Processing of personal data – Regulation (EU) 2016/679 – Articles 12, 15 and 23 – Data subject’s right of access to his or her data undergoing processing – Right to obtain a first copy of those data free of charge – Processing of a patient’s data by his or her medical practitioner – Medical records – Reasons for the request for access – Use of data for the purpose of triggering the liability of the person providing treatment – Concept of copy. In Case C‑307/22, REQUEST for a preliminary ruling under Article 267 TFEU from the Bundesgerichtshof (Federal Court of Justice, Germany), made by decision of 29 March 2022, received at the Court on 10 May 2022, in the proceedings. Retrieved from https://curia.europa.eu/juris/document/document.jsf?text=&docid=279125&pageIndex=0&doclang=en&mode=lst&dir=&occ=first&part=1&cid=3588036.
*** Court of Justice of the European Union (7 March, 2024). JUDGMENT OF THE COURT (Sixth Chamber). Reference for a preliminary ruling – Protection of personal data – Regulation (EU) 2016/679 – Articles 2, 4, 6, 10 and 86 – Data held by a court relating to the criminal convictions of a natural person – Oral disclosure of such data to a commercial company on account of a competition organised by that company – Concept of ‘processing of personal data’ – National legislation governing access to those data – Reconciliation between the right of public access to official documents and the protection of personal data. https://curia.europa.eu/juris/document/document.jsf?text=&docid=283530&pageIndex=0&doclang=EN&mode=req&dir=&occ=first&part=1.
*** European Commission (2022). Directive of the European Parliament and of the Council on adapting non-contractual civil liability rules to artificial intelligence (AI Liability Directive) (COM/2022/496 final). Retrieved from https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A52022PC0496.
*** European Data Protection Supervisor (2024). The History of the General Data Protection Regulation. Retrieved April 27, 2024, from https://www.edps.europa.eu/data-protection/data-protection/legislation/history-general-data-protection-regulation_en.
*** European Parliament, Council of the European Union (2016). Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance). Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2016/679/oj.
*** European Parliament, Council of the European Union (2022). Regulation (EU) 2022/1925 of the European Parliament and of the Council of 14 September 2022 on contestable and fair markets in the digital sector and amending Directives (EU) 2019/1937 and (EU) 2020/1828 (Digital Markets Act) (Text with EEA relevance). Official Journal of the European Union. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32022R1925.
*** European Parliament, Council of the European Union (2022). Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market for Digital Services and amending Directive 2000/31/EC (Digital Services Act) (Text with EEA relevance). Official Journal of the European Union. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32022R2065.
*** European Parliament, Council of the European Union (2022). Regulation (EU) 2022/868 of the European Parliament and of the Council of 30 May 2022 on European data governance and amending Regulation (EU) 2018/1724 (Data Governance Act) (Text with EEA relevance). Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2022/868/oj.
*** European Parliament, Council of the European Union (2023). Regulation (EU) 2023/2854 of the European Parliament and of the Council of 13 December 2023 on harmonised rules on fair access to and use of data and amending Regulation (EU) 2017/2394 and Directive (EU) 2020/1828 (Data Act). Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2023/2854.
*** European Parliament. EU Artificial Intelligence Act (2024). Retrieved April 26, 2024, from https://www.europarl.europa.eu/doceo/document/TA-9-2024-0138_EN.pdf.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2024 Junaid Butt
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
The author fully assumes the content originality and the holograph signature makes him responsible in case of trial.
