Beyond ʽHaving a Domesticʼ? Regulatory Interpretation of European Data Protection Law and Individual Publication

Print-print of Computer Law and Security Review (Vol. 33 (3), pp. 275-297) (2017)

University of Cambridge Faculty of Law Research Paper No. 54/2016

40 Pages Posted: 4 Oct 2016 Last revised: 5 May 2020

See all articles by David Erdos

David Erdos

University of Cambridge - Faculty of Law; Trinity Hall

Date Written: October 4, 2016

Abstract

Statutory Data Protection Authorities (DPAs) who act as the guardians of data protection across the European Economic Area (EEA) have faced unprecedented interpretative challenges as a result of the explosion of indeterminate publication by individuals in the form of blogs, social networking and other online forums. Through both a questionnaire and systematic review of EEA DPA websites, this paper finds that these regulators have general adopted a strict interpretative of the law here, although considerable internal variation is also present. Almost all see data protection as engaged, around half argue that publication in the general social networking context requires data subject consent and even when individual publication is targeted towards the collective public many DPAs demonstrate some reluctance to apply the special expressive purposes (aka the journalistic) derogation. The paper argues for an alternative tripartite approach under the forthcoming Regulation which better and more consistently accommodates the competing free expression rights and also the limited capabilities reasonably to be expected of private individuals. The law’s personal exemption should cover individual publication so long as this does not pose a serious prima facie risk to privacy or other fundamental data protection rights. The special expressive purposes derogation should protect individuals who are disseminating a message to the collective public without discrimination. Finally, the Regulation’s new freedom of expression clause should ensure that individual publication which principally instantiates self-expression is subject only to the core of data protection’s substantive and supervisory provisions.

Keywords: Data Protection, Citizen journalism, Defamation, Freedom of Expression, Free Speech, Blogs, Social Media, Household exemption, Journalistic derogation, Online abuse, Personal exemption, Privacy, Reputation, Shaming, Online Abuse, Citizen Journalism

Suggested Citation

Erdos, David, Beyond ʽHaving a Domesticʼ? Regulatory Interpretation of European Data Protection Law and Individual Publication (October 4, 2016). Print-print of Computer Law and Security Review (Vol. 33 (3), pp. 275-297) (2017), University of Cambridge Faculty of Law Research Paper No. 54/2016, Available at SSRN: https://ssrn.com/abstract=2847628 or http://dx.doi.org/10.2139/ssrn.2847628

David Erdos (Contact Author)

University of Cambridge - Faculty of Law ( email )

10 West Road
Cambridge, CB3 9DZ
United Kingdom

HOME PAGE: http://www.law.cam.ac.uk/people/academic/d-o-erdos/5972

Trinity Hall ( email )

University of Cambridge
Trinity Lane
Cambridge, CB2 1TJ
United Kingdom

Do you have a job opening that you would like to promote on SSRN?

Paper statistics

Downloads
294
Abstract Views
1,864
Rank
160,640
PlumX Metrics