Beyond ʽHaving a Domesticʼ? Regulatory Interpretation of European Data Protection Law and Individual Publication
Print-print of Computer Law and Security Review (Vol. 33 (3), pp. 275-297) (2017)
University of Cambridge Faculty of Law Research Paper No. 54/2016
40 Pages Posted: 4 Oct 2016 Last revised: 5 May 2020
Date Written: October 4, 2016
Abstract
Statutory Data Protection Authorities (DPAs) who act as the guardians of data protection across the European Economic Area (EEA) have faced unprecedented interpretative challenges as a result of the explosion of indeterminate publication by individuals in the form of blogs, social networking and other online forums. Through both a questionnaire and systematic review of EEA DPA websites, this paper finds that these regulators have general adopted a strict interpretative of the law here, although considerable internal variation is also present. Almost all see data protection as engaged, around half argue that publication in the general social networking context requires data subject consent and even when individual publication is targeted towards the collective public many DPAs demonstrate some reluctance to apply the special expressive purposes (aka the journalistic) derogation. The paper argues for an alternative tripartite approach under the forthcoming Regulation which better and more consistently accommodates the competing free expression rights and also the limited capabilities reasonably to be expected of private individuals. The law’s personal exemption should cover individual publication so long as this does not pose a serious prima facie risk to privacy or other fundamental data protection rights. The special expressive purposes derogation should protect individuals who are disseminating a message to the collective public without discrimination. Finally, the Regulation’s new freedom of expression clause should ensure that individual publication which principally instantiates self-expression is subject only to the core of data protection’s substantive and supervisory provisions.
Keywords: Data Protection, Citizen journalism, Defamation, Freedom of Expression, Free Speech, Blogs, Social Media, Household exemption, Journalistic derogation, Online abuse, Personal exemption, Privacy, Reputation, Shaming, Online Abuse, Citizen Journalism
Suggested Citation: Suggested Citation