Mandating Data Rights Exercises

International Journal of Data Privacy Law

26 Pages Posted: 18 Apr 2022 Last revised: 21 Mar 2023

See all articles by Alexandra Giannopoulou

Alexandra Giannopoulou

University of Amsterdam - Institute for Information Law (IViR)

Jef Ausloos

University of Amsterdam - Institute for Information Law (IViR)

Sylvie Delacroix

King's College London; The Alan Turing Institute

Heleen Janssen

University of Cambridge - Computer Laboratory; University of Amsterdam - Institute for Information Law

Date Written: March 19, 2022

Abstract

Data subject rights constitute critical tools for empowerment in the digitised society. These rights – especially those found in the General Data Protection Regulation (GDPR) – are intent agnostic and can be deployed to safeguard many interests and (fundamental) rights in a wide variety of contexts, not just individually, but also collectively. As data rights are increasingly exercised collectively and/or in relation to very complex data ecosystems, we can observe growing involvement of intermediating entities exercising rights on behalf of data subjects. Yet, the exact contours of whether and how data protection law allows these rights to be mandated in the first place remains an underexplored area. With this in mind, this article provides more clarity on the challenges and legal requirements of data rights mandates, specifically by looking at private law. The paper explains how data rights mandates relate to the GDPR, and explores the way in which private law arrangements structure - and constrain - such mandates.

Please reference as Giannopoulou, Alexandra, Jef Ausloos, Sylvie Delacroix, and Heleen Janssen. ‘Intermediating Data Rights Exercises: The Role of Legal Mandates’. International Data Privacy Law.
https://academic.oup.com/idpl/advance-article/doi/10.1093/idpl/ipac017/6762039.

Keywords: Data protection, data rights, data rights intermediaries, GDPR, fiduciary duties, mandate

Suggested Citation

Giannopoulou, Alexandra and Ausloos, Jef and Delacroix, Sylvie and Janssen, Heleen, Mandating Data Rights Exercises (March 19, 2022). International Journal of Data Privacy Law, Available at SSRN: https://ssrn.com/abstract=4061726 or http://dx.doi.org/10.2139/ssrn.4061726

Alexandra Giannopoulou (Contact Author)

University of Amsterdam - Institute for Information Law (IViR) ( email )

Rokin 84
Amsterdam, 1012 KX
Netherlands

Jef Ausloos

University of Amsterdam - Institute for Information Law (IViR) ( email )

Roeterseilandcampus, Building A, 5th floor
Nieuwe Achtergracht 166
Amsterdam, Noord-Holland 1018 WV
Netherlands

HOME PAGE: http://ivir.nl

Sylvie Delacroix

King's College London ( email )

London
United Kingdom

HOME PAGE: http://https://delacroix.uk

The Alan Turing Institute ( email )

96 Euston Road
London, NW1 2DB
United Kingdom

Heleen Janssen

University of Cambridge - Computer Laboratory ( email )

15 JJ Thomson Avenue
William Gates Building
Cambridge, CB3 0FD
United Kingdom

University of Amsterdam - Institute for Information Law ( email )

NIeuwe Achtergracht 166
Amsterdam, North Holland 1018 WV
Netherlands

HOME PAGE: http://https://blockchain-society.science/?page_id=67

Do you have a job opening that you would like to promote on SSRN?

Paper statistics

Downloads
149
Abstract Views
541
Rank
369,921
PlumX Metrics