Personal data protection

Zaštita osobnih podataka u Republici Hrvatskoj ustavna je kategorija zajamčena svakoj fizičkoj osobi bez obzira na državljanstvo i prebivalište te neovisno o rasi, boji kože, spolu, jeziku, vjeri, političkom ili drugom uvjerenju, nacionalnom ili socijalnom podrijetlu, imovini, rođenju, naobrazbi, društvenom položaju ili drugim osobinama. Ista se u Republici Hrvatskoj uređuje Zakonom o zaštiti osobnih podataka sa svrhom zaštite privatnog života i ostalih ljudskih prava i temeljnih sloboda u prikupljanju, obradi i korištenju osobnih podataka. Zakon o zaštiti osobnih podataka veže se na pravne tekovine Ujedinjenih naroda te Europsku konvenciju za zaštitu ljudskih prava i temeljnih sloboda. Na temelju navedenog zakona u Republici Hrvatskoj osnovana je Agencija za zaštitu osobnih podataka koja se, oslanjajući se na Direktivu 95/46 Europskog parlamenta, brine za nadzor nad obradom osobnih podataka kao samostalno i neovisno tijelo. Ovaj rad donosi pregled temeljnih pojmova vezanih uz zaštitu osobnih podataka prvenstveno vezanih uz identitet osobe te pregled organizacije zaštite osobnih podataka u Republici Hrvatskoj sa usporedbom u odnosu na međunarodno zakonodavstvo te primjerom iz sudske prakse.Protection of personal data in the Republic of Croatia is guaranteed as a constitutional category to every person regardless of nationality and place of residence and regardless of race, color, sex, language, religion, political or other opinion, national or social origin, property, birth, education, social status or other characteristics. In the Republic of Croatia protection of personal data is regulated by the Law on Protection of Personal Data in order to protect privacy and other human rights and fundamental freedoms during collection, processing and use of personal data. The Law on Protection of Personal Data binds on the legal heritage of the United Nations and the European Convention for the Protection of Human Rights and Fundamental Freedoms. Based on this law, an Agency for protection of personal data was established which controls the processing of personal data (relying on Directive 95/46 of the European Parliament) as an autonomous and independent body. This paper presents an overview of basic concepts related to the protection of personal data primarily related to the identity of the person and the organization of the protection of personal data in the Republic of Croatia, with a comparison in relation to international legislation and case law

การคุ้มครองข้อมูลชีวมาตรภายใต้พระราชบัญญัติคุ้มครองข้อมูลส่วนบุคคล พ.ศ. 2562 Biometric Personal Data Protection under Personal Data Protection Act B.E. 2560

บทคัดย่อเนื่องจากปัจจุบันมีการละเมิดข้อมูลส่วนบุคคลที่ก่อให้เกิดความเสียหายต่อเจ้าของข้อมูลส่วนบุคคล โดยเฉพาะการจัดเก็บข้อมูลชีวมาตร ซึ่งมีผลมาจากความก้าวหน้าทางเทคโนโลยีที่เก็บรวบรวมใช้ หรือเปิดเผยข้อมูลส่วนบุคคล การเข้าถึงข้อมูลส่วนบุคคลทำได้โดยง่าย สะดวก และรวดเร็ว อันมีผลกระทบต่อความมั่นคง และเศรษฐกิจโดยรวม ประเทศไทยจึงได้มีการประกาศใช้พระราชบัญญัติคุ้มครองข้อมูลส่วนบุคคล พ.ศ. 2560 ขึ้น เพื่อกำหนดหลักเกณฑ์ กลไก หรือมาตรการกำกับดูแลเกี่ยวกับการให้ความคุ้มครองข้อมูลส่วนบุคคลอย่างไรก็ตาม กฎหมายฉบับนี้ยังมีประเด็นที่น่าศึกษาวิเคราะห์เพิ่มเติมในเรื่องของการเก็บรวม รวมใช้ ประมวลผล และการส่งหรือโอนข้อมูลไปยังต่างประเทศ โดยได้ศึกษาเปรียบเทียบจากกฎหมายคุ้มครองส่วนบุคคลของต่างประเทศ ได้แก่ สหภาพยุโรป ประเทศสหรัฐอเมริกา ประเทศแคนาดา และประเทศสหพันธรัฐเยอรมัน เพื่อนำมาปรับปรุง แก้ไข หรือเพิ่มเติมบทบัญญัติกฎหมายของประเทศไทยอันเป็นประโยชน์ด้านการคุ้มครองข้อมูลส่วนบุคคลได้อย่างมีประสิทธิภาพมากยิ่งขึ้น AbstractNowadays, the violation of personal information causes damage to the information owners, especially the biometric data, because the advance technologymade the acquire access and disclose of personal data easily. Due to mentional problem may affect Thailand’s national security and economy; therefore, the Government promulgated the Personal Data Protection Act 2017 to specify criteria, mechanisms, or regulatory measures regarding the protection of personal data. However, this Act still has some issues that should study further regarding the collection, usage, processing transmission, and or transferring of information to other countries. This study employed a comparative study of personal data protection laws of foreign countries such as the European Union, the United States of America, Canada, and Germany should in order to improve or amend the Thai law to become more efficient in the protection of personal data

Personal data protection for sole traders

In the context of an open definition of personal data and accepting a broad understanding of the subject range of the PDPA44, information about natural persons who conduct business activity should be treated as personal data, as it is frequently information allowing a specific natural person to be identified. On the other hand, publishing personal data of people with business activity in CEIDG forces the conclusion that the sole trader decides to makes the data broadly accessible, and therefore is aware that its protection is limited. It should not mean that commonly accessible data can be processed absolutely freely with complete disregard for PDPA, as business entities also have a right to privacy. However, from a practical point of view, in their case this right is limited by the rule of the publicness of economic turnover. It can be noticed that the practice of economic turnover forces a more flexible approach to the presented issue45. In this respect, since May 2016, the Act has introduced new provisions that are intended to ensure a realistic balance between the business entity’s and public interest. The purpose of the amendment of the Act on Freedom of Business Activity, adopted in September 2015, is primarily to accelerate the service of undertakings. Undoubtedly, in the content of the business entity’s data the revision of the Act introduced provisions broadening the scope of data contained in the CEIDG entry. The main changes that came into force can certainly stir up controversies. It is difficult to explicitly declare whether those legal solutions are effective and positive. Certainly, introducing regulations excluding the PDPA regarding the personal data of a sole trader, assuming the public nature of the overwhelming majority of their data, results in a situation in which they are not properly protected

IoT Platform for Personal Data Protection

Since the establishment of IoT (Internet of Things), a variety of end devices become interconnected with one another, and thus, new types of security challenges appeared which have to be taken care of. Personal data, at the moment, have a higher risk of being hacked by various types of cyberattacks, as a result of the abundance of connectivity in the cloud realm. To face this type of challenges, the European Union decided to implement in 2018 the GDPR (General Data Protection Regulation) that implies that personal data of any kind can be shared with a third party only with their accord and can be, as well, deleted by them, whenever they desire. Henceforth, this paper introduces the PARFAIT project that will take into account this regulation and will integrate a platform with the purpose of protecting the personal data in IoT based applications, especially for smart home, smart office and smart hotel use cases.</p

Personal data protection

Trabajo de Fin Máster del Título Propio de la USAL "Máster en acceso a la abogacía". Curso 2015-2017[ES] El presente trabajo tratará de forma eminentemente práctica la protección de datos de carácter personal, que como consecuencia de la reciente Sentencia el TJUE de 6 de Octubre de 2015, se ha visto en la necesidad de buscar alternativas con respecto a la situación anterior a la misma. Siendo esta Sentencia el punto de partida que viene a desvirtuar el concepto de Puerto Seguro o Safe Harbor, dicho de forma sencilla, que la transferencia de datos de carácter personal con Estados Unidos y su posterior tratamiento no es seguro para el ciudadano europeo, ya que las autoridades estadounidenses tienen acceso casi indiscriminado a los mismos. Analizando a fondo dicha sentencia y el marco en el cual se trabajaba antes de ella, haré una comparación de cómo ha quedado configurado el nuevo escenario para la protección de los datos personales y lo que como profesionales del derecho podemos hacer para proporcionar la debida y exigida seguridad en el tránsito y tratamiento de los datos, así como las nuevas posibilidades que van surgiendo para hacer efectiva la protección, las cuales cristalizaron en la Decisión 1250/2016.[EN] This work will deal in an eminently practical way with the protection of personal data, which as a consequence of the recent Judgment of the CJEU of October 6, 2015, has been in need of looking for alternatives with regard to the situation prior to it. This Judgment is the point of departure that is to detract from the concept of Safe Harbor, simply said that the transfer of personal data with the United States and its subsequent treatment is not safe for the European citizen, since The US authorities have almost indiscriminate access to them. Analyzing in depth this sentence and the framework in which it was worked before it, I will make a comparison of how the new scenario for the protection of personal data has been configured and what, as legal professionals, we can do to provide the due and required security in transit and data processing, as well as the new possibilities that are emerging to make effective the protection, which crystallized in Decision 1250/2016

Personal Data Protection in EU, Where to?

The protection of individuals regarding the processing of personal data and free movement of such data represents a growing concern of the States, but also of the EU bodies. At the level of EU Member States, the issue of protecting the individuals regarding the processing of personal data and free movement of such data poses no particular problems. Internationally and especially between the member states of the European Union, the existing regulatory framework no longer responds to theses needs such as: online activities, digital economy, internet banking, etc., being increasingly obvious the tendency of fragmentation of the movement of personal data

Formulation of Specific Personal Data Protection in Relation to Court Decisions

This research aims to examine and analyze the actualization of specific personal data protection in the context of court decisions. In the digital era and with the advancement of information technology, the protection of personal data has become an increasingly important and relevant issue. However, there is a need to further understand how specific personal data protection is realized and implemented in the context of court decisions. This research adopts a normative legal research method with a legislative and conceptual approach. The data used consists of primary legal materials such as legislation and court decisions related to personal data protection. Additionally, this study also refers to legal literature and expert opinions regarding personal data protection and court decisions. The results of the research indicate that the actualization of specific personal data protection in court decisions is an exception due to the principle of open court proceedings and the publication of trial outcomes. This relates to the specific personal data protection concerning criminal records. There is a need to exempt criminal records from the exceptions stated in court decisions. The importance of exempting personal data protection in the context of court decisions is also emphasized to prevent misuse in the judicial process and maintain public trust in the justice system. This research provides an important contribution to identify and analyze how specific personal data protection can be implemented in court decisions. The implications of this research are expected to provide a better understanding for relevant parties, including the judiciary, government, and the general public, regarding the importance of specific personal data protection in the context of justice. Keywords: formulation, personal data protection, court decisio

Personal Data Protection: Insights in the digital context

This position paper presents an overview of key insights pertaining to the protection of personal data in the digital business context, as derived from pertinent academic and practitioner literature. These insights, along with insights from subject matter experts, have informed development of IVI’s IT-CMF Personal Data Protection (PDP) Critical Capability