EU Data Protection Law

Data protection is the statutory protection provided to protect the privacy of individuals with regard to personal data. Various obligations are imposed on persons who keep personal data, eg that the data must be accurate and kept for lawful purposes. EU Data Protection Law provides an analysis of the EU's proposed General Data Protection Regulation. The book analyses the rights of the data subject including rights to information, access, rectification, erasure (right to be forgotten), restriction, portability and objection. It examines in detail the role and responsibilities of controllers and processors together with governance (including the Data Protection Officer) and risk (data protection by design and default, the Data Protection Impact Assessment, data security and the notification of subjects). The role of data protection authorities, the European Data Protection Board and enforcement mechanisms such as fines and other liabilities and penalties are also explored. Other relevant Directives are discussed together with appropriate case law.