Search

The EU General Data Protection Regulation (GDPR) was published in the Official Journal of the European Union on 4 May 2016 [4]. It will become applicable on May 25, 2018. The GDPR comprises a new right to data portability for individuals, which requires data controllers to ensure that they can hand over the personal data that has been provided by the data subject himself/herself, in a structured, commonly used and transferable format. This paper critically examines the right to data portability and suggests that in order to ensure comprehensive data portability that reaches out to all relevant stakeholders, including businesses, the provisions in the GDPR need to be analysed by taking into account EU competition rules. It suggests that lessons can be drawn from EU competition law to limit the potential adverse consequences of the right to data portability particularly for small and medium-sized enterprises. It also asserts that EU competition rules, especially Article 102 TFEU and the essential facilities doctrine, can complement data portability by facilitating mandatory access to specific data. [ABSTRACT FROM AUTHOR]

It has long been the tradition in the United Kingdom for parents to take photographs at school events. Such photographs often capture images of several children. When parental photographs were stored in family albums this was not perceived to be a problem. However, with the internet increasingly being used to share photographs, questions have been raised about whether schools should restrict parental photography or impose conditions upon online dissemination of such photographs, in order to protect children's personal data. Unfortunately, as the UK data protection regulator (the Information Commissioner) recognised in 2010 it is not entirely clear how data protection legislation applies to individuals who are posting third party personal information online. The first issue that this article seeks to explore, therefore, is how European and domestic regulators have interpreted relevant data protection legislation. It considers the extent to which parents who share photographs of third parties online may be caught by the obligations such legislation imposes. The European Commission have acknowledged that, with the development of new technologies, current European Union data protection legislation may no longer afford effective protection to individuals' personal information. This article, therefore, also explores the potential impact of the proposed data protection regulation both for individuals sharing third party information online, and for individuals whose information is shared. [ABSTRACT FROM AUTHOR]