Search

Several sector-specific studies on EU data protection and cybersecurity frameworks can be found in the literature, but their differing legal domains has hindered the development of a common analysis of the different sets of provisions from a business perspective. This article sets out to bridge this gap, providing a systematic review and a cross-cutting operational analysis of the main legal instruments that constitute the common European approach to personal data and cybersecurity regulation for the business sector. We aim to demonstrate the existence of a core of common principles and procedural approaches referring to specific cybersecurity and data security technologies. Analysis reveals a coordinated regulatory model based on five pillars: risk-based approach, by-design approach, reporting obligations, resilience and certification schemes. We also highlight the relationship between the main directives and regulations. [ABSTRACT FROM AUTHOR]

The article discusses request to the Court of Justice of the European Union (CJEU) for a preliminary ruling made by the Italian Supreme Court concerning data protection and the processing of personal information provided by the Italian Commercial Register. Topics addressed include facts of the case of public registers, arguments provided by the Court in favour of data disclosure, and importance of investigating whether public records should necessarily be accessible without any restrictions.

Copyright of IDP: Revista de Internet, Derecho y Politica is the property of Universitat Oberta de Catalunya and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

The article focuses on applicable law and task distribution on cloud computing, trans-border data flows and the European Directive 95/46/EC. The legal qualification of the subjects involved in trans-border data flow is fundamental in order to apply the principles from the Directive and to define the responsibilities and the obligations of the parties.

The article discusses the guidelines set by the Council of Europe Data Protection Committee concerning data protection in the Big Data context. Topics covered include the importance of risk assessment procedures in data protection, the role of data protection authorities in supporting data controllers, and the provisions of the guidelines concerning the by-design approach and data subject's consent.