|
|
xvii | |
|
|
xxiii | |
|
|
xxvii | |
Note to the Readers |
|
xxix | |
|
|
1 | (36) |
|
Section 1 The Tolling Giant |
|
|
1 | (3) |
|
Section 2 How We Got Here |
|
|
4 | (23) |
|
|
9 | (1) |
|
2.1.1 Ubiquity of Sensors |
|
|
10 | (2) |
|
|
12 | (1) |
|
2.1.3 Instant and Global Communication |
|
|
13 | (2) |
|
|
15 | (2) |
|
2.2.1 Information Asymmetry |
|
|
17 | (6) |
|
|
23 | (4) |
|
Section 3 The Control Conundrum |
|
|
27 | (3) |
|
3.1 Data (dis)Empowerment |
|
|
27 | (2) |
|
3.2 Data Protection Law's Toolbox |
|
|
29 | (1) |
|
Section 4 Structure and Approach |
|
|
30 | (7) |
|
|
30 | (1) |
|
|
31 | (2) |
|
|
33 | (4) |
|
PART I THE RIGHT TO ERASURE IN EU DATA PROTECTION LAW |
|
|
|
2 Foundations of Data Protection Law |
|
|
37 | (80) |
|
|
37 | (1) |
|
Section 2 The Fundamental Right to Data Protection |
|
|
37 | (54) |
|
|
38 | (1) |
|
|
39 | (1) |
|
|
40 | (2) |
|
2.1.3 International Level |
|
|
42 | (3) |
|
2.1.4 Data Protection Directive |
|
|
45 | (2) |
|
2.1.5 Charter of Fundamental Rights |
|
|
47 | (1) |
|
2.1.6 CJEU Takes the Limelight |
|
|
48 | (3) |
|
2.1.7 General Data Protection Regulation |
|
|
51 | (3) |
|
2.2 Rationale of the Fundamental Right to Data Protection in Article 8 of the Charter |
|
|
54 | (1) |
|
|
54 | (6) |
|
2.2.2 Individual Control over Personal Data |
|
|
60 | (8) |
|
|
68 | (1) |
|
2.3 From the Fundamental Right to Data Protection to the General Data Protection Regulation |
|
|
69 | (1) |
|
2.3.1 From Control to Fair Balancing |
|
|
70 | (3) |
|
2.3.2 The GDPR's Pluralism |
|
|
73 | (9) |
|
2.3.3 Operationalization of Data Protection Law |
|
|
82 | (9) |
|
Section 3 The Right to Erasure: Ultimate Power Tool? |
|
|
91 | (18) |
|
|
92 | (1) |
|
|
92 | (6) |
|
3.1.2 Legislative History of Article 17 GDPR |
|
|
98 | (5) |
|
|
103 | (1) |
|
3.2 The Right to Erasure Today |
|
|
104 | (1) |
|
3.2.1 The Case for Ex Post Empowerment Measures |
|
|
104 | (3) |
|
|
107 | (1) |
|
3.2.3 Ultimate Power-Tool? |
|
|
108 | (1) |
|
Section 4 Conceptualizing the Right to Erasure |
|
|
109 | (6) |
|
4.1 The Right to Be Forgotten |
|
|
109 | (2) |
|
|
111 | (2) |
|
4.3 Data Protection Rights |
|
|
113 | (1) |
|
4.3.1 Right to Object (Article 21 GDPR) |
|
|
113 | (1) |
|
4.3.2 Right to Erasure (Article 17) |
|
|
113 | (1) |
|
4.3.3 Right to Restriction of Processing (Article 18) |
|
|
114 | (1) |
|
4.3.4 Right to Be Delisted |
|
|
115 | (1) |
|
|
115 | (2) |
|
3 Scope of the Right to Erasure |
|
|
117 | (79) |
|
|
117 | (1) |
|
Section 2 Territorial Scope |
|
|
117 | (10) |
|
2.1 In the Context of the Activities of an Establishment in the EU |
|
|
120 | (3) |
|
2.2 Targeting Data Subjects in the EU |
|
|
123 | (3) |
|
2.3 Public International Law |
|
|
126 | (1) |
|
|
127 | (24) |
|
3.1 What is the `Data' in Data Protection? |
|
|
127 | (1) |
|
|
127 | (6) |
|
|
133 | (5) |
|
3.1.3 Fifty Shades of Data |
|
|
138 | (10) |
|
3.1.4 Personal Data Equalizer |
|
|
148 | (2) |
|
|
150 | (1) |
|
|
151 | (25) |
|
|
151 | (3) |
|
4.2 Who to Ask for Erasure? |
|
|
154 | (1) |
|
4.2.1 Controller and Processor |
|
|
155 | (3) |
|
|
158 | (16) |
|
4.3 Third Parties and Recipients |
|
|
174 | (2) |
|
|
176 | (1) |
|
Section 5 Derogations and Exemptions |
|
|
176 | (17) |
|
5.1 Outside the Scope of EU Law |
|
|
178 | (1) |
|
|
179 | (6) |
|
5.3 Freedom of Expression and Information |
|
|
185 | (5) |
|
5.4 Archiving Purposes in the Public Interest, Scientific or Historical Research Purposes, or Statistical Purposes |
|
|
190 | (3) |
|
Section 6 Conclusion---Wide Scope, Flexible Application |
|
|
193 | (3) |
|
4 Conditions of the Right to Erasure |
|
|
196 | (81) |
|
|
196 | (2) |
|
Section 2 When Can the Right to Erasure Be Invoked? |
|
|
198 | (39) |
|
|
199 | (1) |
|
|
200 | (1) |
|
|
201 | (2) |
|
2.1.3 Granularity as the Sine Qua Non |
|
|
203 | (2) |
|
2.2 Withdrawal of Consent |
|
|
205 | (5) |
|
|
210 | (4) |
|
|
214 | (1) |
|
2.4.1 Defining `Unlawfulness' |
|
|
214 | (2) |
|
2.4.2 Different Types of (Un)Lawfulness |
|
|
216 | (10) |
|
2.4.3 Article 5 Principles |
|
|
226 | (3) |
|
2.4.4 Conflating the Right to Object with the Right to Erasure |
|
|
229 | (1) |
|
|
230 | (2) |
|
2.6 Children's Personal Data Online |
|
|
232 | (3) |
|
2.7 Interim Conclusion on the Right to Erasure Triggers |
|
|
235 | (2) |
|
Section 3 Extending the Right to Erasure |
|
|
237 | (10) |
|
3.1 Right to be Forgotten 2.0? |
|
|
237 | (4) |
|
3.2 Criteria and Obligations |
|
|
241 | (1) |
|
3.2.1 Making Personal Data Public |
|
|
241 | (3) |
|
3.2.2 Obligation of Means |
|
|
244 | (3) |
|
Section 4 When Can the Right to Erasure Not Be Invoked? |
|
|
247 | (24) |
|
4.1 To the Extent Processing Is Necessary for |
|
|
249 | (4) |
|
4.2 Freedom of Expression and Information |
|
|
253 | (6) |
|
4.3 Legal Obligation, Task Carried Out in Public Interest or Official Authority |
|
|
259 | (4) |
|
4.4 Public Interest in the Area of Public Health |
|
|
263 | (4) |
|
4.5 Public Interest Archiving, Scientific and Historical Research, or Statistical Purposes |
|
|
267 | (1) |
|
|
268 | (2) |
|
4.7 Interim Conclusion on the Right to Erasure Exemptions |
|
|
270 | (1) |
|
|
271 | (6) |
|
PART II BALANCING AND DATA PROTECTION |
|
|
|
|
277 | (54) |
|
|
277 | (1) |
|
Section 2 Balancing---From the Charter to the GDPR |
|
|
278 | (15) |
|
|
278 | (2) |
|
2.2 Balancing Fundamental Rights |
|
|
280 | (9) |
|
2.3 Balancing in the GDPR |
|
|
289 | (4) |
|
Section 3 Ex Ante and Ex Post Balancing in the GDPR |
|
|
293 | (33) |
|
3.1 From Ex Ante to Ex Post Balancing and Back Again |
|
|
293 | (2) |
|
3.2 Ex Post Balancing: Rights to Obj ect and Erasure |
|
|
295 | (1) |
|
3.2.1 Right to Object---Ex Post Balancing Par Excellence? |
|
|
295 | (3) |
|
3.2.2 Right to Erasure---Balancing Shell |
|
|
298 | (7) |
|
3.3 Ex Ante Balancing: Legitimate Interests |
|
|
305 | (1) |
|
3.3.1 Importance of the Legitimate Interests Ground |
|
|
305 | (3) |
|
3.3.2 Structure of Article 6(l)(f) Legitimate Interests Balancing |
|
|
308 | (3) |
|
3.3.3 Legitimate Interests v Legitimate Purposes |
|
|
311 | (3) |
|
3.3.4 Legitimate Interests Balancing in Operation |
|
|
314 | (12) |
|
Section 4 Summary and Conclusion |
|
|
326 | (5) |
|
|
331 | (59) |
|
|
331 | (2) |
|
Section 2 Balancing Scenarios |
|
|
333 | (53) |
|
|
333 | (1) |
|
2.1.1 Relevance with Regard to the Right to Erasure |
|
|
334 | (1) |
|
2.1.2 Article 16 Charter---Freedom to Conduct a Business |
|
|
335 | (8) |
|
2.1.3 Article 17 Charter---Right to Property |
|
|
343 | (5) |
|
|
348 | (2) |
|
|
350 | (2) |
|
2.2.1 Relevance with Regard to the Right to Erasure |
|
|
352 | (1) |
|
2.2.2 Freedom of Expression, from Derogation to Balancing Factor |
|
|
353 | (1) |
|
2.2.3 Freedom to Impart Information |
|
|
354 | (6) |
|
2.2.4 Freedom to Receive Information |
|
|
360 | (15) |
|
2.2.5 ISS Providers Caught in the Middle? |
|
|
375 | (3) |
|
|
378 | (3) |
|
2.3 Research and Security Interests |
|
|
381 | (5) |
|
Section 3 Summary and Conclusion |
|
|
386 | (4) |
|
7 Open Questions on Balancing in the GDPR |
|
|
390 | (29) |
|
Section 1 Fair Balancing, a Blessing and a Curse? |
|
|
390 | (4) |
|
Section 2 How Far Does the Responsibility to Balance Reach? |
|
|
394 | (4) |
|
Section 3 Biased Balancing? |
|
|
398 | (4) |
|
Section 4 Privatized Balancing? |
|
|
402 | (3) |
|
Section 5 Qualifying the Debate |
|
|
405 | (10) |
|
5.1 Calling a Spade, a Spade |
|
|
405 | (3) |
|
5.2 Functional and Granular Approach |
|
|
408 | (3) |
|
|
411 | (2) |
|
5.4 Fifty Shades of Erasure |
|
|
413 | (2) |
|
|
415 | (4) |
|
|
|
8 The Right to Erasure in Practice |
|
|
419 | (52) |
|
|
419 | (1) |
|
Section 2 Positioning Data Protection |
|
|
420 | (5) |
|
2.1 Control v Fair Balancing |
|
|
420 | (2) |
|
2.2 Hold to Account the Powerful |
|
|
422 | (3) |
|
Section 3 Evaluating Data Subject Empowerment |
|
|
425 | (15) |
|
|
426 | (5) |
|
3.2 Data Subject Empowerment in Practice |
|
|
431 | (5) |
|
3.3 Abusing the Right to Erasure |
|
|
436 | (2) |
|
3.4 To Erase or to Object, That's the Question |
|
|
438 | (2) |
|
Section 4 Making Data Subject Empowerment Effective |
|
|
440 | (28) |
|
4.1 No Empowerment Without Protective Measures |
|
|
443 | (1) |
|
|
443 | (3) |
|
|
446 | (3) |
|
|
449 | (1) |
|
|
450 | (1) |
|
|
451 | (1) |
|
|
452 | (6) |
|
|
458 | (1) |
|
|
458 | (4) |
|
|
462 | (2) |
|
|
464 | (3) |
|
|
467 | (1) |
|
|
468 | (3) |
|
|
471 | (8) |
|
Section 1 Goal of this Book |
|
|
471 | (1) |
|
Section 2 Summary of Findings |
|
|
472 | (4) |
|
Section 3 So, Does the Right to Erasure Contribute to Informational Self-Determination in the Information Society? |
|
|
476 | (2) |
|
|
478 | (1) |
Bibliography |
|
479 | (48) |
Index |
|
527 | |