Key developments
- ⚖️ The Court of Justice of the European Union (CJEU) finds in Opinion 1/15, of 26 July 2017, that a foreseen agreement with Canada regarding the transfer of PNR data cannot be concluded in its negotiated form because several provisions are incompatible with EU fundamental rights. The CJEU also decides in Manni (C‑398/15), on 9 March 2017, in Rīgas satiksme (C-13/16), on 4 May 2017; Puškár (C‑73/16), on 27 September 2017, and Nowak (C‑434/16), on 20 December 2017.
- 🇮🇳 ⚖️ In India, the nine judges of the Supreme Court unanimously affirm the right to privacy as a fundamental right under the Constitution, in Justice K.S. Puttaswamy vs. Union of India. The Court holds that the right to privacy is integral to freedoms guaranteed across fundamental rights, and was an intrinsic aspect of dignity, autonomy and liberty.
Also this year
- ⚖️ The European Court of Human Rights (ECtHR) decides in Bărbulescu v. Romania, on 5 September 2017, and in Satakunnan Markkinapörssi Oy and Satamedia Oy v Finland, on 27 June 2017.
- 🇪🇺 The European Commission publishes:
- Proposal for a Regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002/58/EC (Regulation on Privacy and Electronic Communications), COM(2017) 10 final, 10.1.2017.
- Proposal for a Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC, COM(2017) 8 final, 10.1.2017.
- Communication Building a European Data Economy, COM(2017) 9 final, 10.1.2017.
- Report on the first annual review of the functioning of the EU–U.S. Privacy Shield, COM(2017) 611 final, 18.10.2017.
- From 7 February to 15 March 2017 takes place a substantive hearing before the Irish High Court in the Litigation concerning Standard Contractual Clauses; the full transcripts are available here.
- 🇪🇺 The European Parliament adopts on 14 March 2017 a Resolution on fundamental rights implications of big data: Privacy, data protection, non-discrimination, security and law-enforcement.
Literature
- Albrecht, Jan Philipp and Florian Jotzo (2017), Das neue Datenschutzrecht der EU: Grundlagen – Gesetzgebungsverfahren – Synopse, Nomos.
- Brkan, Maja, and Evangelia Psychogiopoulou (eds.) (2017), Courts, privacy and data protection in the digital environment, Edward Elgar Publishing.
- Cooper, Daniel and Christopher Kuner (2017), Data Protection Law and International Dispute Resolution, Brill Nijhoff.
- Friedewald, Michael, J. Peter Burgess, Johann Čas, Rocco Bellanova, and Walter Peissl (2017), Surveillance, Privacy and Security Citizens’ Perspectives, Routledge.
- Friedewald, Michael, Jörn Lamla and Alexander Roßnagel (eds.) (2017), Informationelle Selbstbestimmung im digitalen Wandel, Springer.
- Hustinx, Peter (2017), EU Data Protection Law: The Review of Directive 95/46/EC and the Proposed General Data Protection Regulation, in Marise Cremona (ed.), New technologies and EU law, Oxford University Press, 123-173.
- Kilian, Wolfgang (2017), ‘Idee und Wirklichkeit der Rechtsinformatik in Deutschland‘, Computer und Recht 33(3), 202-212.
- Kirby, Michael (2017), ‘Privacy today: Something old, something new, something borrowed, something blue‘, Journal of Law, Information and Science 25 (1).
- Lauer, Josh (2017), Creditworthy: A History of Consumer Surveillance and Financial Identity in America, Columbia University Press.
- Leenes, Ronald et al. (eds.) (2017), Data Protection and Privacy: The Age of Intelligent Machines, Bloomsbury.
- López Calvo, José (2017), Comentarios al Reglamento Europeo de Protección de Datos, Sepin.
- Meškić, Zlatan, and Darko Samardžić (2017), ‘The Strict Necessity Test on Data Protection by the CJEU: A Proportionality Test to Face the Challenges at the Beginning of a New Digital Era in the Midst of Security Concerns‘, Croatian Yearbook of European Law & Policy 13(1) 133-168.
- Pohle, Jörg (2017), Datenschutz und Technikgestaltung, Diss. rer. nat. HU.
- Polčák, Radim and Dan Jerker B. Svantesson (2017), Information Sovereignty: Data Privacy, Sovereign Powers and the Rule of Law, Edward Elgar.
- Richardson, Megan (2017), The Right to Privacy: Origins and Influence of a Nineteenth-Century Idea, Cambridge University Press.
- Selbst, Andrew, and Julia Powles (2017), ‘Meaningful information and the right to explanation’, International Data Privacy Law, 7(4), 233–242.
- Schep, Tijmen (2017), Design My Privacy: 8 Principles for Better Privacy Design, BIS.
- Schwartz, Paul M. and Karl-Nikolaus Peifer (2017), ‘Transatlantic data privacy law‘, The Georgetown Law Journal 106, 115-179.
- Svantesson, Dan Jerker B. (2017), Solving the Internet Jurisdiction Puzzle, Oxford University Press.
- Svantesson, Dan Jerker B. and Dariusz Kloza (eds.) (2017), Trans-Atlantic Data Privacy Relations as a Challenge for Democracy, Intersentia.
- Van Alsenoy, Brendan (2017), Data protection law in the EU: Roles, responsibilities and liability, Intersentia.
- Wachter, Sandra, Brent Mittelstadt, and Luciano Floridi (2017), ‘Why a Right to Explanation of Automated Decision-Making Does Not Exist in the General Data Protection Regulation‘, International Data Privacy Law, 7(2), 76–99.
- Wolfson, Josiah (2017), ‘The Expanding Scope of Human Rights in a Technological World — Using the Inter-American Court of Human Rights to Establish a Minimum Data Protection Standard across Latin America‘,
The University of Miami Inter-American Law Review 48(3), 188-232.
Music
- 🎵 Killa DBA ‘Data protection’ (2017).
In the media
- Powles, Julia, ‘The EU is right to take on Facebook, but mere fines don’t protect us from tech giants‘, The Guardian, 21 May 2017.
In memoriam
- Adalbert Podlech (26 September 1929 – 29 April 2017): known for his significant contributions to the development of data protection in Germany. Watch this interview reviewing his career (in German).

- Stefano Rodotà (30 May 1933 -23 June 2017). Member of the Italian Parliament (1979-1994), of the European Parliament (1987), and of the Parliamentary Assembly of the Council of Europe (1983-1994). Chair of the Italian Data Protection Authority (1997-2005). Chair of the European Data Protection Working Group (2001-2005). Member of the EU Group on Ethics of Science and New Technologies (1993-2005). Member of the Convention for the Charter of Fundamental Rights of the EU (2000). Member of the OECD Group for the Guidelines on Data Protection.