Key developments
- ⚖️ The Court of Justice of the European Union (CJEU) rules in:
- Deutsche Post, C‑496/17, 16 January 2019;
- Buivids, C-345/17, 14 February 2019;
- Fashion ID, C‑40/17, 29 July 2019;
- GC and Others (De-referencing of sensitive data), C‑136/17, 24 September 2019;
- Google vs. CNIL, C‑507/17, 24 September 2019;
- Planet49, C‑673/17, 1 October 2019;
- Asociaţia de Proprietari bloc M5A-ScaraA, C‑708/18, 11 December 2019.
- 🇪🇺 The European Commission:
- adopts 🇪🇺🇯🇵 Commission Implementing Decision (EU) 2019/419 of 23 January 2019 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by Japan under the Act on the Protection of Personal Information;
- publishes Guidance on the Regulation on a framework for the free flow of non-personal data in the EU, focusing on how to deal with data sets containing both personal & non-personal data.
Also this year
- At the Council of Europe, the Consultative Committee of the Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data (Convention 108) publishes its Guidelines on Artificial Intelligence and Data Protection.
- ⚖️ The European Court of Human Rights (ECtHR) decides in López Ribalda and Others v. Spain, on 17 October 2019.
- The Council of Europe awards for the first time the Stefano Rodotà Award.
Films

- 🎬 The Great Hack, a 2019 documentary film about the ‘Facebook–Cambridge Analytica’ data scandal, by Jehane Noujaim and Karim Amer.
Literature
- Alsenoy, Brendan (2019), Data Protection Law in the EU: Roles, Responsibilities and Liability, Cambridge University Pres.
- Beauchamp, Toby (2019), Going Stealth: Transgender Politics and U.S. Surveillance Practices, Duke University Press.
- Bernaczyk, Michal (2019), ‘The Constitutional Right to Information in Poland. Theory and Practice’, International Comparative Jurisprudence 5(1), 36-46.
- Betkier, Marcin (2019), Privacy Online, Law and the Effective Regulation of Online Services, Intersentia.
- Bietti, Elettra (2019), ‘Consent as a free pass: Platform power and the limits of the informational turn’, Pace L. Rev. 40(1), 310-398.
- Bradford, Anu (2019), The Brussels Effect: How the European Union Rules the World, Oxford Academic.
- Coleman, Danielle (2019), ‘Digital Colonialism: The 21st Century Scramble for Africa through the Extraction and Control of User Data and the Limitations of Data Protection Laws‘, Michican Journal of Race & Law 24, 417-434.
- Custers, Bart et al. (2019), EU Personal Data Protection in Policy and Practice, Springer.
- García Mahamut, Rosario and Beatriz Tomás Mallén (eds.) (2019), El Reglamento General de Protección de Datos: Un enfoque nacional y comparado. Especial referencia a la LO 3/2018 de Protección de Datos y garantía de los derechos digitales, Tirant Lo Blanch.
- Jančiūtė, Laima (2019), ‘Data protection and the construction of collective redress in Europe: exploring challenges and opportunities‘, International Data Privacy Law, 9(1) 2–14.
- McCullagh, K., O. Tambou and S. Bourton (eds.) (2019), National adaptations of the GDPR, Collection (Open Access Book, Blogdroiteuropeen).
- Zuboff, Shosana, The Age of Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power, PublicAffairs.
Read also
- Communication from the Commission to the European Parliament and the Council: Data protection rules as a trust-enabler in the EU and beyond – taking stock, COM(2019) 374 final, 24.7.2019.
In memoriam

- Giovanni Buttarelli (24 June 1957 – 20 August 2019). European Data Protection Supervisor (EDPS) from 2014 to 2019. Assistant EDPS from 2009 to 2014. Chair of the Garante per la protezione dei dati personali, 1997 to 2009. Adviser at the Legislation Department of the Italian Ministry of Justice, 1989-1997. Since 1990, at the Council of Europe, member of Working Groups and Committees, including the Consultative Committee of Convention 108 (T-PD) and the CJ-PD. Read: ‘In memory of Giovanni Buttarelli‘ (Christian D’Cunha, International Data Privacy Law, 9(3) 129–131).

- Louis Joinet (26 May 1924 – 22 September 2019), ‘secretary of the Tricot Commission, drafter of the French Informatique et Liberté bill’ (in the words of Hans Peter Gassmann). Read: Joinet, Louis (2013), Mes raisons d’état : Mémoires d’un épris de justice, La Découverte. Watch: 14h42 #24 : Entretien avec Louis Joinet.