Gloria González Fuster

Key developments

• 🇪🇺 In July 2023, the European Commission adopts a new adequacy decision on EU-US data flows: Adequacy decision for the EU-US Data Privacy Framework.
• 🇪🇺 European Commission, Proposal for a Regulation laying down additional procedural rules relating to the enforcement of GDPR.
• ⚖️ The Court of Justice of the European Union (CJEU) decides in:
  • Nemzeti Adatvédelmi és Információszabadság Hatóság, C-132/21, 12 January 2023;
  • Österreichische Post (Informations relatives aux destinataires de données personnelles), C-154/21, 12 January 2023;
  • Ministerstvo na vatreshnite raboti (Enregistrement de données biométriques et génétiques par la police), C-205/21, 26 January 2023;
  • X-FAB Dresden, C-453/21, 9 February 2023;
  • KISA, C-560/21, 9 February 2023;
  • HYA and Others (Motivation des autorisations des écoutes téléphoniques), C-349/21, 16 February 2023;
  • Norra Stockholm Bygg, C-268/21, 2 March 2023;
  • Hauptpersonalrat der Lehrerinnen und Lehrer, C-34/21, 30 March 2023;
  • Österreichische Post (Préjudice moral lié au traitement de données personnelles), C-300/21, 4 May 2023;
  • Österreichische Datenschutzbehörde and CRIF, C-487/21, 4 May 2023;
  • Bundesrepublik Deutschland (Boîte électronique judiciaire), C-60/22, 4 May 2023;
  • Commission v Poland (vie privée des juges), C-204/21, 5 June 2023;
  • Pankki S, C-579/21, 22 June 2023;
  • Meta Platforms and Others (Conditions générales d’utilisation d’un réseau social), C-252/21, 4 July 2023;
  • Ministerstvo zdravotnictví, C-659/22, 5 October 2023;
  • FT, C-307/22, 26 October 2023;
  • Ligue des droits humains, C-333/22, 16 November 2023;
  • Nacionalinis visuomenės sveikatos centras (NVSC), C-683/21, 5 December 2023;
  • Deutsche Wohnen, C-807/21, 5 December 2023;
  • SCHUFA Holding and Others (Scoring) (SCHUFA I), C-634/21, 7 December 2023;
  • SCHUFA Holding and Others (Libération de reliquat de dette) (SCHUFA II), C-26/22 and C-64/22, 7 December 2023;
  • Natsionalna agentsia za prihodite, C-340/21, 14 December 2023;
  • Krankenversicherung Nordrhein, C‑667/21, 21 December 2023.
• 🛹 The European Data Protection Board (EDPB) adopts:
  • Binding Decision 1/2023 on the dispute submitted by the Irish SA on data transfers by Meta Platforms Ireland Limited for its Facebook service (Art. 65 GDPR), 13 April 2023.
  • Binding Decision 2/2023 on the dispute submitted by the Irish SA regarding TikTok Technology Limited (Art. 65 GDPR), 2 August 2023.
  • Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR), 27 October 2023.

Also this year

• ⚖️ The European Court of Human Rights (ECtHR) decides in Hurbain v Belgium, on 4 July 2023.
• 🇺🇳 The United Nations Development Programme’s (UNDP) publishes Drafting data protection legislation: A Study of Regional Frameworks.
• 🇬🇧 Publication of the The Data Protection (Fundamental Rights and Freedoms) (Amendment) Regulations 2023.
• European Data Protection Board (EDBP):
  • Annual Report 2022: Streamlining enforcement through cooperation, 17 April 2023.

Literature

• Bradford, Anu (2023), Digital Empires: The Global Battle to Regulate Technology, Oxford University Press.
• Harbinja, Edina (2023), Digital Death, Digital Assets and Post-Mortem Privacy, Edinburgh University Press.
• Habu, Adamu Adamu, and Tristan Henderson (2023), ‘Data subject rights as a research methodology: A systematic literature review‘, Journal of Responsible Technology, 100070.
• Naef, Tobias (2023), Data Protection Without Data Protectionism: The Right to Protection of Personal Data and Data Transfers in EU Law and International Trade Law, Springer.
• Padden, Michaela (2023), ‘The transformation of surveillance in the digitalisation discourse of the OECD: A brief genealogy’, Internet Policy Review, Alexander von Humboldt Institute for Internet and Society, 12(3), 1-39.
• Pichlak, Maciej, and Klaudia Gaczoł (2023), ‘Simple and advanced reflexivity in GDPR enforcement: empirical evidence from DPA activity‘, International Data Privacy Law 13(4), 267-283.
• Porcedda, Maria Grazia (2023), Cybersecurity, Privacy and Data Protection in EU Law: A Law, Policy and Technology Analysis, Bloomsbury Publishing.
• Prince, Anya E. R. (2023), ‘Reproductive health surveillance’, Boston College Law Review, 64(5), 1077-1145.
• Rodríguez Pineau, Elena and Elisa Torralba Mendiola (eds.) (2023), Delimitación del Derecho Aplicable en el Reglamento 2016/679: Tutela jurídico privada de la protección de datos, Aranzadi.
• Runchella, Livio Scaffidi (2023), ‘Il GDPR e la tutela del titolare dei dati personali fra public e private enforcement nelle ipotesi di trattamento transfrontaliero‘, Cuadernos de derecho transnacional, 15(2), 898-919.
• Wragg, Paul and Peter Coe (eds.) (2023), Landmark Cases in Privacy Law, Bloomsbury.

In memoriam

• Jan Holvast.
• Spiros Simitis (19 October 1934 – 18 March 2023), “drafter of the worldwide first Data Protection Act of Hessen” (in the words of Hans Peter Gassmann). Read the interview: ‘Spiros Simitis: „Man spielt nicht mehr mit dem Datenschutz!“’ (Netzpolitik, 13 October 2015).

Back to 2022 / Forward to 2024