CONVENTION 108: PRESENT IMPORTANCE AND IMPLEMENTATION
Article Sidebar
Main Article Content
Abstract
The purpose of this paper is to highlight the significance of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Convention 108) in the overall system of personal data protection, especially from the perspective of non-EU countries that are members of the Council of Europe. This is attempted primarily through the evaluation of correlation between the Convention 108 and ECHR and GDPR in its segment that regulates relationship between the EU and third countries.
The interest for the issue of personal data protection has been increasing among legal and ICT professionals, academics, government officials and even a general public over the years. This has been particularly intensified by adopting General Data Protection Regulation (GDPR). However, the adoption of the GDPR did not diminish importance of the Convention 108. On the contrary, it seems that the ‘adequacy’ principle regarding the third countries proclaimed by the GDPR, stresses its importance.
The paper begins with the brief overview of the Convention 108 principles and the modernization that is brought by Protocol of 2018, which coincides with the entry into force of much-mentioned GDPR. It continues with analysis of the relationship between the GDPR and Convention 108, with focus on elements decisively influencing the assessment of the adequacy of the level of protection.
Even though there is no sign of equivalence between the right to privacy and personal data protection these matters inevitably intersect in practice. Therefore, the final section of the text summarizes the cases of the European Court of Human Rights invoking Convention 108, with the aim to demonstrate how it is interpreted by the highest judicial instance in Europe.
Downloads
Article Details
This work is licensed under a Creative Commons Attribution 4.0 International License.
References
Literatura
Bräutigam, T. 2016. The land of confusion: international data transfers between Schrems and the GDPR. In: Bräutigam, T. & Miettinen, S. (eds.), Data Protection, Privacy and European Regulation in the Digital Age. Helsinki: Oikeustieteellinen tiedekunta (Helsingin yliopisto), pp. 143-177.
Bygrave, L.A. 2010. Privacy and data protection in an international perspective. Scandinavian Studies in Law, 56(8), pp. 165-200.
De Hert, P. & Gutwirth, S. 2006. Privacy, data protection and law enforcement. Opacity of the individual and transparency of power. Privacy and the Criminal Law, pp. 61-104.
Goddard, M. 2017. The EU General Data Protection Regulation (GDPR): European regulation that has a global impact. International Journal of Market Research, 59(6), pp. 703-705.
Houser, K.A. & Voss, W.G., 2018. GDPR: The end of Google and Facebook or a new paradigm in data privacy. Richmond Journal for Law & Tech., 25(1), pp. 1-109.
Murtezić, A. 2019. Opšta uredba o zaštiti podataka: odnos prava na privatnost i zaštite ličnih podataka s osvrtom na Bosnu i Hercegovinu. Anali Pravnog fakulteta Univerziteta u Zenici, 12(23), pp. 35-51.
Phillips, M. 2018. International data-sharing norms: from the OECD to the General Data Protection Regulation (GDPR). Human Genetics, 137(8), pp. 575-582.
Rojszczak, M. 2020. Does global scope guarantee effectiveness? Searching for a new legal standard for privacy protection in cyberspace. Information & Communications Technology Law, 29(1), pp. 22-44.
Stepanović, I. 2019. Privacy and digital literacy: who is responsible for the protection of personal data in Serbia?. Zbornik Instituta za kriminološka i sociološka istraživanja, XXXVIII(3), pp. 45-56.
Sukhai, N.B. 2004. Hacking and cybercrime. In: InfoSecCD ‘04: Proceedings of the 1st annual conference on Information security curriculum development. New York: Association for Computing Machinery, pp.
-132. Doi: https://doi. org/10.1145/1059524.1059553.
Van Alsenoy, B. 2017. Reconciling the (extra) territorial reach of the GDPR with public international law. In: Vermeulen, G. & Lievens, E. (eds.), Data protection and privacy under pressure: transatlantic tensions, EU surveillance, and big data. Maklu, pp. 77–100.
Wimmer, K. 2018. Free Expression and EU Privacy Regulation: Can the GDPR Reach US Publishers. Syracuse Law Review, 68, pp. 548-578.
Internet izvori
CoE, 2020. Convention 108 webpageforaccessionsandratifications. Dostupnonahttp://conventions. coe.int/Treaty/Commun/ChercheSig.asp?NT=108&CM=1&DF=&CL=ENG, (2. 9. 2011).
Sudska praksa
Rotaru v. Romania, predstavka br.28341/95, ECHR, presuda od 4.5.2000, https://hudoc. echr.coe.int/rus#{%22itemid%22:[%22001-58586%22]}.
S i Marper v. UK, predstavka br. 30562/04, ECHR, presuda od 4. 12. 2008, https://hudoc. echr.coe.int/fre#{%22itemid%22:[%22001-90051%22]}.
Z. v. Finland, predstavka br. 22009/9, ECHR, presuda od 25.2.1997, https://hudoc.echr. coe.int/rus#{%22itemid%22:[%22001-58033%22]}.
Haralambie v. Romania, predstavka br. 21737/03, ECHR, presuda od 27. 10. 2009, https:// hudoc.echr.coe.int/eng#{%22itemid%22:[%22001-95397%22]}.
Breyer v. Germany, predstavka 50001/12, presuda od 30. 1. 2020, https://hudoc.echr.coe. int/fre#{%22itemid%22:[%22001-200442%22]}.
Izvještaji
European Court of Human Rights - Research Division. 2013. National security and European case-law.
Pravni izvori
Council of Europe, 1981. Convention for the Protection of individuals with regard to automatic processing of personal data (ETS, No 108), Strasbourg, 28. 1.1981.
Council of Europe, 2001. Additional Protocol to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data regarding supervisory authorities and transborder data flows (ETS, No. 181), 8. 11. 2001.
Council of Europe, 2018. Protocol amending the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (CETS, No. 223), 10. 10. 2018.
European Union, Charter of Fundamental Rights of the European Union, 26 October 2012, OJ C 326, 26.10.2012, pp. 391–407.
European Union, 2016. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119/1, 4. 5. 2016, pp. 1–88.
Zakon o zaštiti ličnih podataka Bosne i Hercegovine, Službeni glasnik BiH, br. 49/2006, 76/2011 i 89/2011.
Zakon o zaštiti podataka o ličnosti Republike Srbije, Službeni glasnik RS, br. 87/2018.
Zakon o ratifikaciji Evropske konvencije za zaštitu ljudskih prava i osnovnih sloboda, Službeni list SCG – Međunarodni ugovori, br. 9/2003, 5/2005 i 7/2005 – ispr. i Službeni glasnik RS – Međunarodni ugovori, br. 12/2010 i 10/2015.
Zakon o potvrđivanju Konvencije o zaštiti lica u odnosu na automatsku obradu ličnih podataka, Službeni list SRJ – Međunarodni ugovori, br. 1/1992, Službeni list SCG–Međunarodni ugovori, br. 11/2005 – dr. zakon i Službeni glasnik RS – Međunarodni ugovori, br. 98/2008 – dr. zakon i 12/2010.
Zakon o potvrđivanju Protokola o izmenama i dopunama Konvencije o zaštiti lica u odnosu na automatsku obradu ličnih podataka, Službeni glasnik RS – Međunarodni ugovori, br. 4/2020.