Towards a Semantic Model of the GDPR Register of Processing Activities

Consent Management Platforms under the GDPR: processors and/or controllers?

Consent Management Providers (CMPs) provide consent pop-ups that are embedded in ever more websites over time to enable streamlined compliance with the legal requirements for consent mandated by the ePrivacy Directive and the General Data Protection Regulation (GDPR). They implement the standard for consent collection from the Transparency and Consent Framework (TCF) (current version v2.0) proposed by the European branch of the Interactive Advertising Bureau (IAB Europe). Although the IAB's TCF specifications characterize CMPs as data processors, CMPs factual activities often qualifies them as…

Data Protection Impact Assessment for the Corona App

Since SARS-CoV-2 started spreading in Europe in early 2020, there has been a strong call for technical solutions to combat or contain the pandemic, with contact tracing apps at the heart of the debates. The EU's General Daten Protection Regulation (GDPR) requires controllers to carry out a data protection impact assessment (DPIA) where their data processing is likely to result in a high risk to the rights and freedoms (Art. 35 GDPR). A DPIA is a structured risk analysis that identifies and evaluates possible consequences of data processing relevant to fundamental rights and describes the measu…

混合社会中登记官的功能：人工智能价值链、智能数据与财产概念

The registrar's function in a hybrid society. AI value chain,smart data and the concept of property

本文提出在人工智能价值链中，将有效性作为核心法律概念，探讨其对登记信息、数据治理及混合社会登记制度的影响，并论证登记官职能从处理文件转向保障验证数据。