Issue19-March2019

BrusselsPrivacyHubNewsletter

On27March2019,theBrusselsPrivacyHubwillhostadebate,within theMeet the Author Series, with the authors of a paperentitled“DataProtectionDirective2016/680(EUforPoliceandCriminal Justice Authorities”, written by and Juraj Sajfert (DGJUST)andTeresaQuintel(LuxembourgUniversity).Thepaper gives a good overviewof themain particularities ofwhatseems a bit a forgotten domain,data protection in the area ofpolice and justice by law enforcement agencies (LEAs).WhereasmostattentionisgiventotheimpactoftheGDPR,thepaperaddresses particularities of data protection in an area wheretransparencyofdataprocessingoperationsisnotalwaysobvious.Thedirectivecoversan importantarea.Firstly,an increasednumberof criminal acts is being committed online orwith the help of onlinetools.Secondly,asperpetratorsarebecomingmoretech-savvy,LEAsturned to new investigative techniques, including big data analytics.Thirdly,EUrules(boththepatchworkofdataprotectionrulesadoptedunder the former third pillar and the rules for EU Justice andHomeAffairs Agencies) on the processing of personal data by LEAs areprofoundlychanged.Thepaperincludesfourfocalpoints(profiling,indirectexerciseofdatasubjectrights,logs,internationaltransfers),whichareexcellenttopicsfordiscussion.Theprogrammeisnowavailable.Time:12:00-14:30(lunchisincluded)Venue: U-Residence, Vrije Universiteit Brussel, Pleinlaan 2, 1050,Brussel(AccessalsoviaGeneraalJacqueslaan271,1050Brussels)Registration:Theeventisfreetoattend,butduetolimitedcapacity,registrationisrequired.Please register here or, in case of problems, send an e-mail to

BrusselsPrivacyHubNewsletter

UpcomingEvents27March2019-MeettheAuthorSeries:DataProtectionDirectiveforPoliceand

CriminalJusticeAuthorities

info@brusselsprivacyhub.eu

On14 May 2019, the Law, Science, Technology and SocietyResearchGroup(LSTS)andtheBrusselsPrivacyHubwillholdanInternational Workshop on the Legal Notions of Privacy and DataProtection in EU law in a Rapidly Changing World to take stock ofcurrentacademicthinkingandthedevelopmentsinthecaselawandinpolicymaking inthearea,andtodiscussthesignificanceoftheserightsinthefuture.

The interactive open one-day Workshop on "Legal Notions ofPrivacy and Data Protection in EU law in a in a RapidlyChanging World" will discuss the EU rights to privacy and dataprotection–theirnature,scopeandlimitations,butalsotheirpracticallegalandpolicyimplications.Forthispurpose,theone-dayworkshopwill bring together the leading academic experts, policymakers andpractitioners in Europe to discuss different aspects of the complexrelationshipbetweenprivacyanddataprotection.Call for Papers for PhD students and early career researchers -deadline for submission of abstracts 28 February 2019.DEADLINEfor submission of abstracts prolonged: new end date 10 March2019.Please send your abstract to info@brusselsprivacyhub.eu with yourname,affiliation,andshortbiography.Organising Committee: Prof. Gloria González Fuster, Dr. HielkeHijmans,andLauraDrechsler.Venue: U-Residence, Vrije Universiteit Brussel, Pleinlaan 2, 1050,Brussel(AccessalsoviaGeneraalJacqueslaan271,1050Brussels)

14May2019-ExploringthePrivacyandDataProtectionconnection:InternationalWorkshopontheLegalNotionsofPrivacy

andDataProtectioninEULawinaRapidlyChangingWorld

24-28June2019-4thEuropeanDataProtectionLawSummerSchoolAdvancing

(with)EUdataprotection

From 24 June to 28 June 2019, theBrussels Privacy Hub willhost its4th European Data Protection Law Summer School,entitled"Advancing(with)EUdataprotection".During five days, participants will explore EU’s primary andsecondary law, and engagewith a variety of stakeholders rangingfrom practitioners with worldwide privacy expertise,representatives of key EU institutions including the EuropeanCommissionandtheEuropeanParliament,dataprotectionauthoritiesamongwhichtheEuropeanDataProtectionSupervisor(EDPS),digitalrights advocates, and leading academics from Europe andbeyond. Theywill also have a unique opportunity tonetwork with,andlearnfrom,equallyinterestedparticipants.Combining lecturesby internationally recognisedspeakers,hand-onpracticalcases,androle-playing,studentswillbebroughtdirectlyintotheheartofEuropeanUnion’slegalandpolicy-makingandgivenafull-fledged vision of the challenges and opportunities of EU’s dataprotection,anditsglobalrole.Adetailedprogrammewillbeavailablesoon.Location:InstituteforEuropeanStudies(IES)oftheVrijeUniversiteitBrussel(VUB),Pleinlaan5,B-1050,Brussels.Language:English.Targetaudience:Legalpractitioners,publicandprivatesectordataprotection professionals - including compliance officers, dataprotection officers, data policy officers - civil society professionals,earlycareeracademicresearchersandotherswhoworkintheareasof privacy and data protection law. Prior familiarity with the fieldrequired.Certificate: Participants will receive a certificate of attendanceindicatingthattheyhaveattendedthefullprogramme.Registration: to register andbenefit fromour early bird fees, clickhere.

PastEvents30January2019-DigitalDataFlows

MasterClass:De-Identification,DifferentialPrivacy,andHomomorphicEncryption-

CPDP2019SideEvent

On30January2019,theBrusselsPrivacyHubandtheFutureofPrivacyForum(FPF)hostedanofficialCPDPsideeventnamed "De-Identification, Differential Privacy, and HomomorphicEncryption"aspartofthe"DigitalDataFlowsMasterClass"series.GuestexpertsSophieStalla-Bourdillon(UniversityofSouthampton,Immuta) and Khaled El Imam (CEO, Privacy Analytics) gave theparticipantsanunderstandingof:whatitmeanstoidentifyindividualsin datasets; how to reduce risks of re-identification throughanonymizationandpseudonymization;whatisinvolvedincommonre-identificationattacks;andhowdataholdersareusingmethodssuchas differential privacy (a statistical technique), and homomorphicencryption(anadvancedcomputationmethod),togaininsightsaboutdatawithoutidentifyingindividuals.Thematerialsspeakers'slidesandthevideoof thepresentationsareavailable.

1February2019-HealthdataandAIinclinicsandresearch:legalbasis,

transparencyandaccountability-CPDP2019Panel

On 1 February 2019, the Brussels Privacy Hub together withPANELFIT (Participatory Approaches to a New Ethical and LegalFrameworkforICT)hostedaCPDPpanelon"HealthdataandAIinclinics and research: legal basis, transparency andaccountability".Bernd Stahl (De Montfort University), Zuzanna Warso (HelsinkiFoundation for Human Rights, Europe of Human Rights, SIENNAProject),NicolaOrlandi (Novartis) andAliuska Duardo (UniversityoftheBasqueCountry)discussedthekeychallengesofhealthdataprocessing in clinics and research under the GDPR andbeyond,tryingtoaddressthischallenges:howtodealwiththerisksofusingofnewdata-mining techniques in thecontextofclinicsandhowtoprotect rightsand freedomofdatasubjects.How toassessthe conflict between private and public interest in the context ofbiomedicalresearchintermsofdataprotectionlaw.Identificationandresolutionofthemainethical, legalandgovernance issuesrelatedtoAIinthehealthcarecontext.Albena Kuyumdzhieva (European Commission) chaired thediscussion, moderated by Gianclaudio Malgieri (Brussels PrivacyHub).Avideoofthepanelisnowavailablehere.

25February2019-TheTroublewithArticle25(andHowtoFixIt):TheFutureofData

ProtectionbyDesignandDefault

On 25 February 2019, the Brussels Privacy Hub hosted IraRubinstein (New York University School of Law) who presented apaperinprogress,on“TheTroublewithArticle25(andHowtoFixIt):TheFutureofDataProtectionbyDesignandDefault”,providing his point of view as a US scholar on Article 25 of theGeneralDataProtectionRegulation(GDPR).HedebatedhisideaswithDr. Hielke Hijmans (Brussel Privacy Hub), who also chaired thediscussion,andtheaudience.A summary of the presentation and of the following discussion isavailablehere.

26-27February2019:DataProtectioninHumanitarianActionProject

On26and27February2019, theBrussels PrivacyHub (BHP)and the International Committee of the Red Cross (ICRC) hosted aworkshop addressingdata protection issues in blockchain anddigitalidentityusecasesinthehumanitariansector.Thetwo-dayworkshopwasheldattheICRCheadquartersinGenevaandwaspartof the2ndworking series that aims at updating and extendingthescopeoftheHandbookonDataProtectioninHumanitarianAction(Handbook),whichwasfirstpublishedin2017.Representatives of humanitarian organisations, National Red CrossSocieties, national data protection authorities, scholars, technicalexperts and representatives of the private sector presented anddiscussed challenges related to personal data processing in existingblockchain applications and digital identity solutions for humanitarianprograms. The main points raised during the discussion as well asconcernsforthefutureuseofsuchtechnologieswillbeintegratedintherevisedandmoreextensiveversionoftheHandbookthatwillbepublishedbyJanuary2020.

Prof. de Hert awarded prestigious ‘MichałSerzycki’ Data Protection Award fromPersonalDataOffice,PolandOn 28 January 2019, Prof. Paul de Hert was awarded theprestigious‘MichałSerzycki’DataProtectionAward.TheAwardentailstherecognitionofhisworkinthefieldofdataprotectionforthebenefitofpromotingdataprotectionvaluesandtheright toprivacy,as well of his special awareness and involvement in this area. InadditionthisAwardacknowledge’shiscontributiontomutualinitiativesas regardsworkonEuropeanUnion fundedprojects.The resultsoftheseprojectsstillconstituteinvaluablehelpineducatinginthefieldofprivacy and personal data protection. The Award ceremonywill takeplace on the occasion of the Data Protection Day ConferenceorganisedbythePolishDPAinWarsaw.

Prof. Christopher Kuner at EuropeanUniversityInstituteHubCo-Director Prof.ChristopherKuner is a visiting fellow in theDepartmentof Lawof theEuropeanUniversity Institute (EUI) inFlorenceinthesecondtermof2019.On28January2019,hegaveatalkatEUIaspartoftheENACTprogramentitled“The territorialscopeof theGDPR”.On30 January 2019, hegavea talk a theDepartmentofLawentitled“International organizations and theEUGeneralDataProtectionRegulation".

Video of Meet the Author with PhilippHackernowonlineOn17December2018,theBrusselsPrivacyHubhostedaMeetthe Author Series with Philipp Hacker (Humboldt University ofBerlin / WZB Berlin Social Science Center) discussing his article“TeachingFairnesstoArtificialIntelligence:ExistingandNovelStrategiesagainstAlgorithmicDiscriminationunderEULaw”.DiscussantswerePaulNemitz(EuropeanCommission),Prof.GloriaGonzálezFuster(BrusselsPrivacyHub/LSTS)andHielkeHijmans

News

(BrusselsPrivacyHub).Findashortvideowith interviewssummarisingtheeventhereandawrittensummaryhere.

WORKINGPAPER•VOL.5•N°14•JANUARY2019Belgium, Courts, Privacy and DataProtection. An inventory of Belgian caselawfromthepre-GDPRregime(1995-2015)byPaulDeHertABSTRACTThis Contribution focuses on the use made by the BelgianConstitutionalCourt,theCourdeCassationandtheordinarycourtsoftherighttoprivacyandtherighttohavepersonaldataprotectedasanchored intheBelgianConstitution, theBelgianDataProtectionActandtheEuropeansources.Aselectionoftheirjudgements,alldatingfrom the era before the new EU Data Protection Regulation, arediscussedalongthelinesoftheirimpactonhealthprivacy,workplaceprivacy, surveillance and socialmedia privacy. Our analysis shows agreatdealofEuropean loyaltyonbehalfof theBelgianConstitutionalCourttowardsEuropeantrendstofavourprivacyanddataprotection.InstarkcontraststandsthecaselawoftheCourdeCassationmainlyfocussed at preserving prosecutorial interests and employer’sinterestsatthedetrimentofprivacyanddataprotectioninterests.Inourconclusionswediscusstendenciestowardscosmopolitanismandtribalism, the dramatic impact of evidence law and patterns oflitigation.Our analysis covers the data protection era where Belgian law wasindirectlygovernedbyEUDirective95/46/ECof24October1995ontheprotectionofindividualswithregardtotheprocessingofpersonaldataandonthefreemovementofsuchdata(OJL281,23November1995,31).TheDirectivecontributedtotheroll-outofdataprotectionand harmonized the data protection provision in the EU MemberStates but suffered from implementation weaknesses and lack ofrecognition. A certain lack of recognition of the importance of dataprotectionintheEuropean(andBelgianlegal) landscapedisappearedwiththetheEUGeneralDataProtectionRegulation2016/679(“GDPR”)(OJ L 119, 5 Ma.2016, 1–88 ) that repealed Directive 95/46/EC andcame into force on 25 May 2018 with direct applicable provisions.FurtherstudiesareneededtostudytheimpactofthenewEuropeanprovisionsontheworkandoutputoftheBelgiancourts.

BrusselsPrivacyHubLawScienceTechnology&Society(LSTS)VrijeUniversiteitBrusselPleinlaan2B-1050BrusselsBelgiuminfo@brusselsprivacyhub.eu

Publications

Viewinbrowser

Thisemailwassentto{EMAIL}YoureceivedthisemailbecauseyouareregisteredwithBrusselsPrivacyHub

Unsubscribehere