The Principle of Purpose Limitation in Data Protection Laws

The Risk-based Approach, Principles, and Private Standards as Elements for Regulating Innovation

Bibliographic Data

ID19935712
AuthorsMaximilian von Grafenstein (0000-0002-6268-6314, corresponding author)
Year2018
Publication date2018-01-01
Open AccessYes
TypeBOOK
VenueThe Principle of Purpose Limitation in Data Protection Laws (SOURCE_BOOK)
PublisherNomos Verlagsgesellschaft mbH & Co. KG (PUBLISHER)
DOI10.5771/9783845290843
OpenAlexW2802361106
ISBN9783845290843
LanguageEN
Citations received4

This thesis examines the principle of purpose limitation in data protection law from the perspective of regulating data-driven innovation. According to this approach, the principle of purpose limitation not only protects an individual’s autonomy but simultaneously leaves sufficient room for data controllers to innovate when finding the best solution for protection. The first component of the principle of purpose limitation (i.e. to specify the purpose of data processing) is a precautionary protection instrument which obliges the controller to identify specific risks arising from its processing against all fundamental rights of the data subject. In contrast, the second component (i.e. the requirement to limit data processing to the preceding purpose) aims to control the risk caused by data processing that occurred at a later stage and adds to the risks which were previously identified. This approach provides an answer to the question of how the General Data Protection Regulation which does not only effectively protect an individual’s autonomy but also helps controllers to turn their legal compliance into a mechanism that enhances innovation, should be interpreted with regard to all the fundamental rights of the data subject

Political science · Digitalization, Law, and Regulation · European Criminal Justice and Data Protection · Law · Mathematics · Privacy, Security, and Data Protection

Tools

Open DOIOpen Access