Skip to content

cearta.ie

the Irish for rights

Menu
  • About
  • Privacy Policy
  • Disclaimer
  • Contact
  • Research

Category: Privacy

Happy 3rd birthday, GDPR

25 May, 202125 May, 2021
| 1 Comment
| GDPR

EDPB on GDPR at 3


In last year’s birthday wish, I referred to Terry Pratchett’s People’s Revolution of the Glorious Twenty-Fifth of May, and Douglas Adams’s Towel Day. The 25th May is also the day on which, in 1977, the first Star Wars movie (later re-titled Star Wars: Episode IV – A New Hope (IMDB)) was released. So, happy birthday GDPR, and may the Force be with you!

…

Read More »

Happy birthday, GDPR

25 May, 202028 September, 2020
| 1 Comment
| GDPR

Happy birthday GDPR

Article 99(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) provides:

It shall apply from 25 May 2018.


Bonus (1): From the Discworld & Terry Pratchett Wiki:

Glorious Revolution

Truth, Justice, Freedom, Reasonably Priced Love, and a Hard-Boiled Egg!

Terry Pratchett memorial lilacThe People’s Revolution of the Glorious Twenty-Fifth of May is depicted in Night Watch. … A few streets around Treacle Mine Road were barricaded at first. Soon more people started barricading streets, barricades were moved forward and merged together, covering at least a quarter of the city – including the food industry. The resulting area was called The People’s Republic of Treacle Mine Road. …

Following Terry’s announcement about Alzheimer, calls have been made to wear lilac on the 25th of May as a tribute, and to raise money for Alzheimer research. …

May 25th is also national Geek Pride Day and Towel Day, a day in honour of Douglas Adams. This has led to some fans having to choose between the two, until someone came up with the lilac towel [additional link; possible source].…

Read More »

Compensation for non-material damage pursuant to Article 82 GDPR

6 March, 20209 March, 2020
| 7 Comments
| GDPR

Compensation Article 82 GDPRThe General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 [the GDPR]) provides both for public enforcement by data protection authorities and for private enforcement by any person who has suffered damage as a result of an infringement of the Regulation (on this inter-connection, see Johanna Chamberlain & Jane Reichel “The Relationship Between Damages and Administrative Fines in the EU General Data Protection Regulation” 89 Mississippi Law Journal (forthcoming 2020; SSRN)). As to private enforcement by means of damages claims, Article 82(1) GDPR provides that “[a]ny person who has suffered material or non-material damage as a result of an infringement of this Regulation shall have the right to receive compensation from the controller or processor for the damage suffered”. CMS legal are tracking fines levied by data protection authorities in the EU – they record that, so far, 186 fines have been levied, for a total of almost €460m (the EDPB gives different numbers (pdf, pp33-34), discussed here). However, there is as yet no equivalent tracker for compensation claims, in part because there have been very few. So far as I can find, there have been eight judgments considering substantive claims for damages pursuant to Article 82 (though there have been other cases in which such compensation was claimed but the substantive issue was not reached).…

Read More »

The sooner the government changes tack on the #psc, the better for Ireland’s international reputation – updated

22 September, 201927 September, 2019
| 1 Comment
| GDPR, Privacy

Sunday Business Post, 22 Sept 2019On Tuesday of this week, belatedly and with very bad grace, the Department of Employment Affairs and Social Protection published the Report of the Data Protection Commission (DPC) on the Public Services Card (#PSC), which concluded that the government’s implementation of the PSC infringed data protection legislation. The government has refused to accept or comply with the Commission’s findings, and has instead, for reasons beyond understanding, gone to war with the DPC on this issue.

In my view, the Government’s unjustified defiance of the DPC imperils Ireland’s tech reputation; and I argue in an OpEd in today’s Sunday Business Post (sub req’d) (update: you can download it from the links in update 3 below) that this unseemly standoff must be resolved as quickly as possible, before irreversible damage is done to our international standing as a good location in which international tech companies can establish their European headquarters:

Dealing from bottom of the deck on the Public Services Card

The government is clinging to its legal advice on the PSC data fiasco. It needs to admit it was wrong and change course immediately

… The DPC’s report is very clear; its fundamental conclusions will undoubtedly survive legal challenge; and the government will eventually be as surely taken to task in the courts in Dublin and Luxembourg as it has been his week in the court of public opinion.

…

Read More »

The legal basis of the US$170m fine on Google for YouTube’s infringement of children’s privacy

10 September, 2019
| No Comments
| GDPR, Privacy

FTC NYAG Google YouTube logos

At the end of last week, the media was full of stories that Google had been “Fined $170 Million for Violating Children’s Privacy on YouTube” (that’s a headline from the New York Times; see also, for example, NPR | BBC | RTÉ | Silicon Republic). In this post, I want to sketch the legal background to, and consequences of, this fine; and, at the end, I will say a few words about the equivalent position in Europe.

In the US, the Children’s Online Privacy Protection Act of 1998 (15 USC §§ 6501–6506; hereafter: COPPA), and the Children’s Online Privacy Protection Rule (16 CFR § 312; hereafter: the COPPA Rule) made under it, regulate unfair and deceptive acts and practices in connection with the collection and use of personal information from and about children on the internet. In particular, 15 USC §§ 6502(b)(A) COPPA, and 16 CFR § 312.3 COPPA Rule, require the operator of any website or online service directed to children that collects personal information from children, or the operator of a website or online service that has actual knowledge that it is collecting personal information from a child,

(i) to provide notice on the website of what information is collected from children by the operator, how the operator uses such information, and the operator’s disclosure practices for such information; and
(ii) to obtain verifiable parental consent for the collection, use, or disclosure of personal information from children; …

Giving further effect to the second paragraph here, 16 CFR § 312.5(b)(1) COPPA Rule provides

An operator must make reasonable efforts to obtain verifiable parental consent, taking into consideration available technology.

…

Read More »

The Great Hack and the dysaguria of Cambridge Analytica

24 July, 201919 August, 2019
| 3 Comments
| Digital Rights, Dysaguria, Media and Communications, Privacy

Great Hack poster via IMDBThe Great Hack has just dropped on Netflix (IMDB | Rotten Tomatoes | wikipedia | poster left). It is a documentary that explores “how a data company named Cambridge Analytica came to symbolize the dark side of social media in the wake of the 2016 US presidential election”. Much has already been written about the Cambridge Analytica scandal (eg ICO here and here (pdfs) | Carole Cadwalladr in The Guardian), and a great deal more will be written as the movie is reviewed in the coming days. I don’t propose to add to those torrents here. Rather, I simply want to observe that there is a word for a company that symbolizes the dark side of social media.

Reacting to Thomas More’s coinage of “utopia” as the “perfect state”, from the Greek “eu” meaning “good”, and “topos” meaning “place”, John Stuart Mill coined “dystopia” as the “frightening state”, from the Greek “dys” meaning “bad”, and (again) “topos” meaning “place”. But, whilst “dystopia” is perfect to describe a “frightening state” and its frightened society, it is not particularly apt to describe a “frightening company” and its frightened society. Indeed, we don’t really have the words for when a corporate society goes bad; “dystopia” and “dystopian” have been pressed into service (even in the context of reviewing The Great Hack: “Watching this film, you literally start to wonder if history has been warped towards a sickening dystopia”); but the warped society in that movie is very different to the warped society in classic dystopian fiction (such as, to take the obvious example, Orwell’s 1984).…

Read More »

Not archiving the .ie domain, and the death of new politics

17 May, 201916 June, 2021
| 1 Comment
| COIPLPA, Copyright, Digital deposit, GDPR, Privacy

Internet Archive Googly Eyes via FlickrAbout this time last year, the Government lost some votes on important issues as the Bill that became the Data Protection Act 2018 (also here) was at Committee Stage in the Dáil. Writing on this blog, I described this as an example of new politics making for interesting times. Rather magnanimously, they did not seek to reverse these defeats; at the last stage of the Bill, the Minister confirmed that it was “not [his] intention to revisit the putting of the amendment in any other form”. In the intervening year, much has changed – for one thing, we are a year closer to a general election, commentators forecast that the next budget in October will be this Government’s last, and there is speculation that the Taoiseach may even call a snap election earlier than that. All of this means that the detente of new politics is breaking down. There can be no surer sign of this than that the Government is no longer magnanimously prepared to accept parliamentary defeats, and will reverse them if it can. There was a shameful example of this arrogance earlier this week in the Seanad, during the Report Stage debate on the Copyright and Other Intellectual Property Law Provisions Bill 2018.…

Read More »

The further GDPR travails of Ross O’Carroll-Kelly

28 January, 201918 February, 2019
| 1 Comment
| GDPR

Ross O’Carroll-Kelly (pictured left) is in GDPR-trouble again. Last time, he was fired from his job as an estate-agent for failing to report a data breach, when his work lap-top was stolen from his car just as the GDPR came into full effect. This time (as recounted in last Saturday’s Irish Times magazine; audio here), he learns to his great cost the power of the data subject access request under Article 15 GDPR.

The background is well explained by Jennifer O’Connell’s experiences also recounted in last Saturday’s Irish Times magazine. Her story starts with staff members in a hotel asking customers: “If you enjoyed the service, would you minding leaving a TripAdvisor review, and mentioning me by name?” As she explains

It’s not only people in the service industry whose job security now rests on the whims of the terminally irate. If you’re a writer, Goodreads and Amazon reviews are your nemesis. If you’re a driver, it’s Uber. If you rent out your house, it’s Airbnb. If you’re a journalist, it’s the below-the-line comments.

She hasn’t reviewed the hotel waiter yet (she’ll be kind); but “in a Dublin hotel a few months ago, unable to sleep due to the sound of the four-hour, vigorous, live-action porn show on the other side of the cardboard door connecting [her] room with the one next door, [she] lay there plotting [her] TripAdvisor review”.…

Read More »

Posts pagination

Previous 1 2 3 … 19 Next

Welcome

Me in a hat

Hi there! Thanks for dropping by. I’m Eoin O’Dell, and this is my blog: Cearta.ie – the Irish for rights.


“Cearta” really is the Irish word for rights, so the title provides a good sense of the scope of this blog.

In general, I write here about private law, free speech, and cyber law; and, in particular, I write about Irish law and education policy.


Academic links
Academia.edu
ORCID
SSRN
TARA

Subscribe

  • RSS Feed
  • Twitter
  • LinkedIn

Recent posts

  • A trillion here, a quadrillion there …
  • A New Look at vouchers in liquidations
  • Defamation reform – one step backward, one step forward, and a mis-step
  • As I was saying before I was so rudely interrupted … the Defamation (Amendment) Bill, 2024 has been restored to the Order Paper
  • Defamation in the Programme for Government – Updates
  • Properly distributing the burden of a debt, and the actual and presumed intentions of the parties: non-theories, theories and meta-theories of subrogation
  • Open Justice and the GDPR: GDPRubbish, the Courts Service, and the Defence Forces

Archives by month

Categories by topic

Licence

Creative Commons License

This blog is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License. I am happy for you to reuse and adapt my content, provided that you attribute it to me, and do not use it commercially. Thanks. Eoin

Credit where it’s due

Some of those whose technical advice and help have proven invaluable in keeping this show on the road include Dermot Frost, Karlin Lillington, Daithí Mac Síthigh, and
Antoin Ó Lachtnáin. I’m grateful to them; please don’t blame them :)

Thanks to Blacknight for hosting.

Feeds and Admin

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org

© cearta.ie 2025. Powered by WordPress