{"id":1730,"date":"2024-06-14T13:14:12","date_gmt":"2024-06-14T12:14:12","guid":{"rendered":"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-1-key-principles\/introduction-copy\/"},"modified":"2024-06-17T08:42:51","modified_gmt":"2024-06-17T07:42:51","slug":"introduction","status":"publish","type":"publication","link":"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-2-data-protection-press-freedom\/introduction\/","title":{"rendered":"Introduction"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u201cPersonal data\u201d refers to any information relating to an identified or identifiable individual[footnote]Article 2 of the Council of Europe\u2019s Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Convention 108) (accessible at https:\/\/rm.coe.int\/1680078b37.[\/footnote]\u00a0&#8212; in other words, an individual who can be directly or indirectly identified without requiring unreasonable time, effort or resources[footnote]Explanatory report, para. 17 (accessible at https:\/\/rm.coe.int\/convention-108-convention-for-the-protection-of-individuals-with-regar\/16808b36f1.[\/footnote]. While not an independent right under the European Convention of Human Rights, protection of personal data is recognised as an integral part of the right to respect for one\u2019s private life guaranteed in <strong>Article 8 of the ECHR<\/strong>. For a long time, tension between freedom of the media and the right to privacy emerged largely from an act of <em>publishing<\/em> protected personal data. It is in this context that the ECtHR initially developed its approach to balancing between the two rights. However, digital technologies have revolutionised how personal data is collected, stored, analysed, and shared, and with the media having moved online, it has made almost all of media content indefinitely accessible to anyone with internet connection regardless of when it was published. Moreover, search engines have made retrieving such content exceptionally easy. In this new environment, the online <em>retention<\/em> of publications \u2013 that is, their continuous ready availability on the internet \u2013 has become a separate concern for anyone seeking to protect their privacy from the media. The solution to this new challenge arrived in the form of a \u201cright to be forgotten\u201d, famously conceptualised by the CJEU in the Google Spain case. Since then, national courts and the ECtHR have grappled with reconciling measures designed to implement the right to be forgotten with freedom of the media \u2013 with mixed results.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><em>Legal framework for data protection: the European Union<\/em><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The right to the protection of personal data is expressly recognised in Article 8 of <a href=\"https:\/\/www.edps.europa.eu\/data-protection\/data-protection_en\">the Charter of Fundamental Rights of the European Union<\/a> (which is binding on both the EU institutions and bodies and the EU member states).&nbsp; Article 8 stipulates that personal data \u201cmust be processed fairly for specified purposes and on the basis of the consent of the person concerned or some other legitimate basis laid down by law\u201d and that everyone \u201chas the right of access to data which has been collected concerning him or her, and the right to have it rectified.\u201d It also obliges member states to establish independent authorities to supervise the implementation of these requirements.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Central to the EU\u2019s data protection regime is the <a href=\"https:\/\/gdpr-info.eu\/\">General Data Protection Regulation<\/a> (GDPR), adopted in April 2016. As the world\u2019s most advanced piece of legislation on the subject, it has influenced data protection laws in many countries outside the EU.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The <strong>GDPR\u2019s regime<\/strong> <strong>is based on the following principles<\/strong> for processing personal data:[footnote]Information Commissioner\u2019s Office, \u2018A guide to the data protection principles\u2019 (accessible at https:\/\/ico.org.uk\/for-organisations\/uk-gdpr-guidance-and-resources\/data-protection-principles\/a-guide-to-the-data-protection-principles\/#the_principles.[\/footnote]<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Personal data must be processed fairly and lawfully, and must not be processed unless the stipulated conditions are met.<\/li>\n\n\n\n<li>Personal data must be obtained for a specified purpose (or purposes), and must not be further processed in any manner incompatible with that purpose.<\/li>\n\n\n\n<li>Personal data must be adequate, relevant and not excessive in relation to the purpose (or purposes) for which it is processed.<\/li>\n\n\n\n<li>Data must be accurate and, where necessary, kept up to date.<\/li>\n\n\n\n<li>Personal data must not be kept for longer than is necessary for collection.<\/li>\n\n\n\n<li>Personal data must be processed in accordance with the rights of data subjects provided for under the data protection law.<\/li>\n\n\n\n<li>Appropriate technical and organisational measures must be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.<\/li>\n\n\n\n<li>Personal data must not be transferred to another country that does not ensure an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal information.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><em>Legal framework for data protection: the Council of Europe<\/em><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The 1981 <a href=\"https:\/\/rm.coe.int\/1680078b37\">Convention for the Protection of Individuals with regard to Automated Processing of Personal Data<\/a> (a.k.a. Convention 108) was the first legally binding international instrument dedicated to data protection. In 1999, it was <a href=\"https:\/\/rm.coe.int\/168008c2b8\">amended<\/a> to allow the European Communities to join it. In 2001, an <a href=\"https:\/\/rm.coe.int\/1680080626\">Additional Protocol<\/a> was adopted to introduce new obligations related to supervisory authorities and transborder data flow.&nbsp; Finally, in May 2018, an <a href=\"https:\/\/search.coe.int\/cm\/Pages\/result_details.aspx?ObjectId=090000168089ff4e\">Amending Protocol<\/a> was adopted to introduce a new, \u201cmodernised\u201d version of the Convention, referred to as <a href=\"https:\/\/rm.coe.int\/convention-108-convention-for-the-protection-of-individuals-with-regar\/16808b36f1\">Convention 108 <\/a>(not yet in force).[footnote]For a summary of the main changes introduced by Convention 108 , see Council of Europe, \u2018The modernised Convention 108: novelties in a nutshell\u2019 (accessible here).[\/footnote] The modernisation version brings the Convention closer to the GPDR regime. However, one of the significant remaining gaps is that Convention 108 does not introduce a data subject\u2019s right to obtain the erasure of their personal data (the right to be forgotten), which is expressly guaranteed in Article 17 of the GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In addition, the Committee of Ministers of the Council Europe has adopted several recommendations directly relevant to data protection online:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Recommendation\u00a0<a href=\"https:\/\/wcd.coe.int\/ViewDoc.jsp?id=1710949&amp;Site=CM\">CM\/Rec(2010)13<\/a> of the Committee of Ministers to member States on the protection of individuals with regard to automatic processing of personal data in the context of profiling;<\/li>\n\n\n\n<li>Recommendation\u00a0<a href=\"https:\/\/wcd.coe.int\/ViewDoc.jsp?id=1929429&amp;Site=CM\">CM\/Rec(2012)3<\/a> of the Committee of Ministers to member States on the protection of human rights with regard to search engines;<\/li>\n\n\n\n<li>Recommendation\u00a0<a href=\"https:\/\/wcd.coe.int\/ViewDoc.jsp?Ref=CM\/Rec(2012)4&amp;Language=lanEnglish&amp;Site=COE&amp;BackColorInternet=DBDCF2&amp;BackColorIntranet=FDC864&amp;BackColorLogged=FDC864\">CM\/Rec(2012)4<\/a> of the Committee of Ministers to member States on the protection of human rights with regard to social networking services.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">As was mentioned above, the right to the protection of one\u2019s personal data has been read by the European Court of Human Rights into Article 8 of the ECHR. A few examples of the large variety of personal data the European Court of Human Rights (\u2018the ECtHR\u2019) has found to be protected by Article 8 include: internet subscriber information associated with specific dynamic; fingerprints, cellular samples, and DNA profiles; publicly accessible information on the taxable income and assets of private individuals; data collected by means of non-covert video surveillance.[footnote]For more examples, see ECtHR\u2019s Guide to the Case-Law of the of the European Court of Human Rights guide, p. 8 (accessible at https:\/\/ks.echr.coe.int\/documents\/d\/echr-ks\/guide_data_protection_eng.[\/footnote]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u201cPersonal data\u201d refers to any information relating to an identified or identifiable individual[footnote]Article 2 of the Council of Europe\u2019s Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Convention 108) (accessible at https:\/\/rm.coe.int\/1680078b37.[\/footnote]\u00a0&#8212; in other words, an individual who can be directly or indirectly identified without requiring unreasonable time, effort [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":0,"parent":1729,"menu_order":430,"template":"page-templates\/chapter.php","publication-category":[],"class_list":["post-1730","publication","type-publication","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Introduction | eReader<\/title>\n<meta name=\"description\" content=\"In this module series, Media Defence unpacks digital rights and freedom of expression questions in the context of Europe.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-2-data-protection-press-freedom\/introduction\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Introduction | eReader\" \/>\n<meta property=\"og:description\" content=\"In this module series, Media Defence unpacks digital rights and freedom of expression questions in the context of Europe.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-2-data-protection-press-freedom\/introduction\/\" \/>\n<meta property=\"og:site_name\" content=\"eReader\" \/>\n<meta property=\"article:modified_time\" content=\"2024-06-17T07:42:51+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/publications\\\/modules-digital-rights-europe\\\/module-2-data-protection-press-freedom\\\/introduction\\\/\",\"url\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/publications\\\/modules-digital-rights-europe\\\/module-2-data-protection-press-freedom\\\/introduction\\\/\",\"name\":\"Introduction | eReader\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/#website\"},\"datePublished\":\"2024-06-14T12:14:12+00:00\",\"dateModified\":\"2024-06-17T07:42:51+00:00\",\"description\":\"In this module series, Media Defence unpacks digital rights and freedom of expression questions in the context of Europe.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/publications\\\/modules-digital-rights-europe\\\/module-2-data-protection-press-freedom\\\/introduction\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/publications\\\/modules-digital-rights-europe\\\/module-2-data-protection-press-freedom\\\/introduction\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/publications\\\/modules-digital-rights-europe\\\/module-2-data-protection-press-freedom\\\/introduction\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Publications\",\"item\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/publications\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Modules on Litigating Digital Rights in Europe\",\"item\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/publications\\\/modules-digital-rights-europe\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Module 2: Data Protection and Press Freedom\",\"item\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/publications\\\/modules-digital-rights-europe\\\/module-2-data-protection-press-freedom\\\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Introduction\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/#website\",\"url\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/\",\"name\":\"eReader\",\"description\":\"Media Defence\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.mediadefence.org\\\/ereader\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Introduction | eReader","description":"In this module series, Media Defence unpacks digital rights and freedom of expression questions in the context of Europe.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-2-data-protection-press-freedom\/introduction\/","og_locale":"en_US","og_type":"article","og_title":"Introduction | eReader","og_description":"In this module series, Media Defence unpacks digital rights and freedom of expression questions in the context of Europe.","og_url":"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-2-data-protection-press-freedom\/introduction\/","og_site_name":"eReader","article_modified_time":"2024-06-17T07:42:51+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-2-data-protection-press-freedom\/introduction\/","url":"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-2-data-protection-press-freedom\/introduction\/","name":"Introduction | eReader","isPartOf":{"@id":"https:\/\/www.mediadefence.org\/ereader\/#website"},"datePublished":"2024-06-14T12:14:12+00:00","dateModified":"2024-06-17T07:42:51+00:00","description":"In this module series, Media Defence unpacks digital rights and freedom of expression questions in the context of Europe.","breadcrumb":{"@id":"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-2-data-protection-press-freedom\/introduction\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-2-data-protection-press-freedom\/introduction\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-2-data-protection-press-freedom\/introduction\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.mediadefence.org\/ereader\/"},{"@type":"ListItem","position":2,"name":"Publications","item":"https:\/\/www.mediadefence.org\/ereader\/publications\/"},{"@type":"ListItem","position":3,"name":"Modules on Litigating Digital Rights in Europe","item":"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/"},{"@type":"ListItem","position":4,"name":"Module 2: Data Protection and Press Freedom","item":"https:\/\/www.mediadefence.org\/ereader\/publications\/modules-digital-rights-europe\/module-2-data-protection-press-freedom\/"},{"@type":"ListItem","position":5,"name":"Introduction"}]},{"@type":"WebSite","@id":"https:\/\/www.mediadefence.org\/ereader\/#website","url":"https:\/\/www.mediadefence.org\/ereader\/","name":"eReader","description":"Media Defence","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mediadefence.org\/ereader\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.mediadefence.org\/ereader\/wp-json\/wp\/v2\/publication\/1730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mediadefence.org\/ereader\/wp-json\/wp\/v2\/publication"}],"about":[{"href":"https:\/\/www.mediadefence.org\/ereader\/wp-json\/wp\/v2\/types\/publication"}],"author":[{"embeddable":true,"href":"https:\/\/www.mediadefence.org\/ereader\/wp-json\/wp\/v2\/users\/6"}],"up":[{"embeddable":true,"href":"https:\/\/www.mediadefence.org\/ereader\/wp-json\/wp\/v2\/publication\/1729"}],"wp:attachment":[{"href":"https:\/\/www.mediadefence.org\/ereader\/wp-json\/wp\/v2\/media?parent=1730"}],"wp:term":[{"taxonomy":"publication-category","embeddable":true,"href":"https:\/\/www.mediadefence.org\/ereader\/wp-json\/wp\/v2\/publication-category?post=1730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}