Top Banner

of 48

Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

Feb 08, 2018

Download

Documents

Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    1/48

    !"#$%& !"#"#$#%&'# &)' *"# +,+ -&*& .$/?&3> 6&5

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    2/48

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    3/48

    LC_ 3

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws7Krijibs, Vijbihifcbfl cbe Jdkncd Urcglftkrils

    J^CMCA J^LLBDLCH*

    Cnstrcft

    It is hkrty ylcrs sibfl lbcftalbt kh Vwlelbs Ectc Cft kh 39:6, tml hirstfkaprlmlbsivl bctikbcd ectc privcfy dcw, cbe tml hirst sufm bctikbcd dcw tkiapdlalbt wmct wl fcb bkw rlfkjbisl cs c ncsif slt kh ectc prktlftikb pribfipdls.Umis crtifdl cbswlrs tml qulstikb, Mkw acby fkubtrils bkw mcvl ectc privcfydcws;, stcrtibj ny elhibibj c ectc privcfy dcw. Uml rlsudt is c jdkncd cbcdysis khectc privcfy dcws cbe tml ibtlrbctikbcd cjrllalbts rldlvcbt tk lcfm, cbe kh Ectc_rktlftikb Cutmkritils cbe tmlir ibtlrdkf`ibj csskfictikbs.

    Uml cbswlr tk tml qulstikb ekfualbtle ib tml cffkapcbyibj Ucndl kh jdkncd ectcprivcfy dcws is tmct, cs kh aie->?36, 99 fkubtrils mcvl sufm dcws, c buanlrfkbsielrcndy mijmlr tmcb lcrdilr fkaalbtctkrs mce cssuale. Ny dkk`ibj ct tml rldctlequlstikbs kh tml ectl ct wmifm sufm dcws wlrl lbcftle, cbe tml rljikbs kh tml wkrde ibwmifm tmly mcvl crislb, wl fcb sll trlbes ib elvldkpalbt wmifm ibeifctl tml huturleirlftikb kh jdkncd elvldkpalbt kh ectc privcfy dcws.

    Uml crtifdl cdsk cbcdysls wmifm ibtlrbctikbcd cjrllalbts kr rlquirlalbts fkbflrbibj

    ectc privcfy (KLFE, L\, C_LF, LFKZCV ltf) chhlft wmifm fkubtrils, cbe mkwacby rldlvcbt pcrtils mcvl lbcftle dcws ib cffkrecbfl witm tml vcrikus cjrllalbtskr rlquirlalbts. Uml lxtlbt tk wmifm ectc prktlftikb cutmkritils (E_Cs) crl rlquirlecs pcrt kh ectc privcfy dcws is cbcdysle, cbe lxistibj E_Cs ielbtihile. Umlcsskfictikbs kh E_Cs ib wmifm lcfm is ibvkdvle crl cdsk ielbtihile, cbe tmliapdifctikbs kh tmlir kvlrdcppibj nut ibfkapdltl alanlrsmips.

    Uml fkbfdusikb rlcfmle is tmct, jivlb tml fkbtibuibj cffldlrctibj jrkwtm ib tmlbuanlr kh sufm dcws, it sllas di`ldy tmct, witmib c elfcel, ectc privcfy dcws widd nluniquitkus ib tmct tmly widd nl hkube ib cdakst cdd lfkbkaifcddy akrl sijbihifcbtfkubtrils, cbe akst ktmlrs. Umis fkbfdusikb is suppkrtle ny tml buanlr kh khhificd ectc

    * Jrcmca Jrllbdlch, _rkhlsskr kh Dcw & Ibhkractikb Vystlas, \bivlrsity kh BlwVkutm Zcdls.Uml cffkapcbyibj Ucndls crl cdsk cvcidcndl kb VV^B/DVB (Dljcd VfmkdcrsmipBltwkr`) ct 4mttp7//ssrb.fka/cnstrcft1>>=?=:?36. Fkaalbts, ceeitikbs cbe fkrrlftikbs crl wldfkal tk4jrcmcaOcustdii.leu.cu2. Uml cssistcbfl kh Acril Jlkrjls, Ecvie Ncbiscr, Fmcrdls^ccn, Vtlwcrt Erlsblr, Dcurc Dib`kails, Ndcir Vtlwcrt cbe Gidd Acttmlws isjrctlhuddy cf`bkwdlejle. ^lspkbsinidity hkr cdd fkbtlbt, rlacibs witm tml cutmkr.Vlpcrctl cf`bkwdlejalbts crl prkviele ib rldctikb tk tml cffkapcbyibj Ucndls.Vunstcbticd wkr` kb tmis crtifdl wcs fkapdltle wmidl tml cutmkr wcs c GcpcbVkfilty hkr tml _rkaktikb kh Vfilbfl (GV_V) Xisitibj Hlddkw ct Aligi \bivlrsity,Uk`yk, hrka Vlptlanlr-Elflanlr >?3>.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    4/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ >

    privcfy Nidds furrlbtdy nlhkrl dljisdcturls kr ubelr jkvlrbalbt fkbsielrctikb ib ctdlcst >? akrl fkubtrils. It is rlibhkrfle ny tml ibfrlcsibj iapkrtcbfl kh nktmibtlrbctikbcd cjrllalbts cbe csskfictikbs kh E_Cs.

    C _kstsfript rlvlcds tmct tmlrl crl bkw 3?3 dcws, bkt 99, cbe Vmlmlrlzcel fcb rlst cwmidl.

    Ibtrkeuftikb

    Vmlmlrlzcel tkde Vudtcb Vmcmrycr ylt cbktmlr hcnudkus tcdl hrka c hcr-khhdcbe, nut tml Vudtcb wcs blvlr sctishile, sk lcfm bijmt Vmlmlrlzcel nrkujmtmia cbktmlr tcdl (cbe tmus scvle mlr mlce), ubtid kbl tmkuscbe bijmts mcepcssle, cbe tmlb kbl.3Di`l tml tmkuscbe-cbe-kbl bijmts, tml jdkncd mistkry khectc privcfy dcws is c tcdl tmct jrkws witm lcfm sufflssivl tlddibj, cbe it acynl tmct tml stlcey jrkwtm kh sufm dcws ib hcr-khh dcbes widd turb kut tk nl tmlslfrlt kh tml survivcd kh privcfy ib c rctmlr mkstidl wkrde. Uml alal kh ectcprivcfy, mcvibj lsfcple hrka tml nkttdl kvlr 5? ylcrs cjk, is prkvibj eihhifudttk put ncf` ib.>It is bkt c mistkry tmct fcb nkcst 3??3 ectc privcfy dcws, nut itekls mcvl 3?3, tk wmifm (elcr rlcelr) wl smcdd bkw turb.

    3 C Vurprisibj Dcfubc

    It is hkrty ylcrs sibfl Vwlelbs Ectc Cft 39:6 wcs tml hirst fkaprlmlbsivlbctikbcd ectc privcfy dcw, cbe tml hirst sufm bctikbcd dcw tk iapdlalbt wmct

    wl fcb bkw rlfkjbisl cs c ncsif slt kh ectc prktlftikb pribfipdls.6

    Mkw acby

    3 Vir ^ Nurtkb, (trcbs) Ucdls hrka tml Crcnicb Bijmts (Cvlbld Nkk`s, 39:

    Uml lhhlftivlblss kh ectc privcfy pribfipdls fkals cs aufm hrka tmlir ielkdkjifcdlhhlft cbe tmlir jdkncd bcturl cs hrka tmlir lbhkrflalbt (wmifm is khtlb dcf`ibj).Hkrty ylcrs kh ectc privcfy dcws mcvl frlctle c dcbjucjl kh ectc privcfy, cbe c sltkh ltmifcd stcbecres tk wmifm akst fkapcbils cbe jkvlrbalbts hlld kndijle tk ctdlcst jivl dip slrvifl. Cttlapts tk nrlc` tml pkwlr kh tmis eisfkursl ny frlctikb khcdtlrbctivl dcbjucjl/ltmifcd stcbecres, pcrtifudcrdy tml pusm hkrcffkubtcnidity mcvl hcidle cs ylt nut crl c fkbtibuibj tmrlct tk tml mljlakbykh fkbvlbtikbcd ectc privcfy pribfipdls.7 J Jrllbdlch, Jdkncd ectc privcfy ib cbltwkr`le wkrde ib I Nrkwb (le), ^lslcrfm Mcbenkk` kb Jkvlrbcbfl kh tml Ibtlrblt(Lewcre Ldjcr, >?36) 4mttp7//ssrb.fka/cnstrcft139982.

    6 Ib 39:? nktm tml \VCs Hcir Frleit ^lpkrtibj Cft cbe c ectc prktlftikb dcw hkrpundif slftkr ib tml Dcbelr kh Mlsslb, Jlracby, mce ibfduele slts kh ectc

    prktlftikb pribfipdls, nut eie bkt mcvl tml sfkpl rlquirle hkr dcws fkbsielrle mlrl.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    5/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ 6

    fkubtrils bkw mcvl ectc prktlftikb dcws; sllale di`l c hcirdystrcijmthkrwcre qulstikb wmlb it wcs cs`le kh al ib Gubl >?33.5 Uml usucdcbswlr, ibfdueibj aibl, wcs skalwmct vcjul7 cnkut sixty kr plrmcps c

    wldd-ibhkrale rlspkbelbt aijmt mcvl scie akrl tmcb sixty.?33. Vix akbtms dctlr, blw dcws cbe hurtmlribvlstijctikb smkwle tmlrl wlrl ct dlcst =9 fkubtrils witm sufm dcws.=Uml dcst3= akbtms mcvl sllb c akelrctl lxpcbsikb ib jdkncd ectc privcfy dcws. Vibfltml prlvikus cbcdysis distibj =9 fkubtrils, tmlrl mcvl nllb blw ectc privcfydcws lbcftle fkvlribj tml privctl slftkr ib Jmcbc, Jlkrjic9, Bifcrcjuc, tml_midippibls, cbe Vibjcpkrl (privctl slftkr kbdy). Uk tml dist aust cdsk nl

    ceele dcws kaittle prlvikusdy hrka @kskvk cbe Jrllbdcbe (c Ecbismtlrritkry wmifm is stidd sunglft tk Elbacr`s kde ectc prktlftikb dcw). Umctnribjs tml tktcd tk 98. Mkwlvlr, cs eisfussle nldkw, tmlrl crl cdsk ct dlcsttmrll ectc privcfy dcws,3? nktm blw cbe prl-lxistibj, fkbflrbibj tml pundifslftkr kbdy (Ylalb, Wiancnwl cbe Blpcd), wmifm blle tk nl ceele, nribjibjtml tktcd tk 99.

    Uml Ucndl kh Ectc _rivcfy Dcws ct tml fkbfdusikb kh tmis crtifdl dists cddfkubtrils (ibfdueibj ktmlrwisl ibelplbelbt dljcd guriseiftikbs) wmifm mcvl

    5 Ny Gcals N ^udl, cutmkr kh _rivcfy Divls cbe _undif Vurvliddcbfl(Cddlb Dcbl, 39:6),cbe acby ktmlr eistibjuismle wkr`s kb privcfy. Umct nkk` wcs pundismle tmlscal ylcr cs tml Vwleism Ectc Cftwcs lbcftle, cbe smkrtdy nlhkrl Aifmld Hkufcudtpundismle tmct ktmlr lcrdy fdcssif kh survliddcbfl stueils, Eisfipdibl cbe _ubism7 UmlNirtm kh tml _riskbib 39:?3?) ?3>) (issul 33????652.

    9 Uml Jlkrjicb Dcw kb _lrskbcd Ectc _rktlftikb wcs lbcftle kb >= Elflanlr >?33cbe lbtlrle ibtk hkrfl kb 3 Acy >?3>.

    3? Ibfdusikb kh c hkurtm pundif slftkr dcw, hrka Jlkrjic, is ubblflsscry nlfcusl it mcsbkw pcssle ectc prktlftikb dljisdctikb.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    6/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 5

    lbcftle ectc privcfy dcws0 tml pribfipcd dcw0 wmlb lbcftle0 its slftkrcdfkvlrcjl (kbdy privctl slftkr0 kbdy pundif slftkr0 kr nktm slftkrs)0 tmlibtlrbctikbcd ectc privcfy fkaaitalbts kh tml fkubtry, kr tml ibtlrbctikbcd

    rlfkjbitikb its dcws mcvl rlflivle0 wmltmlr it mcs c ectc prktlftikb cutmkrity(bcale ih sk)0 cbe tml ibtlrbctikbcd csskfictikbs ib wmifm tmct E_C isibvkdvle. C slpcrctl Ucndl kh Khhificd Nidds dists `bkwb khhificd Nidds bkt yltlbcftle. Uml pifturl tmct widd lalrjl hrka tml cbcdysis kh tml jrkwtm kh tmlsldcws kvlr tial is tmct ectc privcfy dcws crl sprlceibj jdkncddy, cbe tmlirbuanlr cbe jlkjrcpmifcd eivlrsity cffldlrctibj sibfl >???. Jrkwtm kh ectcprivcfy dcws is bkt ylt hdcttlbibj khh.

    Uml buanlr, jrkwtm cbe jlkjrcpmifcd eistrinutikb kh ectc prktlftikb dcws issijbihifcbt. Cs Nlbbltt cbe ^ccn scie ib tmlir dlceibj tlxt ib >??8, kvlr tmlpcst tmirty kr akrl ylcrs, fkaprlmlbsivl cbe jlblrcd ectc prktlftikb dcws

    mcvl nllb rljcrele cs lsslbticd tkkds hkr rljudctibj tml usl kh plrskbcdectc.33 Ny trcf`ibj tmlir kffurrlbfl wl fcb kntcib ibsijmts ibtk tml jdkncdprkjrlss kh prktlftikb kh ectc privcfy cs c muacb rijmt, ibtk tml lxtlbt tkwmifm flrtcib prcftifls crl nlfkaibj lbtrlbfmle ib tml wkrdes dljcd systlas(cbe tmlrlhkrl ibfrlcsibjdy eihhifudt tk rlakvl), cbe ibtk tml di`ldy huturl rctlkh kffurrlbfl kh blw ectc prktlftikb dcws ib ktmlr fkubtrils. Umlsl acttlrschhlft tml jdkncd jlk-pkditifs kh privcfy prktlftikb. Vufm ibhkractikb is cdsksijbihifcbt hkr akrl cfcelaif lbquirls, sufm cs ibtk tml lxtlbt (cbe sufflss)kh ectc prktlftikb dcws cs c trcbspdcbt ibtk dljcd fudturls ib wmifm it wcs bktprlvikusdy hkube.

    > Zmct is c Ectc _rivcfy Dcw;

    Nlhkrl cbswlribj c siapdl qulstikb, it is skaltials blflsscry tk cbswlr skalakrl fkapdlx qulstikbs hirst. Ib tmis fcsl, nlhkrl stcrtibj tk fkubt ectcprivcfy dcws it is blflsscry tk cbswlr7 Zmct is c fkubtry;0 Zmct is c dcw;0Zmct sfkpl aust c dcw mcvl;0 Zmct ectc privcfy pribfipdls aust c dcwibfduel;0 cbe mkw lhhlftivl aust c dcw nl; Uml kvlrcdd cpprkcfm tc`lb mlrl istk cttlapt tk elhibl wmct crl tml aibiaua fritlric tmct rlcskbcndl cbeiapcrticd knslrvlrs fkude cjrll fkbstitutl c ectc privcfy dcw kr ectcprktlftikb dcw wmlb sctishile. Uml hcftkrs crl usle tk eltlraibl wmifmfkubtrils dcws crl ibfduele ib tml fkbfdueibj Ucndls.

    >.3 Zmct is c fkubtry;

    Ib tmis cbcdysis, fkubtrils is c sdijmt lxcjjlrctikb, cbe c akrl cffurctl tlrawkude nl slpcrctl dljcd guriseiftikbs. Uml Ucndl ibfduels tml twk VplficdCeaibistrctivl ^ljikbs (VC^s) wmifm mcvl fkbstitutikbcddy eihhlrlbt dljcdsystlas hrka tml rlst kh Fmibc (Mkbj @kbj cbe Acfck, ubelr tml pribfipdl khKbl Fkubtry, Uwk Vystlas) cbe hivl Nritism elplbelbt tlrritkrils wmifm

    33 F Nlbbltt cbe F ^ccn, Uml Jkvlrbcbfl kh _rivcfy7 _kdify Ibstrualbts ib Jdkncd_lrsplftivl(AIU _rlss, >??8).

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    7/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ Flrtcibprkvibfls kh tml _lkpdls ^lpundif kh Fmibc wmifm mcvl lbcftle dkfcd dcws,crl lxfduele hkr siaidcr rlcskbs. Vtctl kr prkvibficd dcws wmifm kbdy fkvlr tmldkfcd pundif slftkr, crl cdsk lxfduele. Acby kh tmlsl sun-bctikbcd dcws crlquitl sijbihifcbt skurfls kh ectc privcfy dljisdctikb cbe fcsl dcw, kr wlrlpikbllrs ib ectc prktlftikb. Mlssl ib Jlracby, Sulnlf, Kbtcrik cbe NritismFkduanic ib Fcbcec, cbe Xiftkric cbe Blw Vkutm Zcdls ib Custrcdic crllxcapdls. It wkude nl vcducndl tk ibfduel sufm guriseiftikbs ib c slpcrctl

    Ucndl, nut tmis mcs bkt nllb ekbl ib tmis crtifdl. Uml rlsudt kh tmis fkbslrvctivlcpprkcfm is tmct bk fkubtry is ibfduele twifl ib tml Ucndl, nut bkr is cbyguriseiftikb ubrlcskbcndy lxfduele.

    >.> Zmct is c dcw;

    Uml cpprkcfm tc`lb mlrl is tmct c dcw is wmct tml wkre iapdils, cbe tmis isbkt sctishile ny c vkdubtcry fkel kh fkbeuft kr c trustacr` sfmlal. C dcwaust slt kut ectc privcfy pribfipdls (wmifm kbls crl eisfussle dctlr) ib csplfihif hcsmikb, bkt kbdy cs c jlblrcd fkbstitutikbcd prktlftikb hkr privcfy, krc fivid cftikb (tkrt) hkr ibhribjlalbt kh privcfy.

    C dcw ib tmis slbsl aust ac`l its ectc privcfy pribfipdls lbhkrflcndl, nutwmltmlr tmis is ny friaibcd khhlbfls, fivid plbcdtils, ceaibistrctivl krelrs hkrfkaplbsctikb, kr c rijmt kh fivid cftikbs nlhkrl tml fkurts, is dlht kplb, cs itwcs (hkr lxcapdl) ib tml krijibcd Fkubfid kh Lurkpl Fkbvlbtikb. Akstguriseiftikbs witm ectc privcfy dcws cdsk mcvl c Ectc _rktlftikb Cutmkrity(E_C), c slpcrctl ibstitutikb wmifm mcs rlspkbsinidity hkr tml ectc privcfydljisdctikb, nut tmis is bkt c blflsscry rlquirlalbt cbe is wcs dlht kplb ib tml

    3> C slpcrctl tcndl eltcidibj sufm dcws wkude nl elsircndl nut mcs bkt nllb ekbl.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    8/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 8

    Krjcbisctikb hkr Lfkbkaif Fk-kplrctikb cbe Elvldkpalbt (KLFE) cbeFkubfid kh Lurkpl ib 39=3.

    >.6 Zmct sfkpl aust c dcw mcvl;

    Blcrdy biblty plr flbt kh cdd ectc privcfy dcws ib tml Ucndl (==/99) fkvlr nktmtml pundif slftkr cbe tml privctl slftkr kh c fkubtry, nut tmlrl crl twk sacddjrkups kh lxflptikbs tmct kbdy fkvlr kbl kr tml ktmlr slftkr, cbe tmly crl nktmibfduele.

    Ib rldctikb tk tml privctl slftkr, tk nl ibfduele c dcw aust fkvlr akstlfkbkaifcddy sijbihifcbt csplfts kh tml kplrctikb kh tml privctl slftkr. Umislxfduels fkubtrils wmifm mcvl kbdy sfcttlrle slftkrcd privcfy dcws (lj frleitrlpkrtibj kr aleifcd rlfkres dcws). Uml \VC, wmifm mcs bualrkus diaitle

    slftkrcd dcws ib tml privctl slftkr is ibfduele bkt nlfcusl kh its privctl slftkrdcws, nut kbdy nlfcusl kh its hlelrcd pundif slftkr dcw. Acby fkubtrils mcvlskal lxflptikbs ib tmlir privctl slftkr fkvlrcjl, sufm cs vcrikus hkras khsacdd nusiblss lxflptikbs (lj Gcpcb cbe Custrcdic), kr lxflptikbs hkr bkb-cutkactle rlfkres, kr lxflptikbs hkr tml aleic (acby fkubtrils), kr hkrlapdkyalbt rlfkres (Custrcdic cjcib). Vufm lxflptikbs crl bkt c ncsis hkrlxfdusikb. C dcw witm dcrjldy fkaprlmlbsivl privctl slftkr fkvlrcjl isfkbsielrle cs fkvlribj tmct slftkr.

    Umlrl is c sacdd nut jrkwibj jrkup kh fkubtrils (six ct prlslbt), pcrtifudcrdyib Csic, witm dcws wmifm kbdy fkvlr tml privctl slftkr nut prkviel bkprktlftikb ib rldctikb tk tml pundif slftkr7 Vibjcpkrl, Acdcysic, Xiltbca,Ibeic, Sctcr Hibcbficd Flbtrl cbe Eunci Ibtlrbctikbcd Hibcbfl Flbtrl.

    Mkwlvlr, akst guriseiftikbs wmifm mcvl dcws witm privctl slftkr fkvlrcjl,cdsk mcvl ectc privcfy dcws wmifm fkvlr tmlir bctikbcd pundif slftkrs (==/95).Vufm prktlftikb is skaltials ny eihhlrlbt dljisdctikb hrka tmct fkvlribj tmlprivctl slftkr. Zmlrl tmlrl is c eihhlrlbt dcw hkr tml pundif slftkr it widd khtlbmcvl pribfipdls cbe lbhkrflalbt alfmcbisas wmifm eihhlr sijbihifcbtdy hrkatmksl cppdyibj tk tml privctl slftkr. Vkal guriseiftikbs wmifm bkw mcvlprivctl slftkr fkvlrcjl ibiticddy kbdy fkvlrle tmlir pundif slftkrs, ibfdueibjtml KLFE alanlrs, Custrcdic, Gcpcb, Fcbcec cbe Vkutm @krlc, witm privctlslftkr fkvlrcjl kbdy ibtrkeufle up tk 3< ylcrs dctlr.36Ct dlcst six guriseiftikbs

    prkviel ncsif ectc privcfy prktlftikb ib rldctikb tk tmlir pundif slftkr kbdy(tml \bitle Vtctls, Umcidcbe, Ylalb, Wiancnwl, Vt Xibflbt & tml Jrlbceibls,cbe Blpcd), nut ek bkt ek sk hkr tmlir privctl slftkr cffkreibj tk tml fritlricusle mlrl. Cs c hlelrctikb, tml \V _rivcfy Cft 39:5 kbdy fkvlrs tml hlelrcd

    36 Uml ylcr stctle ib tml Ucndl ubelr Hrka is tml ylcr hrka wmifm dljisdctikb wcslbcftle wmifm hirst prkviele tml rlquirle fkvlrcjl kh litmlrtml privctl slftkr krtml pundif slftkr. Vk, hkr lxcapdl, tml ylcr smkwb hkr Custrcdic is 39==, lvlbtmkujm tml _rivcfy Cft 39==kplrctle hkr 36 ylcrs ib rldctikb tk tml pundif slftkrkbdy, cbe hkr c dlsslr plrike ib rldctikb tk tml frleit ibeustry, nlhkrl akst kh tmlprivctl slftkr wcs ceele ib >??3.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    9/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ :

    pundif slftkr, nut skal stctls mcvl lquivcdlbt dcws.35Cs ubitcry fkubtils, tmldcws ib tml ktmlr fkubtrils fkvlr tmlir wmkdl pundif slftkrs.

    Crl tmlrl ktmlr fkubtrils ib tmis fctljkry; Umlrl crl 95 fkubtrils tmct mcvlrijmt tk ibhkractikb (^UI) dcws (cdsk fcddle hrlleka kh ibhkractikb kr HKIdcws).3< cvcidcndl ib Lbjdism smkws tmct kbdy hkur kh tmla fkude cdsk

    nl fkbsielrle tk allt c aibiaua slt kh fkbeitikbs tk qucdihy cs c ectcprivcfy dcw hkr tml pundif slftkr7 tml dcws kh Ylalb, Wiancnwl, Blpcd cbeUmcidcbe. Uml rlacibibj 3> dcws3:(slvlb ib Vpcbism, hivl ib ktmlr dcbjucjls)fkude fkbtcib ceeitikbcd pundif slftkr ectc privcfy dcws, cbe wmidl tmis eklsbkt slla di`ldy, it mcs bkt ylt nllb fkbfdusivldy csslssle.3= Blw ^UI/HKIdcws crl nlibj lbcftle lvlry ylcr, sk it is blflsscry wmlb csslssibj tml jdkncdeisslaibctikb kh ectc privcfy dcws tk cdsk `llp tmlsl blw ^UI/HKI dcws ibaibe. Uml Ucndl ekls bkt ibfduel cby fkubtrils wmifm aijmt mcvl pundifslftkr privcfy dcws hkr skal kh tmlir rljikbcd jkvlrbalbts kbdy (Fmibc aijmtqucdihy ih it eie).

    35 Fcdihkrbic, Blw Ykr`, Mcwcii, Aibblsktc cbe Acsscfmusltts mcvl dcws wmifmacy fkbstitutl ectc privcfy dcws cs elhible mlrl, diaitle tk tmlir stctl pundifslftkrs. Umis mcs bkt nllb ibvlstijctle huddy. Hkr eltcids kh sufm dcws sll _ Vwirl,cbe @ Cmace, \V _rivctl Vlftkr _rivcfy7 Dcw cbe _rcftifl hkr _rivcfy _rkhlssikbcds(IC__, >?3>), kr ^ L Vaitm, Fkapidctikb kh Vtctl cbe Hlelrcd _rivcfy Dcws (_rivcfyGkurbcd, >?36).

    3=Vlptlanlr >?3> 4mttp7//www.rti-rctibj.krj/peh/ibelx.pmp2, pdus ^wcbecwmksl dcw wcs lbcftle ib >?36.

    38 Umis fcb nl lstcndismle ny fkapcribj tml dists kh fkubtrils witm ^UI/HKI dcws witmtml dist kh fkubtrils witm ectc privcfy dcws slt kut ib Jrllbdlch, cnkvl b =. Uk tml=9 distle tmlrl aust nl ceele Jmcbc, Jlkrjic, @kskvk, Bifcrcjuc, tml _midippibls,Vibjcpkrl cbe Jrllbdcbe (Ecbism tlrritkry nut witm c eihhlrlbt ectc prktlftikbdcw). Umcidcbe is cdrlcey ibfduele ib tml dist kh =9 fkubtrils.

    3: Fkubtrils witm HKI/^UI dcws tmct aijmt fkbtcib pundif slftkr ectc privcfy dcws7Nrczid, Ekaibifcb ^lpundif, Lfucekr, Ld Vcdvcekr, Juctlacdc, Mkbeurcs, Bijlr,_cbcac, wcbec, Uur`ly, \jcbec cbe \znl`istcb.

    3= Ncsle kb nrilh cevifl rlflivle hrka dkfcd lxplrts nut bkt kb c trcbsdctikb kh tmldcws.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    10/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ =

    >.5 Zmct ectc privcfy pribfipdls aust c dcw ibfduel;

    Vtcbecre tlxts kb ectc privcfy ek bkt khtlb elhibl tml aibiaua slt kh

    pribfipdls wmifm c dcw aust fkbtcib tk nl fkbsielrle c ectc privcfy dcw, nutskal jk fdksl tk sk ekibj. Nlbbltt cbe ^ccn ib >??8 rlhlr tk c strkbjfkbslbsus tmct mcs lalrjle cs tk wmct crl c slt kh twldvl hcir ibhkractikbpribfipdls (HI_s),39 wmifm fcb nl suaacrisle cs7 cffkubtcnidity0 purpkslielbtihifctikb0 fkddlftikb witm `bkwdlejl cbe fkbslbt0 diaitle fkddlftikb tkwmlrl blflsscry hkr purpksl (cdsk fcddle aibiacd fkddlftikb)0 usl diaitle tkielbtihile purpksl kr witm fkbslbt (hibcdity)0 eisfdksurl di`lwisl0 rltlbtikbkbdy cs dkbj cs blflsscry0 ectc `lpt cffurctl, fkapdltl cbe up-tk-ectl (khtlbfcddle ectc qucdity)0 slfurity schljucres0 kplbblss kb pkdifils cbe prcftifls0ibeivieucd cfflss0 ibeivieucd fkrrlftikb. Zmlb tmly eisfuss ectc prktlftikbdljisdctikb, tmly ct kbl pkibt rlhlr tk tml ubivlrscd lankeialbt kh tmlsl

    twldvl HI_s ib bctikbcd cbe sun-bctikbcd dcws, ib tml Lurkplcb \bikb (L\)Eirlftivl, cbe tmlb ib dljisdctikb pcssle sunslqulbt tk tmct.>?Mkwlvlr, kvlrtml hkddkwibj pcjls tmly crl akrl rlcdistif cbe bktl tmct skal HI_s, sufm cstml ectc qucdity pribfipdls hibcdity pribfipdls crl kbdy ibfduele ib akstdcws.>3

    Nyjrcvl ib >??6 cdsk fkals fdksl tk prkvieibj c slt kh blflsscry rlquirlalbtswmlb ml prkviels cb kvlrvilw kh tml ncsif pribfipdls cppdile ny ectcprkflssibj dcws tk tml prkflssibj kh plrskbcd ectc.>>Ml tmlb eisfussls hcircbe dcwhud prkflssibj, aibiacdity, purpksl splfihifctikb, ibhkractikbqucdity, ectc sunglft pcrtifipctikb cbe fkbtrkd, eisfdksurl diaitctikb,ibhkractikb slfurity cbe slbsitivity.>6 Ktmlr tmcb slbsitivity tmlslfctljkrils crl fdksl tk tml HI_s kh Nlbbltt cbe ^ccn, nut ek bkt ibfduel cdd khtmla. Blitmlr Nlbbltt cbe ^ccn, kr Nyjrcvl cttlapt tk stctl c aibiaua sltkh pribfipdls tmct smkude nl ibfduele ib c ectc privcfy dcw, nut iapdy tmctakst kh tml pribfipdls ib tmlir dists smkude nl ibfduele.

    Cbktmlr cpprkcfm is tk stcrt witm tml twk lcrdilst ibtlrbctikbcd ibstrualbtsfkbflrbibj ectc privcfy, tml KLFE privcfy Juieldibls kh 39=3 cbe tmlFkubfid kh Lurkpl (FkL) Ectc _rktlftikb Fkbvlbtikb 3?= kh 39=3 (Fkbvlbtikb3?=) (witmkut its >??3 Ceeitikbcd _rktkfkd). It is rlcskbcndl tk rljcre tmla csprkvieibj tml nlst juiel tk tml aibiauarlquirlalbts kh c ectc privcfy dcw,jivlb tmct tmly lxistle hkr akrl tmcb twlbty ylcrs prikr tk tml cbcdysis kh

    nktm Nlbbltt cbe ^ccn cbe Nyjrcvl. Umct is tml cpprkcfm tc`lb ib tmis crtifdl.

    39 Nlbbltt cbe ^ccn, cnkvl b 33, 3>-36.>? Inie 3>3.>3 Inie 3>3-3>> D Nyjrcvl, Ectc _rktlftikb Dcw7 Cpprkcfmibj its ^ctikbcdl, Dkjif cbe Diaits(@duwlr,

    >??>) 6 Inie Fm 6 Fkrl _ribfipdls kh Ectc _rktlftikb Dcws.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    11/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ 9

    Uml pribfipdls ib tmksl lcrdilst twk ibstrualbts fcb akst siapdy nlsuaacrisle cs tml hkddkwibj 3? pribfipdls7

    3. Ectc qucdity rldlvcbt, cffurctl, & up-tk-ectl.>. Fkddlftikb diaitle, dcwhud & hcir0 witm fkbslbt kr `bkwdlejl.6. _urpksl splfihifctikbct tial kh fkddlftikb.5. PBktiflkh purpksl cbe rijmts ct tial kh fkddlftikb (iapdile)Q.5 M@ IB GB @^ AC AY _M UZ VB XB UUD

    Fkddlftikb diaits (bktlxflssivl)

    ? ? ? ? ? ? ? ? ? ] 9

    >5 Guriseiftikbs7 M@ 1 Mkbj @kbj VC^0 IB 1 Ibeic0 GB 1 Gcpcb0 @^ 1 Vkutm @krlc0AC 1 Acfcu VC^0 AY 1 Acdcysic0 _M 1 tml _midippibls0 UM 1 Umcidcbe (Niddkbdy)0 UZ 1 Uciwcb0 VB 1 Vibjcpkrl0 XB 1 Xiltbca.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    12/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 3?

    Guriseiftikbs>5 M@ IB GB @^ AC AY _M UZ VB XB UUD

    Fkddlftikb ny dcwhudalcbs

    ? ] ? ? ? ] ? ? ? ? :

    Fkddlftikb ny hcir alcbs ? ] ? ? ? ] ? ? ? ? :

    _urpksl kh fkddlftikbsplfihile ny tial khfkddlftikb

    ? ? ? ? ? ? ] ? ? ? 9

    Fkddlftikb witm`bkwdlejl kr fkbslbt,wmlb hrka ectc sunglft

    ? ? ; ? ? ? ? ? ? ? 9

    Ectc qucdity rldlvcbt,cffurctl, fkapdltl &up-tk-ectl

    ? ] ? ? ? ? ? ? ? ? 9

    \sls diaitle tk purpkslkh fkddlftikb, witmfkbslbt kr ny dcw

    ? ? ? ? ? ? ? ? ? ? 3?

    Eisfdksurl diaitle tkfkddlftikb purpksl, witmfkbslbt kr ny dcw (krstriftlr)

    ? ? ? ? ? ? ? ? ? ? 3?

    Vlfkbecry usls cbeeisfdksurls kbdycddkwle ih fkapctindl(kr striftlr)

    ? ? ?>8 ? ? ? ? 9

    Vlfkbecry purpkslsplfihile ct fmcbjl khusl (kr striftlr)

    ] ? ? ? ? ? ? ; ? ] :

    Vlfurity schljucres>:rlcskbcndl

    ? ? ? ? ? ? ? ? ? ? 3?

    Kplbblss rl pkdifils kbplrskbcd ectc

    ? ] ? ? ? ] ] ? ? ] 8

    Cfflss tk ibeivieucdplrskbcd ectc

    ? ? ? ? ? ? ? ? ? ? 3?

    Fkrrlftikb kh ibeivieucdectc

    ? ? ? ? ? ? ? ? ? ? 3?

    Cffkubtcndl ectcfkbtrkddlr

    ? ? ? ? ? ? ? ? ? ] 3?

    Uktcd hkr KLFE/FkL

    pribfipdls /38 Acdcysic Vlfkbecry usls crl bkt sk diaitle, nut slfkbecry eisfdksurls crl skdiaitle.

    >: Vchljucres aust nl cjcibst dkss kr ubcutmkrisle cfflss, elstruftikb, usl,akeihifctikb kr eisfdksurl.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    13/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ 33

    Zmidl skal fkubtrils ek sctishy cdd 3< fritlric (Vkutm @krlc, Acfcu, Vibjcpkrlcbe Uciwcb), tml cvlrcjl is 36.5 pribfipdls kvlr tml 3? fkubtrils. It wkude nltkk strift tk rlquirl cdd 3= Hkr eltcids kh sufm dcws sll Vwirl cbe Cmace, cnkvl b 350 Vaitm, cnkvl b 35.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    14/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 3>

    privcfy dcws allt tml fritlric lvlb ih cjjrljctle,>9 cbe pkssindy tmly fkudebkt ek sk hkr fkbstitutikbcd rlcskbs.6?

    >.< Mkw lhhlftivl aust c dcw nl;

    Umis cbcdysis kbdy fkbsielrs wmltmlr c ectc privcfy dcw lxists kb pcplr (ilmcs nllb lbcftle) cbe is ib hkrfl. Uml csslssalbt kh mkw lhhlftivldy c dcw islbhkrfle is mcdh kh tml tcs` kh cb L\ celqucfy csslssalbt, cbe ib lcfmibstcbfl sufm cb csslssalbt tc`ls acby wll`s kh wkr`.63 Cpcrt hrka nlibjiapkssindl hkr 9= fkubtrils, tmct is bkt tml purpksl kh tmis cbcdysis. Zmidl lcfmrlcelr acy mcvl tmlir kwb dist kh fkubtrils wmifm tmly wkude susplft csnlibj vlry prkncndy ct tml dkw lbe kh lbhkrflalbt lhhlftivlblss, elplbeibjkb wmct wl `bkw cnkut tmla. Ib hcft rldicndl ibhkractikb cnkut lbhkrflalbtkh akst ectc privcfy dcws is eihhifudt tk kntcib, cbe lvcductikb kh iapcft

    lxtrlaldy eihhifudt.6>

    Cdsk, tml hcft tmct sufm fkubtrils mcvl ectc privcfy dcwsib hkrfl dlcvls kplb tml pkssinidity tmct lbhkrflalbt crrcbjlalbts fcb fmcbjlvlry quif`dy tkwcre lhhlftivlblss. Dcws crl bkt rudle kut, tmlrlhkrl, hkr dcf`kh lvielbfl kh lhhlftivlblss. Umct is c eihhlrlbt lbquiry hrka tmis.

    Hibcddy, hkr tml purpksls kh tmis nrilh kvlrvilw, it is iapkrtcbt tk bktl tmctjrkwtm kr lxpcbsikb kh ectc privcfy dcws fcbbkt nl lquctle witmiaprkvlalbt ib privcfy prktlftikb. Vkal privcfy dcws crl siapdy bktlbhkrfle. Vurvliddcbfl cftivitils ib nktm tml privctl cbe pundif slftkrs fcb cdskjrkw ct tml scal tial cs dcws crl lbcftle cbe kplrctikbcd, cbe quitl khtlb ekwmlb ectc privcfy dcws crl c trcel-khh hkr, kr c nldctle rlspkbsl tk, akrl

    ibtlbsivl survliddcbfl. Csslssibj tml lhhlftivlblss kr vcdul kh ectc privcfydcws is c hcr akrl fkapdlx tcs` tmcb is ubelrtc`lb ib tmis rldctivldy siapdllxlrfisl.

    >.8 Uml rlsudtibj jdkncd tcnudctikb

    Uk suaacrisl tml cnkvl eisfussikb, ib tmis crtifdl cbe tml cffkapcbyibjUcndl, c fkubtry (ibfdueibj cby ibelplbelbt dljcd guriseiftikb) is fkbsielrletk mcvl c ectc privcfy dcw ih it mcs kbl kr akrl dcws fkvlribj tml akst

    >9 Hkr eltcids sll F Mkkhbcjdl, Fkubtry Vtueils N.3 \bitle Vtctls kh Calrifc ib E@khh, (le), Fkapcrctivl stuey kb eihhlrlbt Cpprkcfmls tk blw privcfy fmcddlbjls, ibpcrtifudcr ib tml dijmt kh tlfmbkdkjifcd elvldkpalbts(Lurkplcb Fkaaissikb, >?3?) 8.Ectc prktlftikb pribfipdls4mttp7//lf.lurkpc.lu/gustifl/pkdifils/privcfy/ekfs/stueils/blw[privcfy[fmcddlbjls/hibcd[rlpkrt[fkubtry[rlpkrt[N3[usc.peh2.

    6? Vll J Jrllbdlch cbe B Zctlrs, Kncacs _rivcfy Hrcalwkr`7 Cb Khhlr tk nl Dlhtkb tml Ucndl (Kftknlr >?3>) (issul 339) _rivcfy Dcws & Nusiblss Ibtlrbctikbcd ^lpkrt8-9, cbe rlhlrlbfls fitle tmlrlib 4mttp7//ssrb.fka/cnstrcft1>3=:>652.

    63 Uml cutmkr mcs nllb ibvkdvle ib tml prlpcrctikb kh hivl lxplrt rlpkrts hkr sufmcsslssalbts.

    6> Vll Nlbbltt cbe ^ccn, cnkvl b 33, Fm 9 hkr c eisfussikb kh tml eihhifudtils.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    15/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ 36

    iapkrtcbt pcrts kh its privctl slftkr, kr its bctikbcd pundif slftkr, kr nktm, cbetmct dcw prkviels c slt kh ncsif ectc privcfy pribfipdls, tk c stcbecre ct dlcstcpprkxiactibj tml aibiaua prkviele hkr ny tml KLFE Juieldibls kr

    Fkubfid kh Lurkpl Fkbvlbtikb 3?=, pdus skal altmkes kh khhificddy-ncf`lelbhkrflalbt (il bkt kbdy sldh-rljudctikb). Uk cpprkxiactl tml KLFE/FkLstcbecres, c dcw aust prkviel ibeivieucd pcrtifipctikb, hibcdity, slfurity cbect dlcst 33 kh tml 3< pribfipdls kvlrcdd.

    6 Uml Jdkncd Eihhusikb kh Ectc _rivcfy Dcws Kvlr 5? Ylcrs

    \sibj tmis elhibitikb kh c fkubtry witm c ectc privcfy dcw, tml cbblxle Ucndlkh Ectc _rivcfy Dcws cppdils tml elhibitikb tk eltlraibl tmct 99 fkubtrilsfurrlbtdy mcvl sufm dcws, cbe dists tmla cdpmcnltifcddy. Zmct fcb cbcdysis kh

    tmis Ucndl tldd us cnkut mkw tmlsl dcws mcvl elvldkple jdkncddy kvlr tml dcst5? ylcrs sibfl Vwlelb wcs tml skdl bctikbcd lxplrialbt ib 39:6; Uml akstknvikus qulstikbs crl tk cs` ct wmct rctl tmis lxpcbsikb mcs kffurrle, cbewmlrl mcs it kffurrle; Cbswlrs tk tmlsl qulstikbs widd lbcndl skal ibhkraleeisfussikb kh tml di`ldy rctl cbe dkfctikb kh huturl jdkncd jrkwtm ib ectcprivcfy dcws, cbe its iapdifctikbs.

    6.3 Fkubtrils witmkut ectc privcfy dcws7 Mlceibj tkwcre c aibkrity

    C tcnudctikb kh fkubtrils witm ectc privcfy dcws rlquirls tml fkapdlalbt tknl eltlraible7 mkw acby fkubtrils mcvl bk sufm dcws; Umlrl crl ct dlcst 3?9fkubtrils witm bk dcws ylt lbcftle, tc`ibj ibtk cffkubt \B alanlr stctlscbe c buanlr kh bkb-alanlr stctls.66Ih tml >? furrlbt Nidds `bkwb crl tc`lbibtk cffkubt (tml Umci Nidd is ijbkrle nlfcusl tmlrl is cdrlcey c pundif slftkrCft), tmlrl crl =9 fkubtrils65witm bk Cfts kr Nidds. Uml jdkncd eistrinutikb kh

    66 Uml dist ib tml hkddkwibj hkktbktl ibfduels \B knslrvlr stctls, c buanlr kh ktmlrstctls tmct crl bkt \B alanlrs, cbe \@ tlrritkrils. Umlrl acy nl skal ktmlrtlrritkrils witm slpcrctl dljcd systlas bkt ibfduele.

    65 Fkubtrils witm bk Cfts kr Nidds7 Chjmcbistcb0 Cdjlric0 Ncmrcib0 Ncbjdcelsm0Nldcrus0 Nldizl0 Nlrauec***0 Nmutcb**0 Nkdivic0 Nktswcbc0 Nritism Xirjib Isdcbes***0Nrubli Ecrusscdca0 Nurubei0 Fcankeic0 Fcalrkkb0 Flbtrcd Chrifcb ^lpundif0

    Fmce0 Fmibc0 Fkakrks0 Fkbjk, ^lpundif0 Fkbjk, Elakfrctif ^lpundif0 Func0Eginkuti0 Lfucekr0 Ljypt0 Ld Vcdvcekr0 Lquctkricd Juiblc0 Lritrlc0 Ltmikpic0 Higi0Jcanic0 Juctlacdc0 Juiblc0 Juiblc-Nisscu0 Juycbc0 Mciti0 Mkbeurcs0 Ibekblsic0Ircb0 Ircq0 Gkrecb0 @czc`mstcb0 @irincti0 @krlc, Bkrtm0 @uwcit0 Dck _E^0 Dlncbkb,Dlsktmk0 Dinlric0 Dinyc0 Acdcwi0 Acdeivls0 Acrsmcdd Isdcbes0 Acuritcbic0Aifrkblsic0 Akbjkdic0 Akzcaniqul0 Aycbacr0 Bcainic0 Bcuru0 Kacb0 _c`istcb0_cdcu0 _cdlstibl*0 _cbcac0 _cpuc Blw Juiblc0 ^wcbec0 Vcakc0 Vck Ukal cbe_ribfipl0 Vcuei Crcnic0 Vilrrc Dlkbl0 Vkdkakb Isdcbes0 Vkacdic0 Vri Dcb`c0 Vuecb0Vuribcal0 Vwczidcbe0 Vyric0 Ucgi`istcb0 Uiakr Dlstl0 Ukjk0 Ukbjc0 Uur`albistcb0Uuvcdu0 \jcbec0 \bitle Crcn Lairctls0 \znl`istcb0 Xcbuctu0 Xctifcb (Mkdy Vll)*0Xlblzuldc0 Wcanic (* 1 \B knslrvlr stctls0 ** 1 Bkt \B alanlr0 *** 1 \@tlrritkry). Umis dist is fkbstruftle ny stcrtibj witm cdd \B alanlr stctls cbe

    knslrvlrs, ceeibj `bkwb ibelplbelbt guriseiftikbs, cbe tmlb rlakvibj fkubtrils

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    16/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 35

    >?= fkubtrils is tmlrlhkrl7 =9 witm bk Cfts kr Nidds0 >? witm Nidds0 99 witm Cfts.It is fdlcr hrka tml dist kh fkubtrils witm Nidds tmct tml buanlrs fkude fmcbjlquitl skkb. Lbcftalbt kh six akrl Nidds widd put tml buanlr kh fkubtrils witm

    ectc privcfy dcws ib tml acgkrity. Umis is di`ldy tk kffur ib >?35. Kh fkursl,buanlrs kh fkubtrils witm dcws is bkt tml kbdy ibeifctkr kh sijbihifcbfl, cbektmlr alcsurls ncsle kb tml pkpudctikbs kr lfkbkaif sijbihifcbfl khfkubtrils fkude nl usle.

    6.> Jrkwtm ny elfcel

    Uml rctl kh lxpcbsikb mcs cvlrcjle cpprkxiactldy >.< dcws plr ylcr hkr 5?ylcrs, nut it mcs bkt nllb c diblcr jrkwtm. Uml buanlr kh blw ectc privcfydcws jdkncddy, vilwle ny elfcel, mcs jrkwb cs hkddkws7 9 (39:?s), +3> (39=?s),+>? (399?s), +69 (>???s) cbe +39 (6.< ylcrs kh tml >?3?s), jivibj tml tktcd kh 99.

    Ib tml 39:?s, ectc privcfy dcws wlrl c wlstlrb Lurkplcb pmlbkalbkb(Custric, Elbacr`, Jrllbdcbe, Jlracby, Hrcbfl, Bkrwcy, Vwlelb, cbeDuxlankurj), ktmlr tmcb hkr tml \V pundif slftkr Cft. Uml pksitikb wcssiaidcr ib tml 39=?s (Hibdcbe, Ifldcbe, Irldcbe, tml Bltmlrdcbes, Vcb Acribk,tml \@, cbe tmrll tlrritkrils rldctle tk tml \@), witm Isrcld cs tml hirst bkb-Lurkplcb stctl ib 39=3, cbe Custrcdic, Fcbcec cbe Gcpcb prkvieibj pundifslftkr kbdy dljisdctikb. Cffldlrctikb fkaalbfle ib tml 399?s, cs akstrlacibibj wlstlrb Lurkplcb fkubtrils (L\ cbe LLC) lbcftle dcws (Nldjiua,Itcdy, Jrllfl, Akbcfk, _krtujcd, Vpcib, cbe Vwitzlrdcbe), witm elvldkpalbtsib _krtujcd cbe Vpcib ib fkbgubftikb witm elakfrctisctikb. Akrlsijbihifcbtdy, witm tml fkddcpsl kh tml Vkvilt \bikb acby hkralr lcstlrb ndkffkubtrils lbcftle ectc privcfy dcws cs pcrt kh tmlir prktlftikb kh fivid dinlrtils(Cdncbic, Fzlfm ^lpundif, Mubjcry, _kdcbe, Vdkvc`ic, cbe Vdkvlbic), cbe tmlhirst lx-Vkvilt-rlpundifs (Czlrncigcb cbe Ditmucbic) eie di`lwisl. Uml sprlcekutsiel Lurkpl cdsk stcrtle, witm tml hirst dcws ib Dctib Calrifc (Fmidl) cbetml hirst fkaprlmlbsivl dcws ib tml Csic-_cfihif (Mkbj @kbj, Blw Wlcdcbecbe (witm diaitctikbs) Uciwcb, pdus Umcidcbe cbe Vkutm @krlcs pundif slftkrdcws), cdsk khtlb rldctle tk ibfrlcsle elakfrctisctikb.

    Ib tml >???s tml cffldlrctikb fkbtibule, cbe ibfrlcsle ib cdakst cdd rljikbs khtml wkrde. Akst stri`ibj wcs tml lxpcbsikb ib tml hkralr lcstlrb ndkf cbeVkvilt rlpundif fkubtrils tml (Nksbic & Mlrzljkvibc, Nudjcric, Frkctic,

    Lstkbic, Dctvic, Acflekbic (HY^KA), Akdekvc, ^kacbic, Vlrnic cbeAkbtlbljrk, pdus ^ussic itsldh, tmkujm bkt ib hkrfl ubtid >?33), pdus tmlceeitikb kh tml rlacibibj wlstlrb Lurkplcb fkubtrils (Cbekrrc, Fyprus,Jinrcdtcr, Dilfmtlbstlib cbe Acdtc). Kutsiel Lurkpl, lxpcbsikb cffldlrctle ibtml Csic-_cfihif (Acfck VC^, cbe Blpcds pundif slftkr, cbe privctl slftkrlxtlbsikbs kh lxistibj dcws ib Custrcdic, Vkutm @krlc, cbe Gcpcb), DctibCalrifc (Crjlbtibc, Fkdkanic, _crcjucy cbe \rujucy), cbe tml Fcrinnlcb(Ncmcacs, Vt Xibflbt & Jrlbceibls). ^cpie elvldkpalbt tkk` pdcfl ib Chrifc

    witm Cfts kr Nidds. It is pkssindl tmct skal tlrritkricd guriseiftikbs witm ibelplbelbtdljcd systlas crl bkt ylt ibfduele.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    17/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ 3??=, cbe tml Eunci cbe Sctcr HibcbficdFlbtrls ceele tml hirst dcws ib tml Aieedl Lcst. Uml bkujmtils (>???-?9) wcstml hirst elfcel ib wmifm bkb-Lurkplcb lxpcbsikb kh dcws (>6) lxfllele tmctib Lurkpl (38).

    Ib tml hirst tmrll cbe c mcdh ylcrs kh tmis elfcel 39 blw dcws mcvl nllblbcftle. Cdd rlacibibj Lurkplcb fkubtrils lbcftle dcws (Hcrkl Isdcbes,Jlkrjic, @kskvk cbe \`rcibl), witm tml lxflptikb kh Uur`ly (cdsk tml kbdyrlacibibj KLFE lxflptikb) cbe tml twk bkb-alanlrs kh tml Fkubfid khLurkpl (Nldcrus cbe tml Xctifcb). Uml ^ussicb dcw cdsk hibcddy fcal ibtkhkrfl. Kutsiel Lurkpl, cdakst cdd rljikbs mcvl cdrlcey smkwb fkbtibuibj

    lxpcbsikb. Lxpcbsikb kutsiel Lurkpl (3?3?s crl tmlakst ibtlbsivl plrike kh ectc prktlftikb elvldkpalbt ib tml 5?-ylcr mistkrykh tml hilde, cvlrcjibj akrl tmcb hivl blw dcws plr ylcr.

    Umlrl is cdsk c fkbtibuibj strlbjtmlbibj kh lxistibj dcw kutsiel Lurkpl ib tml>?3?s, cs mcs kffurrle ib Mkbj @kbj, Vkutm @krlc, Custrcdic, cbe Uciwcb, tk

    fkbsielr kbdy tml Csic-_cfihif.

    6.6 Jlkjrcpmifcd lxpcbsikb

    Jlkjrcpmifcddy,6= alanlr stctls kh tml Lurkplcb \bikb (fkubtibjFrkctic cs kh 3 Gudy >?36), cbe c hurtmlr >5 dcws ib ktmlr Lurkplcb fkubtrilskr guriseiftikbs (ibfdueibj tml LLC stctls). Kbdy c hlw Lurkplcb fkubtrilsrlacib witmkut sufm dcws, (Nldcrus, tml Mkdy Vll/Xctifcb, cbe Uur`ly).

    Umlrl crl bibl dcws ib Dctib Calrifc. Ib tml Calrifcs, crl cdsk tml dcws ibFcbcec cbe tml \VC, cbe hkur dcws ib tml Fcrinnlcb. Ib Csic tmlrl crl bkw3> kh >: fkubtrils witm ectc privcfy dcws. Nktm Custrcdic cbe Blw Wlcdcbemcvl ectc privcfy dcws, nut bk fkubtrils ib tml _cfihif Isdcbes ek sk (tml kbdyrljikb witm bk sufm dcws). Ib Bkrtm Chrifc cbe tml Aieedl Lcst, tmlrl crl sixsufm dcws, cbe 3? ib Vun-Vcmcrcb Chrifc. Uml Hrlbfm-splc`ibj Csskfictikb kh_lrskbcd Ectc _rktlftikb Cutmkritils (CHC_E_), cbe Hrcbfls FBID mcvl

    6?36 Acp (: Gudy >?36)4mttp7//pcplrs.ssrb.fka/skd6/pcplrs.fha;cnstrcft[ie139

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    18/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 38

    nktm acel lhhkrts tk lbfkurcjl lxpcbsikb kh ectc privcfy ib Chrifcbhrcbfkpmkbl fkubtrils. Uml @yrjyz ^lpundif dcw is tml hirst ib Flbtrcd Csic,tmkujm Akbjkdics dcws cdsk fkal fdksl tk qucdihyibj.

    Uml jlkjrcpmifcd eistrinutikb kh tml 99 dcws ny rljikb is tmlrlhkrl7 L\ (>=)0Ktmlr Lurkplcb (>)0 Dctib Calrifc (9)0 (sun-Vcmcrcb) Chrifc (3?)0Bkrtm Chrifc/Aieedl Lcst (8)0 Fcrinnlcb (5)0 Bkrtm Calrifc (>)0 Custrcdcsic(>)0 Flbtrcd Csic (3)0 _cfihif Isdcbes (?). Vk tmlrl crl 55 ectc privcfy dcwskutsiel Lurkpl, 5: plr flbt kh tml tktcd. Nlfcusl tmlrl is dittdl rkka hkrlxpcbsikb witmib Lurkpl, tml acgkrity kh tml wkrdes ectc privcfy dcws widdskkb nl hrka kutsiel Lurkpl, prkncndy ny tml aieedl kh tmis elfcel.

    6.5 Nidds hkr blw Cfts Zmlrl widd lxpcbsikb kffur blxt;

    Uml cbblxle Jdkncd Ucndl kh Ectc _rivcfy Niddsdists `bkwb khhificd Nidds hkr blwCfts, nktm tmksl wmifm mcvl nllb ibtrkeufle ibtk dljisdcturls, cbe tmkslwmifm crl ubelr khhificd fkbsielrctikb ny jkvlrbalbts. Ibhkractikb isibfduele cnkut tml furrlbt `bkwb stctl kh c Nidd. Furrlbtdy, tmlrl crl >3 sufmNidds `bkwb, ncsle kb rldicndl skurfls. Cs smkwb ib tml Ucndl tmly crlpriacridy hrka tml Fcrinnlcb (=) cbe Chrifc (=)68, pdus twk hrka DctibCalrifc (Nrczid cbe tml Hcd`dcbe Isdcbes), cbe kbl lcfm hrka tml Aieedl Lcst(Sctcr, cs eistibft hrka tml Sctcr Hibcbficd Cutmkrity sun-rljikb), Lurkpl(Uur`ly) cbe Csic (Umci privctl slftkr). Hurtmlr rlslcrfm acy rlvlcd akrlNidds ubelr fkbsielrctikb nut bkt ylt distle. Vkal Nidds crl lxfduele nlfcusltmly mcvl bkt nllb lbcftle hkr c elfcel chtlr ibtrkeuftikb,6: cbe skal crl

    lxfduele nlfcusl tmly cpplcr tk mcvl nllb rlglftle ny dljisdcturls, bktalrldy eldcyle.6=

    Uml Ucndl ekls bkt ibfduel Nidds hkr rlvisikbs kh lxistibj Cfts cdtmkujm tmlslcrl iapkrtcbt ib lxpcbeibj tml strlbjtm kh ectc privcfy dcws jdkncddy, cslxlapdihile ny dljisdctikb ib tml pcst twk ylcrs ib Vkutm @krlc, Uciwcb cbeMkbj @kbj.

    68

    Hrka Chrifc tmly crl7 Ivkry Fkcst, @lbyc, Acecjcsfcr, Acdi, Bijlr, Bijlric, VkutmChrifc, Ucbzcbic. Hrka tml Fcrinnlcb tmly crl7 Cbtijuc & Ncrnuec0 Ncrnceks0Fcyacb Isdcbe0 Ekaibifc0 Ekaibifcb ^lpundif0 Jrlbcec0 Gcacifc0 Vcibt @itts cbeBlvis.

    6: Umis ibfduels Xlblzuldcs >??6 (kr lcrdilr) Nidd hkr c Dcw kb Ectc _rktlftikb cbeMcnlcs Ectc, wmifm mcs nllb nlhkrl tml Vfilbfl cbe Ulfmbkdkjy Fkaaittll kh tmlBctikbcd Csslandy nut mcs bkt nllb ibtrkeufle tk tml Bctikbcd Csslandy hkrhkracd eisfussikb (ibhkractikb prkviele ny Gkmb Uuf`lr Ncrnkzc cbe ^kn@lbijsnlrj).

    6= Umis ibfduels Lfucekrs >?3? Nidd hkr c Dly el _rktlffikb c dc Ibtiaiece y c dksEctks _lrskbcdls, wmifm wcs rlglftle cbe slt csiel ny c pdlbcry alltibj kh tmlBctikbcd Csslandy kb 5 Kftknlr >?3> (ibhkractikb prkviele ny ^kn @lbijsnlrj).

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    19/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ 3:

    6.< _rleiftibj jrkwtm cbe uniquitkus ectc privcfy dcws

    Hkr kvlr twk elfcels tml rctl kh cekptikb kh blw ectc privcfy dcws plr ylcr

    mcs nllb stlceidy ibfrlcsibj, cbe tml rljikbs kh tml jdknl tmct mcvl sufm dcwsmcs nllb stlceidy lxpcbeibj. Ih tml furrlbt rctl kh lxpcbsikb hkr >?3?-aie>?36 fkbtibuls ib c diblcr hcsmikb, ? (diblcr 1 3690 cffldlrctibj 38?)

    Lvlb cddkwibj hkr c hlw akrl dljcddy eistibft tlrritkrils tk nl ceele, tml tktcdbuanlr kh guriseiftikbs jdkncddy is cnkut >3?. Ny tml lbe kh tmis elfcel, tmlbuanlr kh fkubtrils witm ectc privcfy dcws, cdd kh wmifm mcvl c strkbjhcaidy rlslandcbfl widd nl skalwmlrl nltwllb 36? cbe 38? kb tml lstiactlscnkvl, akrl di`ldy tkwcre tml mijmlr lbe. Ib ktmlr wkres, nltwllb 8> plr

    flbt cbe :8 plr flbt kh cdd guriseiftikbs jdkncddy widd mcvl ectc privcfy dcws ibkbdy slvlb ylcrs tial, cbe jdkncd jrkwtm fcb nl lxplftle tk fkbtibul nlykbe>?>?. Zmctlvlr fkubtry buanlrs cbe jrkwtm rctls crl usle, it sllas di`ldytmct ct skal ylcr ib tml blxt elfcel tml buanlr kh fkubtrils witm ectcprivcfy dcws widd rlcfm c tippibj pkibt ct wmifm it nlfkals ib tml ibtlrlsts khcdd guriseiftikbs wismibj tk pcrtifipctl ib tml jdkncd lfkbkay tk mcvl sufmdcws. It is bkt ubrlcdistif tk tcd` kh jdkncd uniquity kh ectc privcfy dcwswitmib

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    20/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 3=

    Umlrl crl ktmlr wcys, pktlbticddy akrl uslhud, ny wmifm jdkncd lxpcbsikb khectc privcfy dcws fkude nl alcsurle, scy ny tml pkpudctikbs kh tml fkubtrilsfkbflrble, kr ny tmlir JB_, kr JB_ plr mlce, kr ktmlr alcsurl kh lfkbkaif

    sijbihifcbfl. Umlsl fkude smkw eihhlrlbt trlbes, cbe wkude nl vcducndl, nutacy bkt nl blflsscry hkr tml purpksls kh tmis rlslcrfm. Ibsplftikb kh tml dist kh339 fkubtrils ib tml twk Ucndls wmifm cdrlcey mcvl ectc privcfy dcws kr mcvlkhhificd Nidds, ib fkapcriskb witm tml cnkvl-bktle dist kh =9 tmct ek bkt, ac`lsit knvikus tmct ectc privcfy dcws crl hkube ib cdakst cdd tml wkrdes dcrjlrcbe akrl lfkbkaifcddy sijbihifcbt fkubtrils. Ih kbl cees Nrczid, Vkutm Chrifc,Bijlric kr @lbyc hrka tml dist kh fkubtrils witm khhificd Nidds, tml pifturl islvlb akrl fdlcr. Uwk kh tml hlw lfkbkaifcddy mijmdy sijbihifcbt fkubtrils ibtml dist kh fkubtrils witm bk dcws kr Nidds crl Fmibc cbe Ibekblsic. Ibekblsicmcs, ib >?3>, lbcftle c ectc privcfy rljudctikb hkr l-fkaalrfl cbe is rlpkrtletk nl erchtibj c fkaprlmlbsivl dcw.69 Fmibc is lbcftibj c akscif kh ectc

    privcfy dcws ib lfkbkaifcddy sijbihifcbt slftkrs, nut fkude akvl tk cfkaprlmlbsivl ectc privcfy dcw.5? Ibeic mcs dljisdctle, tmkujm pkkrdy cbeieiksybfrctifcddy, cbe tmlrl is fkbsielrcndl ibtlrbcd cbe lxtlrbcd prlssurl kbIbeic tk lbcft akrl fkbvlbtikbcd fkaprlmlbsivl dljisdctikb. Vkutm Chrifcsdljisdctikb mcs cdakst fkapdltle its pcsscjl, cbe Nrczids acy ek sk ib >?367cbktmlr N^IF ib tml wcdd, wl fkude scy.

    6.8 Lbkujm kb qucbtity! Zmct qucdity ek tmlsl dcws mcvl;

    Cdtmkujm cb KLFE/FkL aibiaua stcbecre mcs nllb usle tk elhibl c ectcprivcfy dcw (cbe ibfdusikb ib tml Ucndl), tmis smkude bkt dlce tk tml aistc`lb

    cssuaptikb tmct kbdy sufm c aibiaua stcbecre kh ectc prktlftikb is wmct iscfmilvle nl tml dcws hrka fkubtrils kutsiel Lurkpl.53 Cbcdysis kh 66/69fkubtrils kutsiel Lurkpl witm ectc prktlftikb dcws cs ct Elflanlr >?3?,5>smkwle tmct ib rldctikb tk 3? pribfipdls tmct wlrl akrl strift tmcb tmlKLFE/FkL ncsif pribfipdls, tml 66 bkb-Lurkplcb dcws kb cvlrcjl lxminitle:/3? kh tmksl pribfipdls. Vkal kh tmlsl ceeitikbcd Lurkplcb pribfipdlskffurrle ib akrl tmcb :< plr flbt kh tml 66 fkubtrils csslssle, bcaldy

    69 J Jrllbdlch cbe V ^kscei, Ibekblsics ectc prktlftikb ^ljudctikb >?3>7 C nrilhfkel witm ectc nrlcfm bktihifctikb (>?36) (issul 3>>) _rivcfy Dcws & NusiblssIbtlrbctikbcd ^lpkrt>5->:.

    5? J Jrllbdlch cbe J Uicb, Fmibc lxpcbes ectc prktlftikb tmrkujm blw >?36juieldibls (>?36) (issul 3>>) _rivcfy Dcws & Nusiblss Ibtlrbctikbcd ^lpkrt3, 5-80 JJrllbdlch, Fmibcs B_F Vtcbeibj Fkaaittll privcfy Elfisikb7 C sacdd stlp, bkt cjrlct dlcp hkrwcre (issul 3>3) _rivcfy Dcws & Nusiblss Ibtlrbctikbcd ^lpkrt 3, 5-8,Hlnrucry >?36.

    53 Dcws ib Lurkplcb fkubtrils fcb nl cssuale tk lxminit jlblrcddy mijmlr stcbecres,nlfcusl kh tml rlquirlalbts kh tml L\ Eirlftivl, cbe tml Ceeitikbcd _rktkfkd tk tmlFkL Fkbvlbtikb.

    5> J Jrllbdlch, Uml Ibhdulbfl kh Lurkplcb Ectc _rivcfy Vtcbecres Kutsiel Lurkpl7Iapdifctikbs hkr Jdkncdisctikb kh Fkbvlbtikb 3?= (>?3>) >(>) Ibtlrbctikbcd Ectc_rivcfy Dcw, 4mttp7//pcplrs.ssrb.fka/cnstrcft[ie1398?>992.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    21/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ 39

    nkrelr-fkbtrkd ectc lxpkrt rlstriftikbs (>=/66)0 ceeitikbcd prktlftikb hkrslbsitivl ectc (>=/66)0 eldltikb rlquirlalbts (>=/66)0 rlfkursl tk tml fkurts(>8/66)0 aibiaua fkddlftikb (>8/66)0 cbe splficdist ectc prktlftikb cjlbfils

    (>= alanlr stctls kh tml Lurkplcb \bikb crl rlquirle tk mcvl ectcprivcfy dcws wmifm iapdlalbt tml L\ ectc prktlftikb Eirlftivls, cbe cdd ek

    sk (sll tml Ucndl). Hkur ceeitikbcd fkubtrils mcvl cppdile tk gkib tml L\,56

    cbekbl kh tmlsl (Uur`ly) ekls bkt ylt mcvl c ectc privcfy dcw. Uml LurkplcbLfkbkaif Crlc (LLC) ibfduels tml Lurkplcb \bikb alanlr stctls pdusIfldcbe, Bkrwcy cbe Dilfmtlbstlib, cdd kh wmifm mcvl ectc privcfy dcwsfkbsistlbt witm tml Eirlftivl, rlsudtibj hrka tml LLC Urlcty. Vtlps tk elvldkpc ^ljudctikb tk rlpdcfl akst csplfts kh tml Eirlftivl, cbe ibfrlcsl tml dlvld khprktlftikb, crl fkbtibuibj.

    56 Hkralr Yujksdcv ^lpundif kh Acflekbic (HY^IA)0 Ifldcbe0 Akbtlbljrk0 Uur`ly.Frkctics alanlrsmip ectls hrka Gudy >?36.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    22/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ >?

    Fkubtrils kr guriseiftikbs kutsiel tml LLC fcb kntcib hrka tml LurkplcbFkaaissikb c elfisikb tmct tmlir dcws prkviel cb celquctl dlvld khprktlftikb kh privcfy, tk lbcndl hrll hdkw kh plrskbcd ectc hrka L\ alanlr

    stctls tk krjcbisctikbs ib tmksl fkubtrils.55

    Cs ylt, tml LF mcs kbdy acel sufmelfisikbs ib rldctikb tk twldvl guriseiftikbs cs c wmkdl, c aibkrity kh wmifmcrl kh lfkbkaif kr pkditifcd sijbihifcbfl,5 Fkubfid kh Lurkpl ectc prktlftikb Fkbvlbtikb 3?=

    Zitm tml rlflbt blw dcw ib Jlkrjic cbe rctihifctikb ny ^ussic, hkrty-hivl khtml hkrty-slvlb Fkubfid kh Lurkpl alanlr stctls mcvl bkw rctihile tmlFkubfid kh Lurkpl Fkbvlbtikb 3?=, cbe mcvl ectc privcfy dcws. Uur`ly mcssijble nut bkt rctihile tml Fkbvlbtikbcbe is bkw tml kbdy Fkubfid kh Lurkpl

    alanlr stctl bkt tk mcvl lbcftle c ectc privcfy dcw, hkddkwibj rlflbtlbcftalbts ny Cralbic cbe Jlkrjic. Vcb Acribk mcs bkt sijble kr rctihile,nut ekls mcvl c dcw. Nldcrus is bkt c Fkubfid kh Lurkpl alanlr nlfcusl khmuacb rijmts fkbflrbs, cbe tml Xctifcb is bkt c alanlr nlfcusl it is bkt celakfrcfy.

    Uml Ceeitikbcd _rktkfkd (LUV 3=3) tk tml Fkbvlbtikb cdsk rlquirls cfkaaitalbt tk ectc lxpkrt rlstriftikbs cbe tk cb ibelplbelbt ectc prktlftikbcutmkrity, cbe nribjs tml stcbecres kh tml Fkbvlbtikbup tk cpprkxiactldy tmlscal dlvld cs tml Eirlftivl. Hkrty-tmrll alanlr stctls mcvl sijble tmlCeeitikbcd _rktkfkd (Jlkrjic kbdy ib Acy >?36), cbe 66 mcvl sunslqulbtdy

    rctihile it (pdus \rujucy). Uwldvl fkubtrils tmct mcvl rctihile tmlFkbvlbtikb

    (pdus tmrll tlrritkrils kb wmksl nlmcdh tml \@ cfflele tk tml Fkbvlbtikb) mcvlbkt rctihile tml Ceeitikbcd _rktkfkd. Zmlrl c Fkubfid kh Lurkpl alanlr mcsrctihile nktm Fkbvlbtikb 3?= cbe tml Ceeitikbcd _rktkfkd, it is lxtrlaldyubdi`ldy cs c acttlr kh prcftifl tmct ectc lxpkrts tk tmct fkubtry hrka L\alanlr stctls wkude nl prlvlbtle, sk kntcibibj cb celqucfy hibeibj ubelrtml Eirlftivl cpplcrs tk nl dcrjldy irrldlvcbt ib prcftifl. Umis is bktle ib tmlUcndl.

    Vibfl >??=, tml Fkubfid kh Lurkpl mcs acel it fdlcr tmct it wismls tmlFkbvlbtikb cbe Kptikbcd _rktkfkd tk nlfkal jdkncd cjrllalbts, cbe tmct itwldfkals rlqulsts ny stctls kutsiel Lurkpl witm suitcndl ectc privcfy dcws

    tk cppdy tk cfflel tk nktm. \rujucy wcs tml hirst bkb-Lurkplcb stctl tk nlibvitle tk ek sk, cbe ib >?36 cfflele tk cbe rctihile tml Fkbvlbtikb cbe tmlCeeitikbcd _rktkfkd.58Uml slfkbe jdkncdisctikb ibvitctikb wcs cdsk issule tk

    55 Vll L\ wlnsitl hkr celqucfy elfisikbs 4mttp7//lf.lurkpc.lu/gustifl/ectc-prktlftikb/ekfualbt/ibtlrbctikbcd-trcbshlrs/celqucfy/ibelx[lb.mta2.

    5?36) (issul 3>>) _rivcfy Dcws & Nusiblss Ibtlrbctikbcd ^lpkrt>?->6.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    23/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ >3

    Akrkffk. Uml Fkbvlbtikb is bkw ib c prkflss kh akelrbisctikb wmifm ihsufflsshud widd ibfkrpkrctl nktm tml lxistibj Fkbvlbtikb cbe tml Kptikbcd_rktkfkd.5:

    Cb celqucfy hibeibj hrka tml L\ ekls bkt iapksl cby rlfiprkfcd kndijctikbskb tml rlfipilbt tk cddkw hrll hdkw kh plrskbcd ectc hrka it tk L\ fkubtrils.Umis kndijctikb ekls crisl wmlb fkubtrils kutsiel tml L\ (ibfdueibj ktmlrLurkplcb fkubtrils) nlfkal alanlrs kh tml Fkubfid kh Lurkpl Fkbvlbtikb3?=.

    5.6 Uml KLFE cbe its Juieldibls

    Cdd kh tml 65 KLFE alanlr fkubtrils,5=ktmlr tmcb Uur`ly cbe tml \VC (ibrldctikb tk tml privctl slftkr), bkw mcvl c ectc privcfy dcw iapdlalbtibj tml

    KLFEs privcfy Juieldibls kh 39=3. Uml KLFEs pdcbs hkr lbdcrjlalbt59

    alcb tmct akrl fkubtrils ib huturl widd nl di`ldy tk nl ibhdulbfle ny tmlKLFE privcfy Juieldibls tk cekpt ectc privcfy dcws. Uml KLFE is furrlbtdyrlvisibj tml Juieldibls.

    5.5 ^ljikbcd cjrllalbts nltwllb fkubtrils

    Uml hkddkwibj rljikbcd jrkupibjs kh fkubtrils crl cdd rldlvcbt tk tmlelvldkpalbt kh ectc privcfy dcws (witm tml lxflptikbs kh tml Vkutm CsicbCsskfictikb hkr ^ljikbcd Fkkplrctikb (VCC^F) cbe tml Fkaakb Acr`lt khtml Vkutm (Alrfcek Fkab eld Vur) (AL^FKV\^), cbe tmlir alanlrsmips crl

    tmlrlhkrl bktle ib tml Ucndls. Ct prlslbt, tml LFKZCV, C_LF cbe tmlCsskfictikb kh Vkutmlcst Csicb Bctikbs (CVLCB) jrkupibjs crl prkncndy tmlakst sijbihifcbt, nut tml elvldkpalbt kh rljikbcd ectc privcfy cjrllalbts isdi`ldy tk pdcy c akrl sijbihifcbt rkdl kb cdd fkbtiblbts ib huturl.

    Hkur hihtms (3:) kh tml >3 C_LF alanlr lfkbkails

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    24/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ >>

    pundif slftkr kbdy dcws, cbe Acdcysic cbe Xiltbca mcvl privctl slftkr kbdydcws. Umcidcbe mcs c Nidd hkr c fkaprlmlbsivl dcws nlibj rl-erchtle hkr itsFcniblt. Zmltmlr C_LF widd lxpcbe nlykbe >3 alanlrs is stidd pkssindl, nut

    ubdi`l tml L\, its alanlrsmip furrlbtdy sllas hrkzlb. Bualrkus fkubtrilsmcvl nllb tryibj tk gkib hkr skal tial, witmkut sufflss.?3?3>, tml CVLCB mlces kh stctlcekptle tml CVLCB Muacb ^ijmts Elfdcrctikb,3 kh wmifm stctls

    Lvlry plrskb mcs tml rijmt tk nl hrll hrka crnitrcry ibtlrhlrlbflwitm mis kr mlr privcfy, hcaidy, mkal kr fkrrlspkbelbfl

    ibfdueibj plrskbcd ectc, kr tk cttcf`s upkb tmct plrskbs mkbkurcbe rlputctikb. Lvlry plrskb mcs tml rijmt tk tml prktlftikb khtml dcw cjcibst sufm ibtlrhlrlbfl kr cttcf`s.

    Cdtmkujm ncsle kb tml tlraibkdkjy kh tml \bivlrscd Elfdcrctikb kh Muacb^ijmts, tml splfihif rlhlrlbfls tk plrskbcd ectc cbe tml rijmt tk dljcdprktlftikb ibfrlcsl tml ibtlrbcd ibflbtivls tk cdd CVLCB alanlrs, hrka nktm

    ??=7 Vll 4mttp7//lb.wi`ipleic.krj/wi`i/Csic-_cfihif[Lfkbkaif[Fkkplrctikb#Alanlr[Lfkbkails2. Ib rlhusibj Ibeicscppdifctikb hkr alanlrsmip, C_LF elfiele bkt tk ceait akrl alanlrs ubtid >?3?,nut tmis mcs bkt fmcbjle sibfl.

    CVLCB Alanlr Vtctls7 Nrubli Ecrusscdca, Fcankeic, Ibekblsic, Dck _E^,Acdcysic, Aycbacr, tml _midippibls, Vibjcpkrl, Umcidcbe, cbe Xilt Bca. UiakrDlstl is c fcbeiectl alanlr.

    ???)4mttp7//www.cslcb.krj/blws/itla/l-cslcb-hrcalwkr`-cjrllalbt2.

    ?3>)4mttp7//www.cslcb.krj/blws/cslcb-stctlalbt-fkaaubiquls/itla/cslcb-muacb-rijmts-elfdcrctikb2.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    25/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ >6

    witmib CVLCB cbe witmib lcfm fkubtry, tk lbcft ectc privcfy dcws.Mkwlvlr, tml Elfdcrctikb mcs fkal ubelr scvcjl fritifisa cbe kutrijmtrlglftikb

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    26/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ >5

    prktlftikb Eirlftivl. Hivl LFKZCV stctls mcvl sk lbcftle dcws (Nlbib,Nur`ibc Hcsk, Fcpl Xlrel, Vlbljcd cbe Jmcbc), cbe Nidds crl ubelrldcnkrctikb kr fkbsielrctikb ib, Bijlric, Bijlr, Ivkry Fkcst cbe Acdi, dlcvibj

    kbdy six ylt tk tc`l cby cftikb. Ib skal ktmlr LFKZCV alanlr stctls tmlVuppdlalbtcry Cft, cs cb ceeitikbcd prktkfkd tk c trlcty, acy nl dljcddynibeibj ib frlctibj sunstcbtivl rijmts ib fkubtrils wmlrl trlctils mcvl eirlftlhhlft cbe ek bkt rlquirl dkfcd lbcftalbt. Umis cpplcrs tk nl tml fcsl ib Bijlr,wmlrl dcw is nlibj elvldkple tk lstcndism c E_C, tk fkapdlalbt tmlLFKZCV trlcty kb ectc prktlftikb, wmifm wcs pundismle ib tml khhificdgkurbcd ib >?36.

    Dlss cevcbfle cs ylt, tml Lcst Chrifcb Fkaaubity (LCF), c rljikbcd jrkup khhivl Lcst Chrifcb fkubtrils (@lbyc, Ucbzcbic, \jcbec, ^wcbec cbeNurubei),8? wmlrl Lbjdism cbe Hrlbfm crl vcrikusdy spk`lb, mcs tc`lb

    ibitictivls tmct lbfkurcjl tml alanlr stctls tk cekpt ectc privcfy dljisdctikb.Vufm ibitictivls ibfduel tml furrlbt eisfussikb kh c Ercht Nidd kh ^ijmts hkr tmlLcst Chrifcb Fkaaubity83 wmifm, ubdi`l tml Chrifcb Fmcrtlr kb Muacb cbe_lkpdls ^ijmts, ibfkrpkrctls tml rijmt tk privcfy. It cdsk ibfduels c rijmt khdljcd lbhkrflalbt fudaibctibj ib c rijmt kh cpplcd tk tml Lcst Chrifcb Fkurt khGustifl. Cdsk, cdtmkujm bkt nibeibj, tml LCF mcs cekptle tml LCF Hrcalwkr`hkr Fynlrdcws _mcsls I cbe II ib >??= cbe >?33 rlsplftivldy, ceerlssibjaudtipdl fynlr dcw issuls ibfdueibj ectc prktlftikb. @lbyc cbe Ucbzcbic crlfurrlbtdy fkbsielribj ercht nidds kb ectc prktlftikb.

    Uml Vkutmlrb Chrifcb Elvldkpalbt Fkaaubity (VCEF) lbfkapcssls 3 ib skutmlrb cbe flbtrcd Chrifc, cbe Ibeicb Kflcb stctls, hkur kh

    wmifm mcvl ectc prktlftikb dcws (Cbjkdc, Acuritius, Vlyfmlddls cbeWiancnwl), cbe ct dlcst tmrll kh wmifm mcvl furrlbt Nidds (Vkutm Chrifc,Ucbzcbic cbe Acecjcsfcr). Uml Vkutm Chrifcb Nidd, wmifm mcs cdrlcey pcssletml dkwlr mkusl, fcb nl lxplftle tk mcvl c sijbihifcbt lhhlft kb prkaptibjdcws ib ct dlcst tml ktmlr VCEF fkubtrils nlfcusl kh Vkutm Chrifcs rkdl cs tmlrljikbcd lfkbkaif pkwlr.

    Umlrl mcs cdrlcey nllb wkr` ekbl kb VCEF-wiel ectc prktlftikb dcws cbepkdifils,86cs pcrt kh cb L\ cbe Ibtlrbctikbcd Uldlfkaaubifctikb \bikb (IU\)spkbskrle mcrakbisctikb prkglft rldlvcbt tk cdd rljikbs ib sun-Vcmcrcb Chrifc(il VCEF, LCF cbe LFKZCV) wmifm mcs cdsk prkeufle c Akeld-dcw kb

    8? Lcst Chrifcb Fkaaubity (>?35) 4mttp7//www.lcf.ibt/20 Ucbzcbic is c alanlr khnktm LCF cbe VCEF.

    83 Ercht Nidd kh ^ijmts hkr tml Lcst Chrifcb Fkaaubity, Acy >??9, Crusmc, Ucbzcbic.8> VCEF Alanlr Vtctls7 Cbjkdc, Nktswcbc, Elakfrctif ^lpundif kh Fkbjk, Dlsktmk,

    Acecjcsfcr, Acdcwi, Acuritius, Akzcaniqul, Bcainic, Vlyfmlddls, Vkutm Chrifc,Vwczidcbe, Ucbzcbic, Wcanic cbe Wiancnwl0 Vll VCEF wlnsitl4mttp7//www.scef.ibt/2.

    86 _ Fmltty, _rlslbtctikb kb ^ljikbcd Csslssalbt kh Ectc _rktlftikb Dcw cbe _kdifyib VCEF (Zkr`smkp kb tml VCEF Mcrakbizle Dljcd Hrcalwkr` hkr FynlrVlfurity, Jcnkrkbl Nktswcbc >: Hlnrucry6 Acrfm >?3>).

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    27/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ >?3>.85Uml Chrifcb \bikb mcs cdsk prlpcrle ib >?33 c erchtFynlr Fkbvlbtikb,8?3>.

    8?33) 4mttp7//www.itu.ibt/IU\-E/prkglfts/IU\[LF[CF_/mipssc/lvlbts/>?33/ZEKfs/FC[?Fkbvlbtikb%>?kb%>?Fynlrdljisdctikb%>?ib%>?Chrifc%>?Ercht?.peh2.

    88 C N Ac`udidk, _rktlftikb kh _lrskbcd Ectc ib sun-Vcmcrcb Chrifc (EkftkrcdEisslrtctikb, Nrlalb, >?3>) _crt 5.5.3.67 Chrifcb \bikb Fkbvlbtikb kb FynlrVlfurity >?33.

    8:

    KCV Jlblrcd Csslandy ^lskdutikb, Cfflss tk _undif Ibhkractikb7 VtrlbjtmlbibjElakfrcfy, CJ/^LV. >??9).8= KCV Elpcrtalbt kh Ibtlrbctikbcd Dcw, Ectc _rktlftikb(>?3>)

    4mttp7//www.kcs.krj/eid/ectc[prktlftikb[kcs[wkr .mta2.89 _lracblbt Fkubfid kh tml Krjcbizctikb kh Calrifcb Vtctls, Fkaaittll kb Gurieifcd

    cbe _kditifcd Chhcirs, _rldiaibcry _ribfipdls cbe ^lfkaalbectikbs kb _lrskbcd Ectc,Ekfualbt prlslbtle ny tml Elpcrtalbt kh Ibtlrbctikbcd Dcw kh tml Vlfrltcrict hkrDljcd Chhcirs, KLC/Vlr.J F_/FCG_->9>3/3? rlv. 3 fkrr. 3 (3: Kftknlr >?33)4mttp7//www.kcs.krj/eid/F_-FCG_->9>3-3?[rlv3[fkrr3[lbj.peh2.

    :? KCV Jlblrcd Csslandy ^lskdutikb, Cfflss tk _undif Ibhkractikb cbe _rktlftikb kh_lrskbcd Ectc, CJ/^LV. >=33 (]DIII-K/36), (8 Gubl >?36)

    4mttp7//www.kcs.krj/lb/sdc/eid/ekfs/CJ-^LV[>=33[]DIII-K-36[lbj.peh2.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    28/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ >8

    ibfduele witmib tml akrl fkbtlbtikus fkbtlxt kh elvldkpalbt kh dcws hkrcfflss tk pundif slftkr ibhkractikb.:3

    Ib tml Fcrinnlcb, tml Fcrinnlcb Fkaaubity (FC^IFKA) kh 3< stctls cbe hivlcsskfictl alanlrs:>is elvldkpibj cb Lfkbkaif _crtblrsmip Cjrllalbt (L_C)witm tml Lurkplcb \bikb cs pcrt kh tml >??= Fcrinnlcb Hkrua kh Chrifcb,Fcrinnlcb cbe _cfihif Vtctls (FC^IHK^\A:6)L\ L_C. Ectc prktlftikb isfkvlrle ny tml L_C cbe wcs kbl kh tml tkpifs ubelr eisfussikb ct L_Calltibjs ib >?3>.:5 Ectc prktlftikb is cdsk pcrt kh tml IU\s FcrinnlcbMcrakbizctikb kh IFU _kdifils (MI_FC^) fcpcfity-nuideibj prkglft.:?3>). Nkdivic is ib tml prkflss kh nlfkaibj c huddalanlr, cbe Fmidl, Fkdkanic, Lfucekr cbe _lru crl csskfictle stctls. Cwkr`ibj jrkup (VJU) wcs lstcndismle ib >??> tk eisfuss ibtljrctikb kh l-fkaalrfl cbe ectc prktlftikb nut sllas tk mcvl mce hlw rlsudts. Ectcprktlftikb is skaltials albtikble cs c tkpif ib kbjkibj bljktictikbs hkr cL\-AL^FKV\^ Hrll Urcel Cjrllalbt. Ib smkrt, AL^FKV\^ mcs bkt yltprkvle tk nl sijbihifcbt ib rldctikb tk ectc prktlftikb.

    < Ectc _rktlftikb Cutmkritils cbe tmlir Csskfictikbs

    Akst ectc privcfy dcws ibfduel prkvisikb hkr c E_C, c slpcrctl ibstitutikbwmifm mcs skal typl kh rlspkbsinidity hkr tml ectc privcfy dljisdctikb,

    :3 Vll Hrlleka Ibhk (HKIC cevkfctls), KCV Csslandy Elhlcts Cttcf`s kb ^cppkrtlur(35Gubl >?36) 4mttp7//www.hrllekaibhk.krj/>?36/?8/kcs-csslandy-elhlcts-cttcf`s-kb-splficd-rcppkrtlur/2.

    :> FC^IFKA alanlrs7 Cbtijuc cbe Ncrnuec, Ncmcacs, Ncrnceks, Nldizl, Ekaibifc,Ekaibifcb ^lpundif, Jrlbcec, Juycbc, Mciti, Gcacifc, Vt Dufic, Vt Xibflbt cbe tmlJrlbceibls, Vt @itts cbe Blvis, Vuribcal, Uribiece cbe Ukncjk0 Csskfictlalanlrs7 Cbjuiddc0 Nlrauec0 Nritism Xirjib Isdcbes0 Fcyacb Isdcbes0 Uur`s cbeFcifks Isdcbes7 Vll4mttp7//www.fcrifka.krj/gsp/fkaaubity/alanlr[stctls.gsp;albu1fkaaubity2.

    :6 FC^IHK^\A stcbes hkr tml Fcrinnlcb Hkrua kh Chrifcb, Fcrinnlcb cbe _cfihifVtctls, cbe fkvlrs tml scal 3< stctls cs FC^IFKA.

    :5 FC^IFKA _rlss ^ldlcsl, FC^IHK^\A jlcrs up hkr `ly L_C alltibj (>5Vlptlanlr >?3>)4mttp7//www.fcrifka.krj/gsp/prlssrldlcsls/prlss[rldlcsls[>?3>/prls>[3>.gsp2.

    :?364mttp7//www.tmlst`ittsblvisknslrvlr.fka/>?36/?5/>8/privcfy-nidd.mtad2. Vllcdsk IU\, Uml MI_FC^ _rkglft4mttp7//www.itu.ibt/blt/itublws/issuls/>?33/?:/

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    29/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ >:

    ibvkdvibj skal lbhkrflalbt pkwlrs, cbe wmifm crl slpcrctl hrka tml bkracdprkslfutkricd cbe gueificd systlas kh tml fkubtry.

    ?3>) >=(3&>) Fkaputlr Dcw & Vlfurity lvilw.

    =? Hkr lxcapdl, tml ectcprktlftikb.lu sitl ct4mttp7//www.ectcprktlftikb.lu/pawi`i/pawi i.pmp;b1Acib.E_Cutmkritils2.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    30/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ >=

    Csskfictikbs kh E_Cs - Jdkncd

    Uml Ibtlrbctikbcd Fkbhlrlbfl kh Ectc _rktlftikb cbe _rivcfy Fkaaissikblrs

    (IFE__F) is tml jrkupibj kh ectc prktlftikb cutmkritils kh nrkcelst sfkpl cbejrlctlst dkbjlvity, mcvibj mlde cb cbbucd fkbhlrlbfl hkr 6< ylcrs. Cs ^ccnpkibts kut fkbhlrlbfl is usle bkt kbdy tk elsfrinl tmlir cbbucd alltibj, nutcs c fkddlftivl bkub.=3 It mcs cffrleitctikb stcbecres wmifm jkvlrb wmifmcutmkritils fcb cttlbe its fdksle alltibjs cbe vktl kb rlskdutikbs, krijibcddyquitl strift nut siapdihile cbe pkssindy wlc`lble ib >?3?.=> Uml IFE__Falanlrs cekpt gkibt pkdify rlskdutikbs, cbe tmlir cbbucd fkbhlrlbfl is kplbtk cdd cttlbells (lxflpt hkr fdksle slssikbs) cbe mcs nlfkal tml dlceibj jdkncdectc prktlftikb fkbhlrlbfl.

    Kh tml =< fkubtrils wmifm mcvl ectc prktlftikb cutmkritils cppkibtle ubelr

    tmlir ectc privcfy dcws, kbdy , pdus tml Lurkplcb Ectc_rktlftikb Vuplrviskr.

    J_LB krijibctle ib c >??: KLFE ^lfkaalbectikb kb Frkss-nkrelr Fkkplrctikbib tml Lbhkrflalbt kh Dcws _rktlftibj _rivcfy=6 fcddibj hkr tml lstcndismalbt khcb ibhkracd bltwkr` kh privcfy lbhkrflalbt cutmkritils. J_LB alanlrsmipis kplb tk cby pundif privcfy lbhkrflalbt cutmkrity tmct7 (3) is rlspkbsindlhkr lbhkrfibj dcws kr rljudctikbs tml lbhkrflalbt kh wmifm mcs tml lhhlft khprktlftibj plrskbcd ectc0 cbe (>) mcs pkwlrs tk fkbeuft ibvlstijctikbs krpursul lbhkrflalbt prkflleibjs.=5J_LB mcs alanlrs hrka >8 guriseiftikbs,

    =3 Hkr c mistkry kh IFE__F, sll F ^ccn, Bltwkr`s hkr ^ljudctikb7 _rivcfyFkaaissikblrs ib c Fmcbjibj Zkrde (>?33) 36(>) Gkurbcd kh Fkapcrctivl _kdifyCbcdysis7 ^lslcrfm cbe _rcftifl39 Jrllbdlch, cnkvl b :9, slftikb 6.:.=6 KLFE, ^lfkaalbectikb kb Frkss-nkrelr Fk-kplrctikb ib tml Lbhkrflalbt kh

    Dcws _rktlftibj _rivcfy4mttp7//www.klfe.krj/ekfualbt/8?/?,6656,lb[>859[65>> Gcbucry >?36 ct4mttps7//www.privcfylbhkrflalbt.blt/pundif/cftivitils2.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    31/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ >9

    cdd kh wmifm mcvl ectc privcfy dcws kh kbl hkra kr ktmlr, cbe akst nut bkt cddkh wmifm crl KLFE alanlrs. Umlrl crl hkur ktmlrs alanlrs bkt ibfduele ibtml fkubtry Ucndl, tml Lurkplcb Ectc _rktlftikb Vuplrviskr (c suprc-bctikbcd

    nkey), twk Custrcdicb stctl E_Cs (hrka Xiftkric cbe Sullbsdcbe), cbe cJlracb stctl E_C (Nlrdib).

    Fkapltitikb acy elvldkp nltwllb tmlsl twk jdkncd bltwkr`s kh E_Cs, cbetmly fkude elvldkp eivlrjibj alanlrsmips, nut tml kplrctikb kh J_LB is csylt tkk rlflbt hkr tmlsl acttlrs tk nl fdlcr.

    9 Zkr`ibj _crty is tmlakst ibhdulbticd krjcbisctikb kh E_Cs, nktm nlfcusl it mcs c hkracd rkdl ubelr

    tml Lurkplcb ectc prktlftikb Eirlftivl cbe nlfcusl kh tml qucdity cbeeivlrsity kh its Kpibikbs kb ectc privcfy issuls. Its alanlrsmip is fk-lxtlbsivl witm tmct kh tml L\, nut is slpcrctldy rlhdlftle ib tml Ucndl. It acyibfrlcsibjdy mcvl c rivcd hkr ibhdulbfl ib tml Fkubfid kh Lurkpl ectcprktlftikb Fkbvlbtikb 3?=, Fkbsudtctivl Fkaaittll (tk nl rl-bcaleFkbvlbtikb Fkaaittll), cs cb kutfkal kh tml Fkbvlbtikbs akelrbisctikbprkflss.=?3?) 3(6) Jdkncd _kdify >93.

    == Khhifl kh tml Ibhkractikb cbe Ectc _rktlftikb Fkaaissikblr, Acdtc,4mttp7//iepf.jkv.at/crtifdl.cspx;crt13862.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    32/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 6?

    LE_C mcs quitl strift cffrleitctikb rudls, rlquiribj its alanlrs tk kplrctlubelr c dcw kh c stctl iapdlalbtibj litmlr Fkubfid kh Lurkpl Fkbvlbtikb 3?=kr tml L\ ectc prktlftikb Eirlftivl, cbe mcvibj ibelplbelbfl cbe

    cpprkprictl hubftikbs cbe pkwlrs.=9

    Ib >?36, hkr lxcapdl, @kskvks E_C wcsrlhusle alanlrsmip nlfcusl @kskvk wcs bkt c alanlr stctl kh litmlr tmlLurkplcb \bikb kr tml Fkubfid kh Lurkpl, sk it wcs acel c plracblbtknslrvlr ibstlce.9?Cbekrrcs E_C is cdsk c plracblbt knslrvlr. Cdtmkujm ibtmlkry cdd alanlr stctls kh tml Fkubfid kh Lurkpl wmifm ek mcvl E_Cssmkude nl ldijindl tk nl cffrleitle tk tml LE_C, hkur crl bkt ylt cffrleitle.93Uwk Fkubfid kh Lurkpl alanlr stctls mcvl bkt nllb cffrleitle nlfcusl tmlyek bkt mcvl E_Cs (Cralbic cbe Czlrncigcb). Uur`ly is lxfduele nlfcusl itekls bkt ylt mcvl c ectc prktlftikb dcw. Vcb Acribk mcs c dcw nut mcs bktsijble Fkbvlbtikb 3?=, bkr gkible cby csskfictikb kh E_Cs. Uwldvl sun-bctikbcd E_Cs ib Lurkpl hrka Jlracby, Vpcib cbe Vwitzlrdcbe crl cdsk

    cffrleitle tk LE_C, cs crl hkur suprc-bctikbcd cutmkritils ct L\ dlvld. LE_Ctmlrlhkrl mcs c mijm dlvld kh fkvlrcjl kh Lurkplcb E_Cs.

    Uml blxt dcrjlst E_C bltwkr` ib Lurkpl is tml Flbtrcd cbe Lcstlrb LurkplEctc _rktlftikb Cutmkritils (FLLE_C) wmifm mcs 3= alanlrs, akst rlflbtdyibfdueibj ^ussic nut bkt ylt Jlkrjic. Uml Ncdtif stctls cbe Vdkvlbic crl bktalanlrs. Alanlrsmip kvlrdcps witm tml Crtifdl >9 Zkr`ibj _crty, nut acbyFLLE_C alanlrs crl hrka fkubtrils wmifm crl bkt ylt L\ alanlr stctls. Itmlde its 3?3>. It is cftivl ib autucd suppkrt cftivitilscbe elvldkpibj pkdify pksitikbs sufm cs cpprkvcd kh rlhkras kh Lurkplcbectc prktlftikb ibstrualbts.9>FLLE_C stctls mcvl c fkaakb fkbflrb cs lx-fkaaubist stctls elcdibj witm mistkrifcd survliddcbfl hidls kh plrskbcd ectc,cbe ib skal fcsls witm ubflrtcib elakfrctif ibstitutikbs. Uml ZlstlrbLurkplcb stctls mcvl dlss blle hkr c slpcrctl csskfictikb kh E_Cs, nlfcuslkbdy c hlw kh tmla crl bkt L\ alanlr stctls.

    Umlrl is cdsk cb csskfictikb kh Bkreif Ectc _rktlftikb Cutmkritils (BE_C)(Vwlelb, Bkrwcy, Elbacr` cbe Hibdcbe) wmifm allts lvlry twk ylcrs. It

    =9 Fkbhlrlbfl kh Lurkplcb Ectc _rktlftikb Cutmkritils, ^lpkrt kh tml CffrleitctikbFkaaittll, Disnkb, 38-3: Acy >?364mttp7//www.tiltksukgc.hi/updkces/xpit>kbe=k8[3.peh 2.

    9? Inie.93 _krtujulsl Bctikbcd Ectc _rktlftikb Fkaaissikb, Vpribj Fkbhlrlbfl - Lurkplcb

    cutmkritils cffrleitle cs alanlrs Disnkb >?36. E_Cs bkt distle cs cffrleitle tkLE_C crl Jlkrjics E_C0 Akbcfks Vuplrviskry Fkaaissikb hkr _lrskbcdIbhkractikb0 ^ussics Hlelrcd Vlrvifl hkr Vuplrvisikb kh Fkaaubifctikbs,Ibhkractikb Ulfmbkdkjils cbe Acss Aleic0 cbe \`rcibls Vtctl Vlrvifl kb_lrskbcd Ectc _rktlftikb.

    9> Vll FLLE_C, Blws cbe Lvlbts pcjl4mttp7//www.fllfprivcfy.krj/acib.pmp;s1

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    33/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ 63

    skaltials cfts ib fkbflrt, cs it eie ib >?33, ib slbeibj 5< qulstikbs tkHcflnkk` fkbflrbibj its prcftifls.96

    Uml kplrctikb kh ktmlr sun-jdkncd bltwkr`s kh ectc prktlftikb cutmkritils isdlss wldd `bkwb, nut mcs nllb wldd-ekfualbtle ny ^ccn.95It is bkt cffurctl tkfcdd tmla rljikbcd bltwkr`s, nlfcusl skal crl ncsle kb dcbjucjl, skal kbjlkjrcpmy, cbe skal c aix nltwllb tml twk.

    Uml Nritism, Irism cbe Isdcbes Ectc _rktlftikb Cutmkritils (NIIE_C), cbCbjdkpmkbl jrkupibj witmib Lurkpl, usucddy allts cbbucddy. Cs ^ccnelsfrinls it, PdQlss hkracd fkbblftikbs lxist ib cbktmlr, cbe cppcrlbtdy dkkslr,bltwkr` tmct dib`s tml E_Cs hkr tml \bitle @ibjeka, tml ^lpundif kh Irldcbe,tml Isdl kh Acb (IKA), Glrsly cbe Julrbsly, witm hurtmlr fkbblftikbs tkAcdtc, Fyprus cbe Jinrcdtcr. Ml fkbsielrs tmct tmlsl alltibjs mldp tmlFrkwb Elplbelbfy cutmkritils, wmk ek bkt sit kb Z_>9, tk `llp cnrlcst khfurrlbt issuls eisfussle tmlrl.9??9, CHC_E_ rlfkaalbele cb ibitictivl hkr c

    nibeibj jdkncd ectc prktlftikb ibstrualbt. CHC_E_ cias tk elvldkp ktmlrpkdify pksitikbs cbe hurtmlr cjrllalbts.9:Uml suaait kh tml Mlces kh Vtctlscbe jkvlrbalbts kh tml hrcbfkpmkbl fkubtrils mcs lbfkurcjle cekptikb khfkaprlmlbsivl ectc prktlftikb dcws cbe E_Cs ib >??5 cbe >??8.

    Uml alanlrsmip kh Dc ^le Inlrkcalrifcbc el _rktlffib el Ectks, cdskfcddle tml ^le Inlrkcalrifcbc kr Dctib Calrifcb Bltwkr` (^I_E kr^leI_E),9= fkbsists kh cdd tml Dctib Calrifcb fkubtrils, pdus Vpcib cbe

    96 Bkrwljicb Ectc Ibsplftkrctl, Zmct mcpplbs witm plrskbcd ibhkractikb ibHcflnkk`;, Gudy >?33.

    95 ^ccn, cnkvl b =:0 cbe ^ccn, cnkvl b =3.998.98 Kbl rlcskb is tmct acby kh tml bkb-pcrtifipctibj E_Cs crl hrka Lurkplcb

    fkubtrils wmifm ek bkt mcvl stchh splc`ibj Hrlbfm, wmidl cdd tml ldijindl bkb-Lurkplcb fkubtrils witm ectc privcfy dcws (cbe skal witm Nidds) crl alanlrs.

    9: Hkr lxcapdl, tmlrl mcs nllb wkr` cs ylt ibfkapdltl kb c hrcalwkr` hkribtlrbctikbcd ectc trcbshlrs nltwllb Hrlbfm-splc`ibj fkubtrils, usibj cb cpprkcfmrldctle tk Nibeibj Fkrpkrctl udls (NF^s).

    9= ^leI_E wlnsitl, dist kh alanlrs4mttp7//www.rleipe.krj/dc[rle/Ailanrks/ibelx-ielb-iepmp.pmp2.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    34/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 6>

    _krtujcd. It ekls bkt ibfduel tml ktmlr Vpcbism kr _krtujulsl-splc`ibjfkubtrils kutsiel Dctib Calrifc. It ibfduels ib its alanlrsmip cdd fkubtrilswitmib its fkaaubity tmct wism tk nl c alanlr, irrlsplftivl kh wmltmlr tmly

    mcvl ylt cekptle ectc privcfy dcws kr mcvl E_Cs, sk it ekls bkt mcvlcffrleitctikb rlquirlalbts lquivcdlbt tk tml IE__FF kr C__C. Its cbbucdfkbhlrlbfls pcss rlskdutikbs fkbflrbibj ectc prktlftikb, lbfkurcjibj cbecssistibj ktmlr Dctib Calrifcb fkubtrils tmct ek bkt ylt mcvl ectc prktlftikbcjrllalbts tk lbcft tmla, cbe tk ibfduel ibelplbelbt E_Cs.99

    C__C, c hkrua kh bctikbcd cbe sun-bctikbcd E_Cs krijibcddy kbdy cddkwlecs alanlrs tmksl cutmkritils tmct mcvl nllb cffrleitle tk tml IbtlrbctikbcdEctc _rktlftikb Fkaaissikblrs Fkbhlrlbfl,3?? sk tml Acfck E_C wcs kbdycb knslrvlr ct its alltibjs eul tk its ibfkapdltl dljisdctivl ncsis. C__C mcsbkw rldcxle its stcbecres skalwmct.3?3 It bkw mcs 38 alanlrs hrka

    Custrcdic (hlelrcd cbe hkur stctls/tlrritkrils), Fcbcec (hlelrcd cbe NritismFkduanic), Mkbj @kbj VC^, Vkutm @krlc (twk cutmkritils), Acfcu VC^,Alxifk, Fkdkanic, _lru, Blw Wlcdcbe cbe tml \VC. Blitmlr Gcpcb bkrUciwcb crl alanlrs eul tk (ct dlcst) dcf` kh c E_C. Vibjcpkrl widd prkncndygkib skkb, nut it is qulstikbcndl wmltmlr Acdcysic widd mcvl c E_C tk qucdihy,cbe tml _midippibls E_C mcs bkt nllb cppkibtle ylt. It allts twifl plr ylcrcbe mcs mce c priacry hubftikb kh smcribj lxplrilbfls, nut mcs cdskelvldkple vcducndl stcbecres kb rlpkrtibj cbe fitibj privcfy elfisikbs.C__C is lxpcbeibj its alanlrsmip (pcrtifudcrdy ib Dctib Calrifc) cbehubftikbs cbe widd prkncndy nl akrl sijbihifcbt ib huturl. It mcs cfkbsielrcndl cbe ibfrlcsibj plrskbbld kvlrdcp witm tml C_LF ectc privcfyVun-jrkup, tmkujm tmct is tlfmbifcddy c jrkupibj kh fkubtrils (lfkbkails ib

    C_LF-splc`) wmlrlcs C__C is c jrkupibj kh E_Cs.

    Umlrl is cdsk c hrcalwkr` hkr rljikbcd fkkplrctikb fcddle tml C_LF Frkss-nkrelr _rivcfy Lbhkrflalbt Crrcbjlalbt (F_LC) ib wmifm PcQby _rivcfyLbhkrflalbt Cutmkrity (_L Cutmkrity) ib cb C_LF lfkbkay acy pcrtifipctlib frkss-nkrelr fk-kplrctikb, lbhkrflalbt cbe ibhkractikb smcribj.3?> It mcscs alanlrs ectc prktlftikb cutmkritils hrka kbdy six kh tml 3: C_LFlfkbkails wmifm mcvl ectc privcfy dcws (Custrcdic, BW, \VC, Fcbcec, Mkbj@kbj cbe Alxifk), pdus jkvlrbalbt elpcrtalbts hrka @krlc (nut bkt tmliribelplbelbt E_Cs) cbe Gcpcb. Uml slpcrctl alanlrsmip kh 3< Gcpcblsljkvlrbalbt cjlbfils ibeifctls tml dcf` kh aufm flbtrcd fkkreibctikb ib tmlir

    99 ^ccn, cnkvl b =:, >9:-=.3?? Inie >98-:.3?3 Alanlrs fcb nl cffrleitle tk tml Ibtlrbctikbcd Fkbhlrlbfl kh Ectc _rktlftikb cbe

    _rivcfy Fkaaissikblrs (IFE__F)0 kr c pcrtifipcbt ib tml C_LF Frkss-nkrelr_rivcfy Lbhkrflalbt Crrcbjlalbt (F_LC)0 kr c alanlr kh tml KLFE Jdkncd_rivcfy Lbhkrflalbt Bltwkr` (J_LB)7 Vll C__C wlnsitl4mttp7//www.cppchkrua.krj/cnkut/2.

    3?> C_LF F_LC wlnsitl 4mttp7//www.cplf.krj/Jrkups/Fkaaittll-kb-Urcel-cbe-Ibvlstalbt/Ldlftrkbif-Fkaalrfl-Vtllribj-Jrkup/Frkss-nkrelr-_rivcfy-Lbhkrflalbt-Crrcbjlalbt.cspx2.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    35/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ 66

    dcw. C_LF F_LC tmlrlhkrl mcs alanlrsmip hrka rldctivldy hlw C_LFfkubtrils.

    Cdtmkujm tmrll Fcrinnlcb fkubtrils bkw mcvl ectc prktlftikb cutmkritils,tmly ek bkt mcvl cby rljikbcd krjcbisctikb cs ylt, cbe bkr crl tmly alanlrskh IFE__F kr J_LB. Umlrl is cdsk bk pcb-Chrifcb csskfictikb kh E_Cs,elspitl tmlrl bkw nlibj lijmt E_Cs ib Chrifcb fkubtrils, cdtmkujm kbdy skalkplrctibj ib prcftifl. Cftivl rljikbcd csskfictikbs kh E_Cs slla tk nl cbibeifctkr kh acturity kh ectc prktlftikb rljudctikb ib c rljikb, pcrtdy nlfcuslkh tml autucd suppkrt tmly prkviel hkr lcfm ktmlr.

    8 Uml Huturl Jdkncd Urcglftkry kh Ectc _rivcfy Dcws

    Umis crtifdl cbe tml hkddkwibj Ucndls ekbt fkbstitutl nij ectc, nut ct dlcsttmly crl akrl ectc cnkut jdkncd trlbes ib lbcftalbt kh ectc privcfy dcws, cbetml ibtlrdkf`ibj alanlrsmips kh csskfictikbs kh E_Cs, tmcb wcs prlvikusdycvcidcndl. Bkw tmct wl mcvl tmis akrl cffurctl pifturl, hurtmlr rlslcrfmnlfkals pkssindl. It mcs cdrlcey acel pkssindl cb csslssalbt kh tml ibhdulbflkh Lurkplcb privcfy stcbecres kb dljisdctivl elvldkpalbts kutsiel Lurkpl.3?6Hurtmlr rlslcrfm is rlquirle kb sufm qulstikbs cs tml iapdifctikbs kh tmlibfrlcsibjdy ibtlrdkf`ibj ectc lxpkrt rlstriftikbs ib tmis dljisdctikb03?5 kb tmllhhlftivlblss kh tml lbhkrflalbt rljials ib vcrikus fkubtrils0 kb tml lxtlbt khgueificd ibtlrprltctikb kh tmlsl dcws, cbe kb ktmlr fkapcrctivl csplfts kh ectcprivcfy dcws. Cdd kh tmis rlquirls cb cffurctl cffkubt kh tml ibfielbfl, jrkwtmcbe eistrinutikb kh tml wkrdes ectc privcfy dcws.

    Vkal fkbfdusikbs slla cppcrlbt hrka tml ectc. Uml lxpcbsikb kh ectcprivcfy dcws lankeyibj ct dlcst c aibiaua slt kh KLFE/FkL ectcprktlftikb pribfipdls fkbtibuls tk cffldlrctl chtlr 5? ylcrs. Ny tml 6 kh tml hirst sufm Cft ib Vwlelb wl fcb lxplft tmct tmlrlwidd nl jdkncd scturctikb kh ectc privcfy dcws, ib tml slbsl tmct cnkut :? plrflbt kh cdd ibelplbelbt guriseiftikbs widd mcvl sufm dcws, ibfdueibj cdakst cddkh tml lfkbkaifcddy sijbihifcbt fkubtrils kb tml jdknl (witm tml \VC prkncndytml kbdy sijbihifcbt lxflptikb). Uml acgkrity kh fkubtrils jdkncddy widd mcvlsufm dcws witmib cbktmlr ylcr kr twk, cbe tmlrl widd nl akrl bkb-Lurkplcbfkubtrils tmcb Lurkplcb fkubtrils witm ectc privcfy dcws hrka tmct pkibt

    kbwcre. C dcrjl pkrtikb kh tmlsl fkubtrils widd mcvl dcws ibhdulbfle strkbjdyny Lurkplcb stcbecres siaidcr tk tmksl kh tml furrlbt L\ privcfy Eirlftivl,ibfdueibj its ectc lxpkrt rlstriftikbs. Uml jdkncdisctikb kh Fkubfid kh LurkplFkbvlbtikb 3?= is ibfrlcsibj its rlcfm cbe ibhdulbfl, cbe is di`ldy tk fkapltlwitm C_LFs cs-ylt-ibfmkctl FN_^ prkflss hkr ibhdulbfl kutsiel Lurkpl.Umlsl wieldy eisplrsle dcws cbe lxpcbeibj ibtlrbctikbcd cjrllalbts nuideup c fkbsielrcndl jdkncd dljcd iblrtic wmifm it widd nl eihhifudt tk rlvlrsl kr

    3?6 Jrllbdlch, cnkvl b 5>.3?5 Vll hkr c rlflbt cbcdysis F @ublr, Urcbsnkrelr Ectc Hdkws cbe Ectc _rivcfy Dcw,

    (Kxhkre \bivlrsity _rlss, Acy >?36).

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    36/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 65

    (lvlbtucddy) tk ijbkrl. Csskfictikbs kh ectc prktlftikb cutmkritils crl cdskdi`ldy tk ibfrlcsl ib iapkrtcbfl cs vlbuls hkr fkbtlstibj ibhdulbfl. Umlsl crljlk-pkditifcd hcfts kh fkbsielrcndl sijbihifcbfl. Umlrl acy fkal c tial wmlb

    tml elvldkpalbt kh tlfmbkdkjils cbe nusiblss prcftifls ibiaifcd tk ectcprivcfy widd nl fkbhrkbtle ny tmlsl lanleele cbe lxpcbeibj dljcdelvldkpalbts akrl eirlftdy tmcb is furrlbtdy tml fcsl.

    8.3 Is tmlrl bkw c trcglftkry;

    Ib >??8, Nlbbltt cbe ^ccn, ib wmct is stidd tml akst systlactif jdkncd rlvilw khectc privcfy rljudctikb, prlslbtle tmlir acib rlslcrfm qulstikb cs wmltmlrtmlrl wcs c rcfl tk tml nkttka, c rcfl tk tml tkp, kr skaltmibj ldsl, ib tmljdkncd elvldkpalbt kh ectc privcfy prktlftikb.3????s tmct tml fkubtlrvcidibjwlc`blss kh tml C_LF cpprkcfm wcs lbkujm tk ac`l tml huturl quitlubprleiftcndl.

    Uml pksitikb ib >?36 is vlry eihhlrlbt. Umlir tmlsis acy mcvl nllb ib pcrt

    ncsle kb cb ubelr-lstiactl kh tml buanlr kh ectc privcfy dcws kutsielLurkpl nlhkrl >??8 (3=, bkt 3>), nut lvlb ih tmis is bkt sk, lvlbts mcvlkvlrtc`lb it. Bkw tmlrl crl cdakst cs acby dcws kutsiel Lurkpl (55) cs tmlrl

    3?:8.3?: Inie >=6.3?= J Jrllbdlch, cnkvl b >.3?9 Nlbbltt cbe ^ccn, cnkvl b 33, >9

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    37/48

    Vmlmlrlzcel cbe tml 3?3 Ectc _rivcfy Dcws

    LC_ 6??8.

    Hurtmlrakrl, tml buanlr kh Lurkplcb-di`l ectc privcfy dcws kutsiel cbeibsiel Lurkpl (kbdy mcdh witmib tml L\) is bkt kbdy lvielbfl kh tmlakalbtua kh tmlsl elvldkpalbts, nut cdsk tmct tml smllr iblrtic prkviele nyc muberle kr akrl fkubtrils witm ectc privcfy dcws is c jdkncd hcft kh dihl

    wmifm it widd nl eihhifudt hkr cbykbl tk rlvlrsl, ibfdueibj tml \VC. It ispkssindl tmct C_LFs Frkss-Nkrelr _rivcfy ^udls (FN_^), cdtmkujm stidd bktkplrctivl, aijmt nlfkal cb ibhdulbfl, nut nktm c rlvisle L\ Eirlftivl (cs c^ljudctikb) cbe c rlvitcdisle Fkubfid kh Lurkpl Fkbvlbtikb (tmrkujmjdkncdisctikb wmifm mcs stcrtle, cbe akelrbisctikb wmifm is wlddubelrwcy) crl di`ldy tk prkvl tk nl cttrcftivl hkrfls tmct C_LF FN_^ widdhibe eihhifudt tk actfm. Vlvlb ylcrs chtlr Nlbbltt cbe ^ccn wrktl, tmlrl is bkwaufm fdlcrlr lvielbfl kh upwcre jdkncd trcglftkry tmcb tmly hkube,prkviele wl `llp fdlcr tmct wl crl kbdy tcd`ibj cnkut tml lxistlbfl cbehkracd strlbjtm kh ectc privcfy dcws, bkt tml ktmlr hcftkrs.

    8.> Calrifcb lxflptikbcdisa cbe ibfrlcsibj iskdctikb

    Uml \VC mcs acby privcfy dcws ib nktm its privctl cbe pundif slftkrs cbeskal lhhlftivl lbhkrflalbt, nut bk fkaprlmlbsivl privcfy dcw ib tml privctlslftkr, bkr it sllas aufm prksplft kh kbl elspitl tml KncacCeaibistrctikbs Fkbsualr _rivcfy Nidd kh ^ijmts ibitictivl.333Lvlb tmkujmtml \V mcs acby dcws, tmly rcrldy allt tml rlquirlalbts slt kut ib tmis crtifdlhkr c ectc privcfy dcw, pcrtifudcrdy tml hibcdity rlquirlalbts diaitibj uslcbe eisfdksurl, cbe khtlb bkt tml rlquirlalbts hkr diaits kb ectc fkddlftikb.Umis is bkt surprisibj, nlfcusl \V fkrpkrctikbs crl tml wkrdes dlceibjfkaalrficd lxpdkitlrs kh plrskbcd ectc. Umcts wmy tml mistkry cbe jlkjrcpmykh ectc prktlftikb dcws slt kut ib tmis crtifdl is iapkrtcbt. \V fkrpkrctikbs cbe

    tml \V jkvlrbalbt mcvl nllb cndl tk usl tmlir lfkbkaif cbe pkditifcd pkwlrtk usl plrskbcd ectc cs tmly wism ubtid bkw witm vlry hlw cevlrslfkbslqulbfls. Elvldkpalbts sufm cs fdkue fkaputibj, skficd bltwkr`ibjcbe nij ectc cbcdytifs slla fkbeufivl tk tmct fkbtibuibj. Nut tmlibtlrbctikbcd dljcd lbvirkbalbt hkr tmlir fkbtibuibj tk ek sk is sdkwdynlfkaibj akrl mkstidl cbe fkapdlx tk bcvijctl, cs akrl cbe akrl fkubtrils

    33? Jrllbdlch, cnkvl b 5>.333 Jrllbdlch cbe Zctlrs, cnkvl b 6?.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    38/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 68

    cekpt kr strlbjtmlb ectc privcfy dcws. Zmifm cpprkcfm widd wib rlacibs tknl sllb, nut tml jcal is bkt kvlr ylt.

    8.6 Cbe wmct cnkut tmct 3?3stdcw;

    Elcr rlcelr, I mlcr yku scy tmct 99 is bkt 3??, dlt cdkbl 3?3, sk yku mcvl nllblbtifle tk rlce tk tml lbe kh c dkbj cbe erlcry crtifdl kb c hcdsl prkaisl,cnkut wmifm yku mcvl c aibe tk ibhkra tml Hlelrcd Urcel Fkaaissikb. Nutwl `bkw tmlrl crl acby ectc privcfy Nidds dibjlribj crkube tml wkrdesdljisdcturls wcitibj tk nl lbcftle, cbe tmlrl acy nl ktmlrs kh wmifm wl crlubcwcrl. Umlrl crl stidd skal pundif slftkr ^UI/HKI dcws ib dcbjucjls ktmlrtmcb Lbjdism wmlrl akrl eltcidle ibsplftikb fkude rlvlcd c mieelb ectcprivcfy dcw. _lrmcps tmlrl is lvlb cbktmlr fkubtry kr ibelplbelbtguriseiftikb tmct mcs quiltdy pcssle c fkaprlmlbsivl dcw tmct bk-kbl mcs

    bktifle. Vmlmlrlzcel blles tk nrusm up mlr dibjuistif s`idds (khtlb gust crlhrlsmlr fkursl), cbe tk cs` tml jlbil ib tml Ibtlrblt tk slcrfm hkr ub`bkwbdcws hrka lvlb hurtmlr-cwcy dcbes. Kr plrmcps sml gust blles tk rlcetkakrrkws blws. Nut sml prkaisls tk fkal ncf` vlry skkb tk hibism tml stkry

    _kstsfript

    3 Vlptlanlr >?36

    C hlw wll`s pcssle, cbe tml jlbil ib tml Ibtlrblt

    33>

    eie eldivlr tml cwcitleblws kh tml 3??tm dcw, cbe wkudebt yku `bkw it wcs hrka c vlrysurprisibj pdcfl cdakst ubelr Vmlmlrlzcels bksl, tml eisacd eiftctkrsmip kh@czc`mstcb.336Mkwlvlr, tml dcw eie allt cdd kh tml hkracd rlquirlalbts kh cectc privcfy dcw, cbe sk mce tk nl fkubtle,335wmifm jkls tk iddustrctl tmct cdcw kb tml nkk`s is bkt tk nl fkbhusle witm lhhlftivl privcfy prktlftikb.

    Uml 3?3st dcw crrivle skkb tmlrlchtlr, hrka c akrl lxplftle cbe sijbihifcbteirlftikb, wmlb nktm mkusls kh Vkutm Chrifcs _crdicalbt pcssle its dkbj-cbtifipctle _rktlftikb kh _lrskbcd Ibhkractikb Nidd, wmifm bkw cwcits sijbcturlny _rlsielbt Wuac.33 Ib tmis fcsl, cbe tml 3?3st, tml jlbil ib qulstikb wcs Ecvie Ncbiscr kh Crtifdl 39, tkwmka tmcb`s.

    336 Dcw kb plrskbcd ectc cbe tmlir prktlftikb, >3 Acy >?36, ib lhhlft hrka >8Bkvlanlr >?36.

    335 J Jrllbdlch, @czc`mstcb lbcfts Flbtrcd Csics slfkbe ectc privcfy dcw (Cujust>?36) (issul 3>5) _rivcfy Dcws & Nusiblss Ibtlrbctikbcd ^lpkrt>6->5.

    33> Cujust >?36 4mttp7//www.pcrdicalbt.jkv.zc/divl/fkbtlbt-akni.pmp;F[Itla[IE16939&Itla[IE16

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    39/48

    LC_ 6:

    Jdkncd Ucndl kh Fkubtrils witm Ectc _rivcfy Dcws(cs `bkwb ct 3 Gubl >?36)

    Guriseiftikb @ly Cft Hrka3 Dctlst> ^ljikb6 Vlf5 L\??6 >??6 Lurkpl (K) Nktm C^F0^_

    Ectc _rktlftikbCjlbfy

    IFE__F0LE_C (K)0^leI_E0CHC_E_

    CbjkdcDli ec _rktlfk el

    Eceks _lsskcis>?33 >?33 Chrifc Nktm VCEF

    Bkbl (Cjbfic ec_rktlfk el

    Eceks bkt yltlstcndismle)

    Crjlbtibc_lrskbcd Ectc_rktlftikb Cft

    >??? >??? Dctib Ca Nktm C

    BctikbcdEirlftikb hkr

    _lrskbcd Ectc_rktlftikb

    IFE__F0^leI_E

    CralbicDcw kb _lrskbcd

    Ectc>??> Lurkpl (K) Nktm PIQ

    ^F0^_

    Bkbl

    Hrka fkduab7 Ylcr 1 ectl krijibcd ectc privcfy dcw lbcftle, hkr litmlr privctl kr pundif slftkr0 aijmt bkt nl ectl khfurrlbt dcw.

    Dctlst fkduab7 Ylcr 1 ectl kh dcst sijbihifcbt calbealbt `bkwb0 BYIH 1 bkt ylt ib hkrfl0 BIH\ 1 bkt ib hkrfl ubtidylcr stctle, wmlrl nribjibj ibtk hkrfl is eldcyle kvlr kbl ylcr.

    ^ljikb fkduab7 Lurkpl (L\) 1 furrlbt Lurkplcb \bikb alanlr stctls0 Lurkpl (K) 1 ktmlr Lurkplcb stctls(ibfdueibj LLC)0 ktmlrs crl sldh-lxpdcbctkry.

    Vlftkr fkduab7 _ri 1 fkvlrs privctl slftkr kbdy0 _un 1 fkvlrs pundif slftkr kbdy0 ndcb` 1 fkvlrs nktm slftkrs.

    Lurkplcb \bikb fkduab7A 1 fkubtry is cb L\ alanlr stctl0 CS 1 fkubtrys prktlftikb kh plrskbcd ectc mcs nllbmlde celquctl ny tml L\0 PCQ 1 Hcvkurcndl Crtifdl >9 Zkr`ibj _crty kpibikb kb celqucfy, nut bk hibcd elfisikbcbbkubfle0 LLC 1 fkubtry is c alanlr kh tml Lurkplcb Lfkbkaif Crlc0 PIQ 1 Celqucfy hibeibj is ib prcftiflirrldlvcbt eul tk fkubtry cffleibj tk nktm Fkubfid kh Lurkpl Fkbvlbtikb 3?= cbe Ceeitikbcd _rktkfkd.

    Fkubfid kh Lurkpl fkduab7 (Alanlr alcbs Alanlr Vtctl kh tml Fkubfid kh Lurkpl) ^F 1 Alanlr cbe mcs rctihiletml Fkbvlbtikb0 ^F* 1 \bitle @ibjeka mcs rctihile Fkbvlbtikb kb nlmcdh kh sun-guriseiftikb0 VF 1 Alanlr cbe mcssijble nut bkt rctihile Fkbvlbtikb0 ^_ 1 mcs cdsk rctihile tml kptikbcd prktkfkd0 V_ 1 Alanlr cbe mcs sijble nut bktrctihile Ceeitikbcd _rktkfkd0 BV1 Alanlr nut mcs bkt sijble Fkbvlbtikb0 PICQ 1 bkt c Alanlr nut mcs nllb ibvitletk cfflel tk tml Fkbvlbtikb0 CF1 bkt c Alanlr nut mcs cfflele tk tml Fkbvlbtikb.

    Ktmlr ibtlrbctikbcd fkaaitalbts fkduab7 C_LF 1 lfkbkay is c alanlr kh C_LF (Csic _cfihif LfkbkaifFkkplrctikb)0 KLFE 1 fkubtry is c alanlr kh KLFE0 CVLCB 1 fkubty is c alanlr kh Csskfictikb kh Vkutm LcstCsicb Bctikbs0 LFKZCV 1 fkubtry is c alanlr kh Lfkbkaif Fkaaubity kh Zlst Chrifcb Vtctls0 LCF 1 fkubty is calanlr kh tml Lcst Chrifcb Fkaaubity0 VCEF 1 fkubtry is c alanlr kh tml Vkutmlrb Chrifcb ElvldkpalbtFkaaubity0 FC^IFKA 1 fkubtry is c alanlr kh tml Fcrinnlcb Fkaaubity (cee (Csskf) hkr Csskfictl alanlrs.

    E_C fkduab7 Bkbl 1 bk splficdisle ectc prktlftikb cutmkrity (pdus bcal kh cutmkrity ih lbcftle nut bkt yltcppkibtle kbl ylcr chtlr lbcftalbt).

    E_CC fkduab7 (ibfdusikb 1 E_C is c alanlr kh tml bcale csskfictikb kh ectc prktlftikb cutmkritils0 lxflpt K 1Knslrvlr stctus kbdy)7 IFE__F 1 Ibtlrbctikbcd Fkbhlrlbfl kh Ectc _rktlftikb cbe _rivcfy Fkaaissikblrs0 C>9Z_ 1L\ Crtifdl >9 Zkr`ibj _crty0 J_LB 1 Jdkncd _rivcfy Lbhkrflalbt Bltwkr`0 CHC_E_ 1 Csskfictikb kh HrcbfkpmkblEctc _rktlftikb Cutmkritils0 C__C 1 Csic-_cfihif _rivcfy Cutmkritils0 ^leI_E 1 Dctib Calrifcb Bltwkr`0 FLLE_C1 Flbtrcd cbe Lcstlrb Lurkpl Ectc _rktlftikb Cutmkritils0 BE_C 1 Bkreif Ectc _rktlftikb Cutmkritils0 LE_C 1

    Lurkplcb Ectc _rktlftikb Cutmkritils0 NIIE_C 1 Nritism, Irism cbe Isdcbes Ectc _rktlftikb Cutmkritils0 C_LF F_LC1 C_LF Frkss-nkrelr _rivcfy Lbhkrflalbt Crrcbjlalbt.

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    40/48

    Gkurbcd kh Dcw, Ibhkractikb cbe Vfilbfl Xkd >6(3) >?35

    LC_ 6=

    Custrcdic _rivcfy Cft 39== 39== >??3 Custrcdcsic NktmC_LF0KLFE0

    IbhkractikbFkaaissikblr

    IFE__F0C__C0J_LB0C_LF

    F_LC

    Custric Ectlbsfmutzjlsltz 39:= >??9Lurkpl

    (L\)Nktm A

    ^F0^_

    KLFEEctc _rktlftikbFkaaissikblr

    IFE__F0LE_C0C>9Z_

    CzlrncigcbDcw kb plrskbcd

    ectc >?3? (rlpdcfls399= Cft)

    399= >?3? Lurkpl (K) Nktm ^F

    Bkbl (Aibistry khFkaaubifctikbscbe Ibhkractikb

    Ulfmbkdkjilsceaibistlrs

    ^ljistlr)

    NcmcacsEctc _rktlftikb

    (_rivcfy khIbhkractikb) Cft

    >??6 >??6 Fcrinnlcb Nktm FC^IFKAEctc _rktlftikbFkaaissikblr

    Nldjiua

    Dcw kb _rivcfy

    _rktlftikb ibrldctikb tk tml_rkflssibj kh_lrskbcd Ectc

    399> >?33Lurkpl

    (L\)Nktm A

    ^F0V_

    KLFE0_rivcfy

    Fkaaissikb

    IFE__F0

    LE_C0C>9Z_0J_LB0

    CHC_E_

    Nlbib

    Dki _krtcbt_rktlftikb els

    ekbbls Fcrcftrl_lrskbbld

    >??9 >??9 Chrifc Nktm LFKZCV

    Fkaaissikbbctikbcdl el

    dibhkractiqul ltels dinlrts

    CHC_E_

    Nksbic &Mlrzljkvibc

    Dcw kb tmlprktlftikb khplrskbcd ectc

    >??3 >??3 Lurkpl (K) Nktm PIQ^F0^_

    _lrskbcd Ectc_rktlftikb

    Cjlbfy

    IFE__F0LE_C0

    FLLE_C

    Nudjcric Dcw hkr _rktlftikbkh _lrskbcd Ectc >??> >??: Lurkpl(L\) Nktm A ^F0^_

    Fkaaissikb hkr

    _lrskbcd Ectc_rktlftikb

    IFE__F0LE_C0

    C>9Z_0FLLE_C0

    J_LB

    Nur`ibc Hcsk

    Dki _krtcbt_rktlftikb els

    Ekbbls Fcrcftrl_lrskbbld

    >??5 >??5 Chrifc Nktm LFKZCVFkaaissikb hkrIbhkractifs cbe

    Dinlrtils

    IFE__F0CHC_E_

    Fcbcec

    _lrskbcdIbhkractikb

    _rktlftikb cbeLdlftrkbif

    Ekfualbts Cft

    39=6(prikrCft)

    >??> Bkrtm Ca Nktm CSC_LF0KLFE

    _rivcfyFkaaissikblr

    IFE__F0C__C0J_LB0C_LFF_LC0

    CHC_E_

    Fcpl Xlrel

    ^ljial GureifkJlrcd el _rktlfkel Eceks _lsskcis

    c _lsskcsVibjudcrls

    >??3 >??3 Chrifc Nktm LFKZCV

    Bkbl(_crdicalbtcryFkaaissikb hkr

    tml Akbitkribj kh_lrskbcd Ectc bkt

    ylt cppkibtle)

    Fmidl _rivcfy Dcw 3999 3999 Dctib Ca NktmC_LF0KLFE

    Bkbl

    FkdkanicEctc _rktlftikb

    Dcw>??= >?3> Dctib Ca Nktm

    Vuplribtlbelbflkh Ibeustry cbe

    Fkaalrfl

    IFE__F0^leI_E0C__C

    Fkstc ifc

    _rktlffib el dc_lrskbc hrlbtl cd

    trctcailbtk el sus

    ectks plrskbcdls

    >?33 >?33 Dctib Ca Nktm

    Cjlbfy hkr tml_rktlftikb kh

    _lrskbcd Ectc kh

    Ibmcnitcbts

    IFE__F0^leI_E

  • 7/22/2019 Sheherezade and the 101 Data Privacy Laws: Origins, Significance and Global Trajectories, Graham Greenleaf

    41/48

    Vmlmlrlzcel c