Dr Gianclaudio Malgieri is an Associate Professor of Law & Technology at Leiden University, where he conducts research on and teaches data protection law, AI regulation, and consumer protection at the eLaw Center for Law and Digital Technologies. He serves as the Co-Director of the Brussels Privacy Hub and as an Associate Editor of Computer Law and Security Review. He is Ethics Expert of the European Commission, an Advisory Board member of EPIC.org and he co-leads "VULNERA", the International Observatory of Vulnerable People in Data Protection.Gianclaudio has authored more than 60 publications, including articles in leading international academic journals. He has been cited by top international newspapers and international institutions, even receiving the FPF Privacy for Policymaker Paper Award.Before joining Leiden University, he was an Associate Professor at the EDHEC Business School, Augmented Law Institute, where he is still affiliated.

I think it is a useful reference for lawyers whose work involves sensitive personal data and 'vulnerable' data subjects.

• 1: Introduction: The reasons for research on data subjects 2: The notion of data subject: an average individual? 3: Who is the vulnerable individual? 4: The vulnerable data subject in the GDPR 5: Data protection principles and vulnerable data subjects 6: Data protection rights and duties and vulnerable data subjects 7: Assessing (and mitigating) layers of data subjects' vulnerability: Using the DPIA as a Model 8: The limitations and the alternatives of a vulnerability-based interpretation of the GDPR 9: Conclusions: The layers of data subject's vulnerability and the way ahead

Dr Gianclaudio Malgieri is an Associate Professor of Law & Technology at Leiden University, where he conducts research on and teaches data protection law, AI regulation, and consumer protection at the eLaw Center for Law and Digital Technologies. He serves as the Co-Director of the Brussels Privacy Hub and as an Associate Editor of Computer Law and Security Review. He is Ethics Expert of the European Commission, an Advisory Board member of EPIC.org and he co-leads "VULNERA", the International Observatory of Vulnerable People in Data Protection.Gianclaudio has authored more than 60 publications, including articles in leading international academic journals. He has been cited by top international newspapers and international institutions, even receiving the FPF Privacy for Policymaker Paper Award.Before joining Leiden University, he was an Associate Professor at the EDHEC Business School, Augmented Law Institute, where he is still affiliated.

I think it is a useful reference for lawyers whose work involves sensitive personal data and 'vulnerable' data subjects.

• 1: Introduction: The reasons for research on data subjects 2: The notion of data subject: an average individual? 3: Who is the vulnerable individual? 4: The vulnerable data subject in the GDPR 5: Data protection principles and vulnerable data subjects 6: Data protection rights and duties and vulnerable data subjects 7: Assessing (and mitigating) layers of data subjects' vulnerability: Using the DPIA as a Model 8: The limitations and the alternatives of a vulnerability-based interpretation of the GDPR 9: Conclusions: The layers of data subject's vulnerability and the way ahead