Research Handbook on EU Data Protection Law

Edited by Eleni Kosta, Professor of Technology Law and Human Rights and Ronald Leenes, Professor in Regulation by Technology, Tilburg Institute for Law, Technology, and Society (TILT), Tilburg University, the Netherlandswith Assistant Editor Irene Kamara, Assistant Professor of Cybersecurity Governance, Tilburg Institute for Law, Technology, and Society (TILT), Tilburg University, the Netherlands

‘This volume contains a number of impressive individual contributions examining highly topical areas of data protection law. They illuminate current cutting-edge issues at a high scholarly level, making the book a useful addition to any data protection library.’

• ContentsPreface xviiIntroduction to Research Handbook on EU Data Protection Law 1Ronald Leenes, Eleni Kosta and Irene Kamara1 Two decades of Article 8 CFR: A critical exploration of thefundamental right to personal data protection in EU law 11Plixavra Vogiatzoglou and Peggy Valcke2 Data protection as performance-based regulation 50Jakub Míšek3 A divided European data protection framework: a critical reflection onthe choices of the European legislator post-Lisbon 68Eleni Kosta4 A critical reflection on the material scope of the application of theLaw Enforcement Directive and its boundaries with the General DataProtection Regulation 91Magdalena Brewczyńska5 Government-to-Business (G2B) research data sharing and the GDPR:reconciling the ‘public’ with the ‘private’? 115Stergios Aidinlis6 Conceptualising the interrelation between data protection regulation andcompetition law 143Alessia Sophia D’Amico7 The intersection of data protection rights and trade secret privileges in‘algorithmic transparency’ 163Katarina Foss-Solbrekk and Ann Kristin Glenster8 ‘Paying’ with personal data in digital business to consumer contracts:Bringing successfully together two worlds apart? 184Thalia Prastitou Merdi9 Data-driven business models – privacy and marketing 206Jan Trzaskowski10 ‘Dark patterns’: The case for regulatory pluralism between theEuropean Union's consumer and data protection regimes 240M.R. Leiser11 Data protection and judicial automation 270Marco Almada and Maria Dymitruk12 Reaching beyond its territory – an analysis of the extraterritorial scopeof European data protection law 290Simon Henseler and Aurelia Tamò-Larrieux13 Essential equivalence as a benchmark for international data transfersafter Schrems II 313Laura Drechsler and Irene Kamara14 The radical reframing of the purpose limitation principle – Why theDutch delegation uprooted data protection 352Tijmen H.A. Wisman and Rein J.L. Tijm15 Context as key: The protection of personal integrity by means of thepurpose limitation principle 380Heidi Beate Bentzen16 Scoping risk assessment of ADM systems using AI 404Michelle Seng Ah Lee, Jennifer Cobbe, Heleen Janssen and Jatinder Singh17 Understanding the legal bases for automated decision-making under the GDPR 434Maja Nišević, Bart Custers, Eduard Fosch-Villaronga and Alan M. Sears18 The role of consent in an algorithmic society – Its evolution, scope,failings, and re-conceptualization 454Bart H. M. Custers, Eduard Fosch-Villaronga, Simone van der Hof, BartSchermer, Alan M. Sears and Aurelia Tamò-Larrieux19 Explicit consent and alternative data protection processing grounds forhealth research 473Jiahong Chen, Edward S. Dove and Himani Bhakuni20 Data protection, control and participation beyond consent – ‘seeking theviews’ of data subjects in data protection impact assessments 502Athena Christofi, Jonas Breuer, Ellen Wauters, Peggy Valcke and Jo Pierson21 Meaningful transparency through data rights: A multidimensional analysis 529Laurens Naudts, Pierre Dewitte and Jef Ausloos22 Between incrementalism and revolution: How the GDPR right to dataportability is revamped by the EU and the UK post Brexit 570Wenlong Li23 Data protection enforcement in the era of the Directive onWhistleblowers: towards a collective approach? 598Amélie LachapelleIndex