Paolo Balboni – författare

In outlining the debates relating to current data protection structures, Paolo Balboni and Kate Elizabeth Francis argue that legislation alone cannot sufficiently protect individuals’ fundamental rights and freedoms, and instead consider the pressing need for a more ethical approach to data protection. They present the Maastricht University Data Protection as a Corporate Social Responsibility Framework (UM-DPCSR Framework), outlining not only its features, but also how it can fill the gap left by the inadequacies of a merely legal approach to data protection. Balboni and Francis persuasively call on organisations wishing to contribute positively to society through data processing to adopt this framework and to commit to doing good with data or, at the very least, to avoid harming individuals by processing their data.

Data Protection as a Corporate Social Responsibility will be a beneficial read for scholars and students with particular interest in corporate law and governance, human rights, internet and technology law, and privacy. It will also appeal to legal professionals, cybersecurity professionals, and sustainability specialists alike.

Derived from the renowned multi-volume International Encyclopaedia of Laws, this practical guide to privacy and data protection law in Italy covers every aspect of the subject, including the protection of private life as a fundamental – constitutional – right, the application of international and/or regional conventions protecting the right to privacy, privacy rights in the context of electronic communications or at the workplace, and the protection of individuals regarding the processing of personal data relating to them.

Following a general introduction about the country, the monograph assembles its information and guidance in two parts: (1) protection of privacy, including national case law regarding the protection of this fundamental right, specific legislation on the confidentiality of interpersonal communications, and sector-specific rules regarding privacy protection, such as privacy rights of employees, patients, consumers or celebrities; (2) personal data protection, including not only general rules on data quality, legitimate processing, data retention, data subject rights, security and accountability, but also specific provisions regarding the processing of health data or other sensitive personal information, further processing for research purposes, exemptions for law enforcement or national security purposes, and rules regarding liabilities, sanctions and redress.