A paper partly funded by Data Pitch has been accepted for publication and is available to view on the Social Sciences Research Network (SSRN) website, one of the top open-access repositories in the world for research in the social sciences.
Bridging Policy, Regulation and Practice? A techno-legal Analysis of Three Types of Data in the GDPR has been written by Runshan Hu, Sophie Stalla-Bourdillon, Vladimiro Sassone and Mu Yang from the University of Southampton and Valeria Schiavo from Università LUISS Guido Carli.
In recent years, there has been an ongoing debate about personal data protection leading to the adoption of new laws, in particular in the European Union (EU). This has intensified over recent months as the EU General Data Protection Regulation (GDPR), the most important change in data privacy regulation in 20 years, has passed into legislation and is due to come into force in May 2018, generating repeated discussion about its impact on businesses, especially in the light of the increased sanctions for companies not adhering to the guidelines. These include administrative fines of up to 4% of total worldwide annual turnover of the preceding financial year, for non-compliant data controllers and processors.
This timely and relevant paper aims to understand the implications of the new legal definitions to be found in the GDPR and determine how they can be read in harmony with the opinion on anonymisation techniques of the earlier Article 29 Data Protection Working Party which provides the European Commission with independent advice on data protection matters.
The full paper can be downloaded here and will be valuable in informing the work of researchers, practitioners and ultimately policy-makers.