Treść książki
Przejdź do opcji czytnikaPrzejdź do nawigacjiPrzejdź do informacjiPrzejdź do stopki
JoannaTaczkowska-Olszewska
border3dataprocessingoperationstoasinglebodyandensuringaharmonised
interpretationfortheprovisionsoftheRegulation,whichresultsfromthefact
thatEUauthoritiesseemtohavenoticedtheneedtobolsterconfidencein
digitalservicesandimprovetheirsecurityaspartofimplementingthedigital
singlemarketstrategy.TheGDPRhasreplacedformerDirective95/46/EC
ontheprotectionofindividualswithregardtotheprocessingofpersonaldata
andonthefreemovementofsuchdata,whichisrepealedsubjecttoarticle94
clauses1and2oftheRegulationwithefectfrom25May2018.Teabrogation
andreplacementofDirective95/46/ECbytheGDPRmayimplytheEUlegislators’
determination,astheyhavenotonlyconfinedthemselvestotherearrangement
andrefreshingofpersonaldataprotectionpoliciesthroughoutEUMemberStates,
buthavealsodecidedtoassumetheroleofthecreatorandauditorofthisactivity
inMemberStates,whichinvolvesrulemakingandapplicationoflawsregarding
personaldataprotection.
ChangingthenatureoftheregulatoryenactmentbyreplacingtheDirectivewith
theRegulationmeansthatthedomainofpersonaldataprocessingisplacedunder
thelegislativecompetenceofEUauthorities.Terefore,whereastheEUlegislators’
interferencewiththisactivityofthestatewaslimitedduetothetypeoftheDirective
asanon-legislativeenactment,thereplacementthereofbytheRegulationhas
causedthattheprovisionsofthelattercanbeneitherimplementedinnationallaw
noreveninterpretedbynationallegislators,andonlyinthesituationsdescribedin
theRegulation(recital8oftheGDPR)4itmaybepossiblefornationallegislatorsto
clarifymorespecificallyornarrowdownsomeindividualprovisionsoftheGDPR.
Pursuanttoarticle288oftheTreatyontheFunctioningoftheEuropeanUnion5,
theDirectivewasonlybindingonthoseMemberStatesforwhichitwasintended
andonlytoalimitedextent,i.e.withregardtotheresulttobeachieved,leaving
3
Cross-borderdataprocessingisdefinedinarticle4item23oftheGDPR(a)processingof
personaldatawhichtakesplaceinthecontextoftheactivitiesofestablishmentsinmorethan
oneMemberStateofacontrollerorprocessorintheUnionwherethecontrollerorprocessor
isestablishedinmorethanoneMemberState;or(b)processingofpersonaldatawhichtakes
placeinthecontextoftheactivitiesofasingleestablishmentofacontrollerorprocessorinthe
Unionbutwhichsubstantiallyafectsorislikelytosubstantiallyafectdatasubjectsinmore
thanoneMemberState.
4
EBielak-Jomaa,Ogólnerozporządzenieoochroniedanych.Rewolucjawochroniedanych?,
MOP2017,No.20,page3.
5
TreatyontheFunctioningoftheEuropeanUnionof26October2012(OJC2012326,
page47).
8
