Procedural challenges of cross-border cooperation and consistency in personal data protection in the EU

Rudolf, Grega (author), Kovač, Polonca (author)

Data protection is an increasingly important topic in the European administrative field at national and cross-border levels. Such a trend reflects different phenomena in contemporary society, which further leads to a more focused concern for a harmonised elaboration by the Member States despite their autonomy, in principle, regarding EU law implementation. However, as revealed by the Slovenian case in this article, the European Data Protection Board and national supervising authorities, mostly information commissioners, express the need to regulate some issues more decidedly. Interestingly, yet not surprisingly, their focus is on procedural aspects, as according to administrative science and several European Commission documents, procedure strongly influences the results. As a result, the article elaborates on the relevant procedural issues to be addressed to ensure a harmonised enforcement of the General Data Protection Regulation (GDPR) in force since 2018. Various research methods are employed, combining qualitative, normative, and comparative analyses and guantitative approaches, emphasising statistical data obtained from annual reports for 2020, 2021, and 2022. The results show a lack of procedural provisions in several aspects, including the definition of the parties to the procedure and their defence rights, particularly access to the file, to be heard, and complain, as well as one-stop-shop access to legal protection, deadlines, and investigation powers. Such gaps are expected to be covered by procedural institutions enshrined in National Administrative Procedure Acts (APA). However, as suggested by the Slovenian experience, such a solution is minimal due to differing national regulations and relatively low awareness of APA relevance in data protection even among supervising authorities. Hence, the authors argue that there is a need to develop and adopt standard EU rules to regulate such issues. Points for Practitioners: The article refers to data protection within theoretical, normative, practical, comparative, and national dimensions. In addition to analysing statistical data regarding procedural issues of cross-collaborative application of GDPR in the Member States - primarily Slovenia - the article provides practical implications of legislative, organisational, and IT adaptations required for harmonising EU-wide enforcement of GDPR. The insights provided herein can support the development of similar solutions in other EU countries. Therefore, the research findings are relevant for practitioners from various European administrations who are in charge of implementing GDPR and, specifically, supervising its implementation, as well as for policymakers and legislators in their respective areas of data protection and administrative procedural law. The findings will also benefit the European Commission when drafling new legislalion to enhance cooperation and consistency between Member States in enforcing personal data rights set by GDPR.

• Language: English
• Keywords: administrative procedural law, cross-border cooperation and enforcement, EU law and national autonomy, GDPR, personal data protection
• Work type: Article
• Typology: 1.01 - Original Scientific Article
• Organization: FU - Faculty of Administration
• Publication status: Published
• Publication version: Version of Record
• Year: 2023
• Number of pages: Str. 143-170
• Numbering: Vol. 16, no. 2
• PID: 20.500.12556/RUL-153412
• UDC: 342(4-6EU):004.6-027.552
• ISSN on article: 1338-4309
• DOI: 10.2478/nispa-2023-0017
• COBISS.SI-ID: 179459331
• Publication date in RUL: 04.01.2024

Record is a part of a journal

• Title: NISPAcee journal of public administration and policy
• Shortened title: NISPAcee j. publi. adm. policy
• Publisher: Sciendo, NISPAcee, GIPA
• ISSN: 1338-4309
• COBISS.SI-ID: 520037913

Licences

• License: CC BY-NC-ND 4.0, Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International
• Link: http://creativecommons.org/licenses/by-nc-nd/4.0/
• Description: The most restrictive Creative Commons license. This only allows people to download and share the work for no commercial gain and for no other purposes.

Secondary language

• Language: Slovenian
• Keywords: upravno procesno pravo, čezmejno sodelovanje in izvrševanje, pravo Evropske unije in nacionalna avtomonija, GDPR, varstvo osebnih podatkov

Projects

• Funder: ARRS - Slovenian Research Agency
• Funding programme: Javna agencija za znanstvenoraziskovalno in inovacijsko dejavnost Republike Slovenije
• Project number: P5-0093-2019
• Name: Razvoj sistema učinkovite in uspešne javne uprave