Procedural challenges of cross-border cooperation and consistency in personal data protection in the EU

Rudolf, Grega (author), Kovač, Polonca (author)

Data protection is an increasingly important topic in the European administrative field at national and cross-border levels. Such a trend reflects different phenomena in contemporary society, which further leads to a more focused concern for a harmonised elaboration by the Member States despite their autonomy, in principle, regarding EU law implementation. However, as revealed by the Slovenian case in this article, the European Data Protection Board and national supervising authorities, mostly information commissioners, express the need to regulate some issues more decidedly. Interestingly, yet not surprisingly, their focus is on procedural aspects, as according to administrative science and several European Commission documents, procedure strongly influences the results. As a result, the article elaborates on the relevant procedural issues to be addressed to ensure a harmonised enforcement of the General Data Protection Regulation (GDPR) in force since 2018. Various research methods are employed, combining qualitative, normative, and comparative analyses and quantitative approaches, emphasising statistical data obtained from annual reports for 2020, 2021, and 2022. The results show a lack of procedural provisions in several aspects, including the definition of the parties to the procedure and their defence rights, particularly access to the file, to be heard, and complain, as well as one-stop-shop access to legal protection, deadlines, and investigation powers. Such gaps are expected to be covered by procedural institutions enshrined in National Administrative Procedure Acts (APA). However, as suggested by the Slovenian experience, such a solution is minimal due to differing national regulations and relatively low awareness of APA relevance in data protection even among supervising authorities. Hence, the authors argue that there is a need to develop and adopt standard EU rules to regulate such issues.

• Language: English
• Keywords: administrative procedural law, cross-border cooperation and enforcement, EU law and national autonomy, GDPR, personal data protection
• Work type: Article
• Typology: 1.01 - Original Scientific Article
• Organization: FU - Faculty of Administration
• Publication status: Published
• Publication version: Version of Record
• Year: 2023
• Number of pages: Str. 143-170
• Numbering: Vol. 16, no. 2
• PID: 20.500.12556/RUL-153412
• UDC: 342(4-6EU):004.6-027.552
• ISSN on article: 1338-4309
• DOI: 10.2478/nispa-2023-0017
• COBISS.SI-ID: 179459331
• Publication date in RUL: 04.01.2024

Record is a part of a journal

• Title: NISPAcee journal of public administration and policy
• Shortened title: NISPAcee j. publi. adm. policy
• Publisher: NISPAcee
• ISSN: 1338-4309
• COBISS.SI-ID: 520037913

Licences

• License: CC BY-NC-ND 4.0, Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International
• Link: http://creativecommons.org/licenses/by-nc-nd/4.0/
• Description: The most restrictive Creative Commons license. This only allows people to download and share the work for no commercial gain and for no other purposes.

Secondary language

• Language: Slovenian
• Keywords: upravno procesno pravo, čezmejno sodelovanje in izvrševanje, pravo Evropske unije in nacionalna avtomonija, GDPR, varstvo osebnih podatkov

Projects

• Funder: ARRS - Slovenian Research Agency
• Project number: P5-0093
• Name: Razvoj sistema učinkovite in uspešne javne uprave