Varstvo osebnih podatkov v tehnologiji veriženja blokov

Groznik, Urša (author), Grilc, Peter (mentor)

Z evolucijo varstva osebnih podatkov se posameznikom, kot lastnikom svojih osebnih podatkov vrača nadzor nad procesi obdelovanja podatkov, ki jih izvajajo upravljavci in obdelovalci. Splošna uredba o varstvu podatkov (Uredba (EU) 2016/679) spoštuje že doseženo stopnjo varstva osebnih podatkov in jo nadgrajuje, vendar to ne pomeni, da prinaša revolucijo na tem področju. Kot revolucionarno lahko označimo tehnologijo veriženja blokov, ki ima z vzpostavitvijo digitalnega zaupanja moč prenosa nadzora nad obdelavo osebnih podatkov s strani monopolnih institucij v roke posameznikov. Skozi magistrsko nalogo je prikazano, kako se tehnologija in pravo lahko med seboj povezujeta in si ne predstavljata ovir. Osrednja hipoteza magistrske naloge je, da je bojazen za neskladnost nove tehnologije s pravili varstva osebnih podatkov neutemeljena. Na prvi pogled se zdi, da so nekatere značilnosti tehnologije veriženja blokov v očitnem nasprotju s temeljnimi načeli in pravicami, ki so posameznikom priznane s Splošno uredbo. Le-ta je napisana tehnološko nevtralno, ker se družbena razmerja spreminjajo in razvijajo hitreje, kot se piše pravo. Določila Splošne uredbe je treba brati v luči njenega cilja, namena in temeljnih načel. Marsikatera ovira pri implementaciji v proces obdelovanja osebnih podatkov se ob razumevanju tega izkaže za neobstoječo, kar konkretno prikazuje tudi primer digitalizirane Estonije, v kateri je državljanom omogočeno elektronsko poslovanje z državno upravo in storitve e-zdravstva preko tehnologije veriženja blokov. Ne le, da si tehnologija in pravo varstva osebnih podatkov nista nasprotujoča si pojma, temveč je možno varstvo podatkov s pomočjo tehnologije celo okrepiti.

• Language: Slovenian
• Keywords: Splošna uredba o varstvu podatkov, tehnologija veriženja blokov, varstvo osebnih podatkov, zasebnost
• Work type: Master's thesis/paper
• Organization: PF - Faculty of Law
• Year: 2019
• PID: 20.500.12556/RUL-113471
• COBISS.SI-ID: 17107537
• Publication date in RUL: 09.01.2020

Secondary language

• Language: English
• Title: Personal data protection in blockchain technology

Abstract

As personal data protection evolves, natural persons, as owners of their personal data, regain control of the data processing processes performed by controllers and processors. The General Data Protection Regulation (Regulation (EU) 2016/679) respects and upgrades the level of personal data protection already achieved, but that does not mean that it revolutionises this field. Blockchain technology, however, can be said to be revolutionary, having the power of transferring control over the processing of personal data by monopoly institutions to the hands of natural persons, by establishing digital trust. The master's thesis shows how technology and law can be interconnected and not mutually impeding. The central hypothesis of the master's thesis is that the fear of incompatibility of the new technology with the rules of personal data protection, is unfounded. At first glance, some of the features of blockchain technology seem to be in conflict with the fundamental principles and rights conferred on natural persons by the GDPR. Its wording is technologically neutral, because social relationships change and develop faster than the law is written. The provisions of the GDPR should be read in the light of its objective, purpose, and fundamental principles. Understanding this, many obstacles to the implementation of personal data processing prove to be non-existent, which is specifically illustrated by the case of digitised Estonia, where citizens have the possibility of e-commerce with the state administration and e-health services through blockchain technology. Not only are technology and the law of personal data protection not contradictory concepts, but the latter can even be enhanced through technology.

• Keywords: General Data Protection Regulation, blockchain technology, personal data protection, privacy