Procedural challenges of cross-border cooperation and consistency in personal data protection in the EU

Rudolf, Grega (avtor), Kovač, Polonca (avtor)

Data protection is an increasingly important topic in the European administrative field at national and cross-border levels. Such a trend reflects different phenomena in contemporary society, which further leads to a more focused concern for a harmonised elaboration by the Member States despite their autonomy, in principle, regarding EU law implementation. However, as revealed by the Slovenian case in this article, the European Data Protection Board and national supervising authorities, mostly information commissioners, express the need to regulate some issues more decidedly. Interestingly, yet not surprisingly, their focus is on procedural aspects, as according to administrative science and several European Commission documents, procedure strongly influences the results. As a result, the article elaborates on the relevant procedural issues to be addressed to ensure a harmonised enforcement of the General Data Protection Regulation (GDPR) in force since 2018. Various research methods are employed, combining qualitative, normative, and comparative analyses and guantitative approaches, emphasising statistical data obtained from annual reports for 2020, 2021, and 2022. The results show a lack of procedural provisions in several aspects, including the definition of the parties to the procedure and their defence rights, particularly access to the file, to be heard, and complain, as well as one-stop-shop access to legal protection, deadlines, and investigation powers. Such gaps are expected to be covered by procedural institutions enshrined in National Administrative Procedure Acts (APA). However, as suggested by the Slovenian experience, such a solution is minimal due to differing national regulations and relatively low awareness of APA relevance in data protection even among supervising authorities. Hence, the authors argue that there is a need to develop and adopt standard EU rules to regulate such issues. Points for Practitioners: The article refers to data protection within theoretical, normative, practical, comparative, and national dimensions. In addition to analysing statistical data regarding procedural issues of cross-collaborative application of GDPR in the Member States - primarily Slovenia - the article provides practical implications of legislative, organisational, and IT adaptations required for harmonising EU-wide enforcement of GDPR. The insights provided herein can support the development of similar solutions in other EU countries. Therefore, the research findings are relevant for practitioners from various European administrations who are in charge of implementing GDPR and, specifically, supervising its implementation, as well as for policymakers and legislators in their respective areas of data protection and administrative procedural law. The findings will also benefit the European Commission when drafling new legislalion to enhance cooperation and consistency between Member States in enforcing personal data rights set by GDPR.

• Jezik: Angleški jezik
• Ključne besede: administrative procedural law, cross-border cooperation and enforcement, EU law and national autonomy, GDPR, personal data protection
• Vrsta gradiva: Članek v reviji
• Tipologija: 1.01 - Izvirni znanstveni članek
• Organizacija: FU - Fakulteta za upravo
• Status publikacije: Objavljeno
• Različica publikacije: Objavljena publikacija
• Leto izida: 2023
• Št. strani: Str. 143-170
• Številčenje: Vol. 16, no. 2
• PID: 20.500.12556/RUL-153412
• UDK: 342(4-6EU):004.6-027.552
• ISSN pri članku: 1338-4309
• DOI: 10.2478/nispa-2023-0017
• COBISS.SI-ID: 179459331
• Datum objave v RUL: 04.01.2024

Gradivo je del revije

• Naslov: NISPAcee journal of public administration and policy
• Skrajšan naslov: NISPAcee j. publi. adm. policy
• Založnik: De Gruyter Brill, Sciendo, Network of Institutes and Schools of Public Administration in Central and Eastern Europe, Georgian Institute of Public Affairs
• ISSN: 1338-4309
• COBISS.SI-ID: 520037913

Licence

• Licenca: CC BY-NC-ND 4.0, Creative Commons Priznanje avtorstva-Nekomercialno-Brez predelav 4.0 Mednarodna
• Povezava: http://creativecommons.org/licenses/by-nc-nd/4.0/deed.sl
• Opis: Najbolj omejujoča licenca Creative Commons. Uporabniki lahko prenesejo in delijo delo v nekomercialne namene in ga ne smejo uporabiti za nobene druge namene.

Sekundarni jezik

• Jezik: Slovenski jezik
• Ključne besede: upravno procesno pravo, čezmejno sodelovanje in izvrševanje, pravo Evropske unije in nacionalna avtomonija, GDPR, varstvo osebnih podatkov

Projekti

• Financer: ARRS - Agencija za raziskovalno dejavnost Republike Slovenije
• Program financ.: Javna agencija za znanstvenoraziskovalno in inovacijsko dejavnost Republike Slovenije
• Številka projekta: P5-0093-2019
• Naslov: Razvoj sistema učinkovite in uspešne javne uprave