Open AccessPersonal data processing for behavioural targeting: which legal basis?
Author(s) -
Frederik Zuiderveen Borgesius
Publication year - 2015
Publication title -
international data privacy law
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 1.371
H-Index - 20
eISSN - 2044-4001
pISSN - 2044-3994
DOI - 10.1093/idpl/ipv011
Subject(s) - directive , data protection act 1998 , data protection directive , charter , directive on privacy and electronic communications , data processing , european union , subject (documents) , process (computing) , information privacy , internet privacy , general data protection regulation , data processing system , computer science , business , computer security , political science , law , european union law , database , library science , economic policy , programming language , operating system
Key Points •The European Union Charter of Fundamental Rights only allows personal data processing if a data controller has a legal basis for the processing. •This paper argues that, in most circumstances, the only available legal basis for the processing of personal data for behavioural targeting is the data subject's unambiguous consent. •Furthermore, the paper argues that the cookie consent requirement from the e-Privacy Directive does not provide a legal basis for the processing of personal data. •Therefore, even if companies could use an opt-out system to comply with the e-Privacy Directive's consent requirement for using a tracking cookie, they would generally have to obtain the data subject's unambiguous consent if they process personal data for behavioural targeting
Accelerating Research
Robert Robinson Avenue,
Oxford Science Park, Oxford
OX4 4GP, United Kingdom
Address
John Eccles HouseRobert Robinson Avenue,
Oxford Science Park, Oxford
OX4 4GP, United Kingdom