Dove, E.S. and Chen, J. orcid.org/0000-0002-1970-6762 (2021) What does it mean for a data subject to make their personal data ‘manifestly public’? An analysis of GDPR Article 9(2)(e). International Data Privacy Law, 11 (2). pp. 107-124. ISSN 2044-4001
Abstract
Key points
This article investigates an under-discussed and potentially significant provision in the EU General Data Protection Regulation (GDPR), namely Article 9(2)(e), which permits processing of special category personal data if the ‘processing relates to personal data which are manifestly made public by the data subject’.
This provision may be of increasing interest to data controllers in a variety of cloud-based, internet-related, and/or social media contexts. We specifically consider the application of this provision in the context of genetic data and open data sharing (ie data that can be freely used, re-used, and redistributed by anyone), illustrating this by way of several cases of initiatives that seek to share genetic data. We query whether by uploading one’s own genetic data onto the internet, a person has made their data ‘manifestly public’ within the meaning of the GDPR.
Our response to this query is that in general, the answer should be no, but it remains possible. We argue that Article 9(2)(e) must be construed narrowly; outside of clearly defined contexts, it would be legally inappropriate to invoke and rely upon this manifestly public self-disclosure exception in data protection law. Our narrow interpretation of the provision aligns with the limited guidance made available from data protection authorities. As part of this argument, we propose a legal test that must be satisfied before Article 9(2)(e) may be lawfully invoked, and which is grounded in the intent of the data subject.
Metadata
Item Type: | Article |
---|---|
Authors/Creators: |
|
Copyright, Publisher and Additional Information: | © 2021 The Author(s). Published by Oxford University Press. This is an Open Access article distributed under the terms of the Creative Commons Attribution License (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted reuse, distribution, and reproduction in any medium, provided the original work is properly cited. |
Dates: |
|
Institution: | The University of Sheffield |
Academic Units: | The University of Sheffield > Faculty of Social Sciences (Sheffield) > School of Law (Sheffield) |
Depositing User: | Symplectic Sheffield |
Date Deposited: | 16 Feb 2022 14:41 |
Last Modified: | 16 Feb 2022 14:41 |
Status: | Published |
Publisher: | Oxford University Press (OUP) |
Refereed: | Yes |
Identification Number: | 10.1093/idpl/ipab005 |
Open Archives Initiative ID (OAI ID): | oai:eprints.whiterose.ac.uk:183706 |