Data protection: a practical guide to uk and eu law 5th edition peter carey - The complete ebook set

https://ebookmass.com/product/data-protection-a-practical-

Instant digital products (PDF, ePub, MOBI) ready for you

Download now and discover formats that fit your needs...

EU Law Beyond EU Borders: The Extraterritorial Reach of EU Law Marise Cremona (Editor)

https://ebookmass.com/product/eu-law-beyond-eu-borders-theextraterritorial-reach-of-eu-law-marise-cremona-editor/ ebookmass.com

Data Engineering with dbt: A practical guide to building a cloud-based, pragmatic, and dependable data platform with SQL Zagni

https://ebookmass.com/product/data-engineering-with-dbt-a-practicalguide-to-building-a-cloud-based-pragmatic-and-dependable-dataplatform-with-sql-zagni/ ebookmass.com

Practical Guide to Clinical Data Management 3rd Edition –Ebook PDF Version

https://ebookmass.com/product/practical-guide-to-clinical-datamanagement-3rd-edition-ebook-pdf-version/ ebookmass.com

Secrets, Scandals, and Seduction: A Historical Romance Boxset C.K. O'Connor & Lynn Donovan & Sofie Darling & Alyssa Drake & Emily E K Murdoch & Cat Cahill & A.S. Fenichel & Marie Higgins & Robyn Dehart & Christine Sterling & Linda Rae Sande & Rose Pearson & Sophie Smith & Marianne Spitzer & Adara Luann & Rl Ashly

https://ebookmass.com/product/secrets-scandals-and-seduction-ahistorical-romance-boxset-c-k-oconnor-lynn-donovan-sofie-darlingalyssa-drake-emily-e-k-murdoch-cat-cahill-a-s-fenichel-marie-higginsrobyn-dehar-2/ ebookmass.com

Country Music Cowboy Sasha Summers

https://ebookmass.com/product/country-music-cowboy-sasha-summers/

ebookmass.com

Instagram for Business for Dummies® 2nd Edition Jennifer Herman

https://ebookmass.com/product/instagram-for-business-for-dummies-2ndedition-jennifer-herman/

ebookmass.com

Insidious Threats (Sasha McCandless Legal Thriller Book 16) Melissa F. Miller

https://ebookmass.com/product/insidious-threats-sasha-mccandlesslegal-thriller-book-16-melissa-f-miller/

ebookmass.com

How International Law Works in Times of Crisis George Ulrich (Editor)

https://ebookmass.com/product/how-international-law-works-in-times-ofcrisis-george-ulrich-editor/

ebookmass.com

Italy Before Rome: A Sourcebook Katherine Mcdonald

https://ebookmass.com/product/italy-before-rome-a-sourcebookkatherine-mcdonald/

ebookmass.com

Finding Home: A Small Town Romance (Maple Cove Book 5)

https://ebookmass.com/product/finding-home-a-small-town-romance-maplecove-book-5-alexa-aston/

ebookmass.com

Data Protection

A Practical Guide to UK and EU Law

Fifth Edition

Edited by PETER CAREY

Great Clarendon Street, Oxford, OX2 6DP, United Kingdom

Oxford University Press is a department of the University of Oxford. It furthers the University’s objective of excellence in research, scholarship, and education by publishing worldwide. Oxford is a registered trade mark of Oxford University Press in the UK and in certain other countries © Peter Carey 2018

The moral rights of the author have been asserted

Fourth Edition published in 2015

Fifth Edition published in 2018

Impression: 1

All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, without the prior permission in writing of Oxford University Press, or as expressly permitted by law, by licence or under terms agreed with the appropriate reprographics rights organization. Enquiries concerning reproduction outside the scope of the above should be sent to the Rights Department, Oxford University Press, at the address above

You must not circulate this work in any other form and you must impose this same condition on any acquirer Crown copyright material is reproduced under Class Licence Number C01P0000148 with the permission of OPSI and the Queen’s Printer for Scotland

Published in the United States of America by Oxford University Press 198 Madison Avenue, New York, NY 10016, United States of America

British Library Cataloguing in Publication Data

Data available

Library of Congress Control Number: 2017960259

ISBN 978–0–19–881541–9

Printed and bound by CPI Group (UK) Ltd, Croydon, CR0 4YY

Links to third party websites are provided by Oxford in good faith and for information only. Oxford disclaims any responsibility for the materials contained in any third party website referenced in this work.

Foreword

It’s a great honour to be introducing the new edition of Peter Carey’s practical guide to data protection.

This is a pivotal time for data protection and privacy. The laws we regulate are converging globally, consumer trust is ever more central to both business and the public sector, and a rapidly expanding digital economy is asking more questions of us all.

UK citizens are better informed about their information rights than ever before.

But alongside that increased awareness of the law, a lot of people feel they’ve lost control of their own data—and that impacts their trust in organizations.

For me, the end game in the data protection field is always about increasing public trust and confidence in how their personal data are used.

And the way our personal information is handled has never been more important. Which of us doesn’t consider ourselves a citizen of the digital world today? Whether it’s the digital services we see every day on our phones and tablets, or the digital infrastructure that underpins everything from banking to manufacturing.

Technology is moving so fast. And consumer trust needs to follow it. That’s why a new law was needed. And that’s what we’re getting with the Data Protection Bill, which will include the provisions of the General Data Protection Regulation within its broader scope.

The GDPR builds on the previous legislation; it provides more protections for consumers, and more privacy considerations for organizations. But this is a stepchange. It’s evolution, not revolution.

There are specific new obligations for organizations, for example around reporting data breaches and transferring data across borders. But the real change for organizations is understanding the new rights for consumers.

They’ll have the right to request that personal data be deleted or removed if there’s no compelling reason for an organization to carry on processing it, and they’ll enjoy new rights around data portability and how they give consent.

It’s vital that organizations are prepared to comply; but they can also prosper in the new regulatory landscape.

If your organization can demonstrate that good data protection is a cornerstone of your business policy and practices, you’ll see a real business benefit.

An upfront investment in privacy fundamentals offers a payoff down the line, not just in better legal compliance, but a competitive edge. Whether that means attracting more customers or more efficiently meeting pressing public policy needs, I believe there is a real opportunity for organizations to present themselves on the basis of how they understand and respect the privacy of individuals.

I hope this new edition helps you be transparent, be accountable, and give people back control of their data.

Elizabeth Denham Information Commissioner

Table of Cases

AB v Ministry of Justice [2014] EWHC 1847 (QB) 152–153

Baronetcy of Pringle of Stichill [2016] UKPC 16 68

Brown (Andrea) v Commissioner of Police for the Metropolis and Chief Constable of Greater Manchester Police (2016) Claim No. 3YM09078 & A53YP250 (CC, Central London) ..................................................... 153

Campbell v Mirror Group Newspapers [2004] UKHL 22; [2002] EWHC 299; [2002] All ER (D) 448 (Mar) ..................................... 15, 57, 63, 64, 68

Chief Constable of Humberside Police and Others v Information Commissioner [2009] EWCA Civ 1079 51

Coco v A N Clarke (Engineeers) Ltd [1968] FSR 415 59–60

College van burgemeester en wethouders van Rotterdam v Rijkeboer [2009] C-553/07 128

Common Services Agency v Scottish Information Commissioner [2008] UKHL 47 12

Dawson Damer and Others v Taylor Wessing LLP [2017] EWCA Civ 74 128, 129

Deer (Dr Cécile) v The University of Oxford [2017] EWCA Civ 121 129, 130, 136 Dunn v Durham County Council [2012] EWCA Civ 1654 128

Durant v Financial Services Authority [2003] EWCA Civ 1746 11–13, 16, 17–18, 128

Edem v IC & Financial Services Authority [2014] EWCA Civ 92 ....................... 12–13

Elliott v Lloyds TSB Bank plc and Another [2012] EW Misc 7 ........................... 128

Esch and Others v European Central Bank (2004) T-320/02 .............................. 74

Ezsias v Welsh Ministers [2007] All ER (D) 65 ....................................... 129

Google Inc. v Vidal Hall and Others [2014] EWHC 13 (QB) ............................ 152

Google Spain SL & Google Inc. v Mario Costeja Gonzalez [2014] C-131/12 .... 7, 15–16, 146–147

Gurieva and Another v Community Safety Development (UK) Ltd [2016] EWHC 643 (QB) 124, 128

Halliday v Creation Finance Ltd [2013] EWCA Civ 33 152

Huber v Germany [2009] CMLR 49 50

Iesni v Westrip Holdings [2011] 1 BCLC 498 128

Ittihadieh v 5-11 Cheyne Gardens RTM Company Ltd [2017] EWCA Civ 121 13, 129

Johnson v Medical Defence Union [2004] EWHC 347 130

Johnson v Medical Defence Union [2007] EWCA Civ 262 ........................ 50, 64, 128

Kololo v Commissioner of Police for the Metropolis [2015] EWHC 600 (QB) ............... 128

Law Society and Others v Kordowski [2011] EWHC 3185 (QB) .................... 50, 64–65

Lin v Commissioner of Police for the Metropolis [2015] EWHC 2484 (QB) ................. 128

Lindqvist, Bodil v Kammaraklagaren (C-101/01) [2004] 1 CMLR 20 (ECJ) ........ 63–64, 68, 108

Netherlands Immigration Minister v M & S (17 July 2014) C-141/12 & C-372/12 ............ 13

R (Kelway) v The Upper Tribunal (Administrative Appeals Chamber) and Northumbria Police and R (Kelway) v Independent Police Complaints Commission [2013] EWHC 2575 12

R (on the application of B) v Stafford Combined Court [2006] EWHC 1645 75

R v Secretary of State for the Home Department, ex p Lord [2003] EWHC 2073 (Admin) 131, 135–136

Robertson (Brian Reid Beetson) v Wakefield Metropolitan Council, Secretary of State for the Home Department [2001] EWHC 915 (Admin) .......................... 61, 62

Smith v Lloyds TSB plc [2005] EWHC 246 ................................... 14, 17, 130

Southern Pacific Personal Loads Ltd [2013] EWHC 2485 (Ch) .......................... 128

Stone v South East Coast SHA (formerly Kent and Medway SHA) [2006] EWHC 1668 ......... 77

TLT and Others v Secretary of State for the Home Department [2016] EWHC 2217 (QB)...... 153 V & EDPS v European Parliament (2011/C 282/92) ................................... 72

Valsts policijas Rīgas reģiona pārvaldes Kārtības policijas pārvalde v Rīgas pašvaldības SIA ‘Rīgas satiksme’ (Case C-13/16) [2017] ECLI:EU:C:2017:43 ......................... 58 YS v Minister voor Immigratie [2014] C-141/12 and C-372/12 128

Table of UK Legislation

Please note that page numbers in bold refer to actual text (in Appendix 1). Please refer to Index for references to Working Parties, e.g. Article 29 Working Party.

EUROPEAN UNION PRIMARY LEGISLATION

Charter of Fundamental Rights of the European Union (Nice Charter) 268

Art 8 4

Art 8(1) 251

Art 47 282

Council of Europe Convention (1981) 275

Lisbon Treaty 2009

Treaty on European Union

4

Commission Decision 2003/490/EC on adequate protection of personal data (Argentina) . . . . . . . . 110

Commission Decision 2003/821/EC on adequate protection of personal data (Guernsey) . . . . . . . . 110

Commission Decision 2004/411/EC on adequate protection of personal data (Isle of Man) 110

Commission Decision 2008/393/EC on adequate protection of personal data (Jersey) 110

3

Treaty on the Functioning of the European Union (TFEU)

Art 5 289

Art 16

Art 16(1)

Art 16(2)

Art 17

Art 101

Art 102

Art 179(1)

Art 263 . .

Art 267

.80, 288

.283, 284

283

Art 290 289

Art 338(2) 288

EUROPEAN UNION SECONDARY LEGISLATION

Decisions

Commission Decision 2000/518/ EC on adequate protection of personal data (Switzerland) . . . . . . . 110

Commission Decision 2002/2/EC on adequate protection of personal data (Canada) 110

Commission Decision 2010/147/EU on adequate protection of personal data (Faroe Islands) 110

Commission Decision 2010/625/EU on the adequate protection of personal data (Andorra) . . . . . . . . . 110

Commission Decision 2011/61/EU on the adequate protection of personal data (Israel) . . . . . . . . . . . . 110

Commission Decision 2012/484/EU on the adequate protection of personal data (Uruguay) 110

Commission Decision 2013/65/EU on the adequate protection of personal data (Uruguay) 110

Directives

Directive 93/13/EEC (Unfair Terms in Consumer Contracts) . . . . . . . . . 260

Directive 95/46/EC (Data Protection Directive) . . . . . . . . xxxi, 3, 4, 7, 10, 15, 20, 38, 40, 61, 72, 74, 109, 111, 146, 180, 181, 190, 251, 252, 253, 282, 290

Chapter I (Arts 1–4)

Art 2(a) 8

Art 2(c) 16

Art 2(d) 18

Chapter II (Arts 5–21)

Art 14

Chapter IV (Arts 25–26)

Art 25(6) .

Art 26(2)

Art 26(4) .

Chapter VI (Arts 28–30)

275, 321, 322, 349

323

.275, 323

Art 29 349

Directive 97/66/EC (Telecommunications

Sector Directive) 195

Directive 2000/31/EC (E-Commerce Directive) Arts 12–15, 255, 291

Directive 2002/58/EC (E-Privacy Directive)

185, 186, 191, 193–194, 198, 199, 203, 290, 305, 349

Art 9

Art 13

Art 13(2) . .

197

189–190

192

Recital 41 192

Directive 2003/98/EC (on re-use of public sector information) 286

Directive 2009/136/EC (E-Privacy) (Amendment) Directive 185

Directive 2011/24/EU (Cross-Border Healthcare) 258

Directive 2015/1535 (Technical Standards and Regulations Directive)

Art 1(1)

.54, 294

Directive 2016/680 (Law Enforcement Directive)

Chapter II (Arts 5–11)

20, 83, 224, 254

31

Art 6 31

Directive 2016/1148 (Network and Information Security Directive) 30

Recommendations

Commission Recommendation 2003/361/EC on the definition of micro, small and medium-sized enterprises

Annex, Art 2 .

Regulations

253

Regulation (EU) 45/2001 (on European data protection supervision) 254

Art 28(2) 290

Art 98 291

Regulation (EC) 1049/2001 (on public access) 342

Regulation (EU) 765/2008 (on accreditation and market surveillance)

Regulation (EC) 223/2009 on transmission of data subject to statistical confidentiality) . . . . . . . . 288

Regulation (EU) No 182/2011 (on control of Commission’s exercise of implementing powers) 275, 289, 348

Art 5 349

Art 8

349

Regulation (EU) 1215/2012 (on jurisdiction and enforcement of judgments) 284

Regulation (EU) 536/2014 (on clinical trials on medicinal products) . . . . . . 288

Regulation (EU) 2016/679 (General Data Protection Regulation (GDPR) .

. 2, 14, 37, 38, 59, 92, 107, 155, 158, 173, 174, 175–176, 181, 186, 189, 192, 203, 204, 220–221, 223, 240, 245, 251–350

Recitals

Recital 15

16

Recital 24 6, 229

Recital 26

.22, 23

Recital 27 16

Recital 33

81

Recital 34 25

Recital 38

Recital 42 70

Recital 43 70

Recital 45

Recital 47 57, 58

Recital 49

Recital 51 68, 69

Recital 63

128

Recital 66 146

Recital 68

Recital 72 149

Recital 78

Recital 81 98, 99

Recital 83 88, 89

Recital 84

213

Recital 85 100, 101

Recital 86

.100, 101

Recital 87 100, 101

Recital 88

Recital 90 215

Recital 91

. . .29, 319

Regulation (EC) 1338/2008 (on public health and safety statistics) . . 263

.208, 228

Recital 97 227–228, 233, 236

Recital 101 106

Recital 112

56

Recital 146 152

Recital 155

72

Recital 157 80

Recital 158

Recital 159

Recital 160

Recital 162

Chapter I (Arts 1–4) .

Art 1 . .

80

80

. 290–294

290

Art 1(1) 8

Art 2 290–291

Art 2(2)(a) 4

Art 2(2)(b) 4

Art 2(2)(c) 4

Art 2(2)(d) 4

Art 3 6, 291, 316, 318

Art 3(1) . .

Art 3(2) . .

Art 4 .

Art 4(1) .

Art 4(2)

Art 4(4) . .

18

.159, 307

. .67, 130, 291–294

8, 9, 13, 22

15

. . 23

Art 4(6) 16

Art 4(7) 18

Art 4(8) 19, 177

Art 4(9) 25

Art 4(11) 24, 52

Art 4(12) 24, 98

Art 4(13) 25

Art 4(14) .

Art 4(16)

Art 4(17) . .

Art 4(23) . . .

Art 4(26) .

25

21

22

163

106

Chapter II (Arts 5–11) . . . . 294–298, 346

Art 5 32, 33, 39, 71, 82, 85, 125, 294, 306, 345

Art 5(1)(a) 42

Art 5(1)(c) 217

Art 5(1)(d) 139

Art 5(1)(f) 246

Art 5(2) 40, 224

Art 5(e). . . .

Art 6 .

143

. . 33, 34, 43, 50, 65, 69, 70, 71, 74, 75, 81, 85, 144, 164, 294–295, 345

Art 6(1) . . . . . . . . . . . 50, 51, 298, 300, 301, 303, 304, 313, 328

Art 6(1)(a) 24, 51, 53, 54, 70, 74, 81

Art 6(1)(a)–(f) 42

Art 6(1)(b) 55, 75

Art 6(1)(c) 55–56, 72, 75

Art 6(1)(d) 56

Art 6(1)(e) 56–57, 75, 78, 79, 81

Art 6(1)(f) 57, 74, 81

Art 6(d) . . . . . . . . . . . . . . . . .

Art 7 31, 225, 296, 345

Art 7(1) . . . . . . . . . . . . . . . . . . . .24, 70

Art 7(3) . . . . . . . . . . . . . . . . . . . .24, 70

Art 8 . . . . . . . . . .

. . 43, 54, 296, 345

Art 8(1) . . . . . . . . . . . . . 24, 54–55, 303

Art 8(2) . . . . . . . . . . . . . . . . . . . . . . 25

Art 9 . . . . . . . 33–34, 43, 65, 76, 82, 85, 217, 219, 227, 296–298, 315, 345

Art 9(1) 10, 20, 25, 66, 207, 305, 308, 310, 313

Art 9(2) 20, 25, 42, 66, 69, 144, 300, 301, 303, 304, 305

Art 9(2)(a) 24, 53, 70

Art 9(2)(b) 71, 83

Art 9(2)(f) .

Art 9(2)(h) .

Art 9(3) . . . . . . . .

74

86

.78, 303

Art 10 . . . . . . 20, 43, 81, 207, 227, 298, 308, 310, 313, 315

Art 11 .

298, 345

Art 11(2) 125, 298

Chapter III (Arts 12–23) 153, 298–306, 309, 346

Art 12 43, 44, 45, 122, 123–124, 126, 138, 139, 142, 143, 147, 148, 177, 298–299

Art 12(1) 125

Art 12(3)

Art 12(4)

Art 12(5)

73

127–128

124

128

Art 12(7) . . . . . . . . . . . . . . . . . .44, 340

Art 12(8) . . . .

348

Arts 12–22 . . . . . . . . . . . . . . . .306, 345

Art 13 27, 43, 46–47, 132, 150, 177, 216, 298, 299–300, 307, 323, 325

Art 13(2)(f) 23

Art 14 27, 43, 47–48, 132, 177, 298, 299, 300–302, 307, 323, 325

Art 14(2)(g) 23

Art 15 . . . . . . . . . . . 126–127, 130, 135, 150, 298, 299, 302, 347

Art 15(2) . . . . . . . . . . . . . . . . . . . . 133

Art 15(3) . . . . . . . . . . . . . . . . . . . . 127

Art 16 . . . . . . . . . . . 139, 298, 299, 302, 304, 331, 347

Art 17 143, 145, 146, 147, 298, 299, 303, 304, 331

Art 17(1) 304

Art 17(1)(c) 147

Art 17(2) 146, 331, 339

Art 17(3) 146

Art 18 147, 148, 298, 299, 303–304, 331, 347

Table of UK Legislation

Art 19 . . . . . . . . . . . 139–140, 145–146, 148, 298, 299, 304

Art 20 . . . . . . . . . . . . 137, 298, 299, 304

Art 20(4) .

. 139

Art 21 23, 140, 225, 298, 299, 304–305, 347

Art 21(1) 142, 143, 144, 146, 147, 148, 303, 304

Art 21(2) 144, 303

Art 21(6) 142

Art 21(6) 143

Art 22. . . .23, 149, 150, 298, 299, 305, 323

Art 22(1) .

Art 22(2) .

Art 22(3) .

Art 22(4) .

Art 23 . .

. .126, 300

339

150

.126, 300

305–306

Art 23(1) 295

Art 23(1)(i) 134–135

Chapter IV (Arts 24–43) 40, 306–320, 346

Art 24 225, 242, 306–307, 316

Art 25 41, 95–96, 172, 205, 225, 307, 316, 344

Art 25(1) 26, 225

Art 25(2) . .

Arts 25–39 . .

Art 26 .

Art 26(1) .

Art 27 .

Art 27(3)(a) .

.26, 225

345

. 27, 152, 172, 307

182–183

.22, 172, 307–308

147

Art 28 98, 99, 152, 172, 225, 308–309

Art 28(1) 19, 99, 178

Art 28(3) 19, 85, 99, 180

Art 28(4) 99

Art 28(8) 329, 331, 335

Art 28(9) 180

Art 28(10) 85

Art 28(h) 179

Art 29

Art 30

Art 30(1) .

Art 30(2) .

172, 310

71, 85, 172, 224, 225, 238, 310, 325

.211, 238

238

Art 30(5) 85

Art 31 157, 172, 311

Art 32 40, 88, 89, 91, 99, 172, 217, 308, 309, 311, 316, 344

Art 32(1) 310

Art 32(4) 94

Art 33 24, 99, 100, 101–102, 103, 172, 225, 309, 311–312

Art 33(1)

Art 33(2)

Art 33(3)

339

339

.100, 312

Art 34 . . . . . . . . . 24, 99, 100, 102, 172, 298, 299, 306, 309, 312

Art 34(1) . . . . . . . . . . . . . . . . . . . . 339

Art 34(2) .

.100, 103

Art 34(3) 103

Art 35 86, 99, 172, 225, 238, 309, 312–314, 316

Art 35(1) 206, 207, 218

Art 35(2) 234, 238

Art 35(3) 207, 208, 209

Art 35(4) 210, 329, 335

Art 35(5) . . . . . . . . . . . . . . . . . . . . 210

Art 35(7) . . .

Art 35(7)(a) .

Art 35(8) .

Art 35(9) .

Art 35(10)

206

212

214

206

210

Art 35(11) 207, 221

Art 36 99, 172, 206, 220, 238, 309, 314, 316, 331

Art 36(2) 329

Art 36(5) 331

Art 37 86, 172, 225, 226, 229, 314–315, 323–324

Art 37(1) .

Art 37(1)(b) .

Art 37(1)(c) .

Art 37(5)

Art 38

Art 38(1)

.227, 228

227

227

233

172, 226, 315

234

Art 38(2) 235

Art 38(3) 236

Art 38(6) 237

Art 39 172, 226, 238, 315–316

Art 40 26, 27, 89, 99, 311, 313, 316–317, 322, 339, 344

Art 40(1) 329

Art 40(5) 329, 331

Art 40(7) .

Art 40(9) .

Art 41 . .

Art 41(1) .

Art 41(3) .

335

340

.27, 317–318, 330

317

335

Art 41(4) 345

Art 42 28, 89, 96, 99, 225, 307, 309, 311, 318–319, 322, 331, 339, 344, 345

Art 42(1) 96, 320, 329

Art 42(2) 96

Art 42(5) 319, 320, 329, 331

Art 42(7) 157, 330, 339

Art 43 . . . . . . . . . . . . . . . . 28, 309, 318, 319–320, 330, 331, 339, 345

Art 43(3) . . . . . . . . . . . . . . . . .335, 339

Table of UK Legislation

Art 43(6) 339

Art 43(8) .

. . . .339, 348

Chapter V (Arts 44–50) . . . . 98, 105–106, 183, 320–326, 349

Art 40 .

Art 42

Art 44 .

114, 307, 309

114

. 106, 320

Arts 44–49 345

Art 45 321–322, 325

Art 45(1) 108

Art 45(3) 322, 324

Art 46 127, 300, 301, 322–323, 324, 325

Art 46(2) 316–317, 318, 329, 331, 335

Art 46(3) .

Art 47

Art 48

Art 49

330, 331, 335

114, 300, 301, 322, 323–324, 330, 331, 335, 339

324

324–325

Art 49(1) 300, 301, 310, 339

Art 50 166, 326

Chapter VI (Arts 51–59) 326–332, 346, 348

Art 51 326

Art 52 326–327

Art 53 327

Art 54

Art 54(2)

Art 55 .

327–328

339

. . . . 101–102, 311, 317, 318, 319, 320, 328, 328, 335, 342

Art 55(1) . .

Art 56 . . . .

334

. 164, 317, 318, 319, 320, 328–329, 342

Art 56(1) 334

Art 56(4) 334

Art 57 156, 317, 329–330

Art 57(1)(f) 154

Art 58 157, 317, 330–331

Art 58(1) 339, 345, 347

Art 58(2) . . . 319, 330, 332, 339, 344, 345

Art 58(3) . .

Art 59 . .

Chapter VII (Arts 60–76) .

Art 6 .

.318, 339

331–332

331, 346, 349

. 78

Art 60 165, 328, 332–333, 337

Art 60(3) 328

Art 60(4) 336

Art 60(7) 337

Art 60(8) 337

Art 60(9) 337

Art 61 329, 332, 333–334, 335

Art 62 . . . . . . . . . . . .329, 332, 334–335

Art 63 309, 313, 317, 318, 319, 320, 323, 326, 332, 335, 337, 341

Art 64 . . . . . . . . . . . .335–336, 337, 338

Art 64(1) .

.336, 340

Art 64(2) . . . . . . . . . . . . . . . . . . . . 340

Art 64(3)

337

Art 65 . . . . . . . 163, 336–337, 338, 340, 341

Art 65(1) 336

Art 65(2) 337

Art 66 165, 333, 337, 340

Art 66(1) 334

Art 66(2) 334, 335

Art 67 338

Art 68 27, 313, 338

Art 69

Art 70 .

Art 70(1) .

Art 70(2) .

Art 71

Art 72

338–340

.338, 340

338

338, 340

340

Art 73 341

Art 74 341

Art 75 341

Art 76 340, 341–342

Chapter VIII (Arts 77–84) 318, 320, 342–346

Art 77 154, 166, 316, 342, 342, 343

Art 78

Art 79

Art 79(2)

Art 80

Art 80(1)

Art 81

342, 342, 343

.316, 323, 342–343

344

329, 343

154

343

Art 82 104, 151, 309, 343–344

Art 82(2) 85, 176

Art 83 159, 160, 309, 331, 339, 344–345

Art 84 309, 345–346

Chapter IX (Arts 85–91) 295, 345, 346–348

Art 85

Art 86

Art 87

Art 88

Art 89

Art 89(1) .

346

346

346

346–347

79, 80, 347

49, 79, 294, 301, 303, 305

Art 90 347–348

Art 91 348

Chapter X (Arts 92–93) 348–349

Art 92 28, 29, 320, 348

Art 93 340, 348–349

Art 93(2) 309, 317, 320, 321, 322, 324, 334, 338

Art 93(3) .

322

Chapter XI (Arts 94–99) . . . . . . . 349–350

Art 94 349

Art 95 .

349

Art 96 349

Art 97 .

349–350

Art 98 350

Art 99 . .

E-Privacy Regulation

(Proposed)

Art 15

Art 16 . . . .

Art 16(6) .

Art 23 .

. 350

xxxi, 54, 141, 185, 186, 187, 188, 189, 191, 192, 193, 194, 195–196, 198, 199, 200, 203, 204

202

.191–192, 194

194

186

INTERNATIONAL

European Convention on Human Rights and Fundamental Freedoms 1950 . . . . . . . . . . . . . . 4, 78, 268 Art 8 61, 62 First Protocol, Art 3 61, 62

Table of UK Secondary Legislation

Electronic Commerce (EC Directive)

Regulations 2002 (SI 2002/2013) 187

Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2003/2426) (PECR) . . . . 54, 156, 173, 174, 185, 186, 193, 199, 203–204

Reg 6 .

Reg 7(2) .

198

200

Reg 7(3) 200

Reg 14 197–198

Reg 15 201–202

Reg 16 198

Reg 16A 198, 200

Reg 19 195

Reg 20 195

Reg 21 195

Reg 22 190, 191

Reg 22(3)(a) .

192–193

Reg 23 191, 194

Reg 26 196

Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 (SI 2011/1208) 156, 185

Representation of the People (England and Wales) Regulations 2001 (SI 2001/3111). .

Representation of the People Regulations 1986 (SI 1986/1081) .

62

62

Reg 54 61

Table of European and International Legislation

Communications Act 2003 189

Companies Act 1985, s 735(1)

Companies Act 2006

Computer Misuse Act 1990 .

Data Protection Act (DPA) 1984 .

188

188

. 61

. .2, 3

Data Protection Act (DPA) 1998 . . . . xxix, xxx, xxxi, 3–4, 7, 10, 42, 63, 66–67, 73, 74, 77, 78, 80, 87, 129, 131, 175, 180

s 1(1) 8

s 2 68

s 10 65

s 11 61, 62

s 11(3) 191

s 13(2) 152

s 70(2) .

Sch 1, Prt II

Sch 3(3) .

Data Protection Bill 2017 (new Data Protection Act) .

Prt 1

37

43

72

. .xxx, xxxi, 6, 7, 22, 143, 145, 168, 240

cl 2(2) 9, 13

cl 2(4) 15

cl 2(7) 16

Prt 2 (Chapters 1–3) 5, 81, 82

cl 5 18

cl 5(2) 18

cl 8

cl 8(6).

cl 9

cl 10

cl 16

Prt 3 (Chapters 1–6)

24

24

20

.20, 81

29

5, 19, 31, 69, 83

Ch 2 82

Prt 4 (Chapters 1–6) 5, 82

Ch 6 Sch 11, 69

Prt 5 5

Prt 6 5, 156, 166

Prt 7 5 cl 186

s 18

s 28

s 33(8)

s 34(3)

6

80

227

83

s 67 225, 226–227

s 69(2) 225, 239

s 160(2) 85 s 183 78 s 184 67

Sch 1 69 Prt 1 71, 81

Prt 2

Prt 2(6).

Prt 2(11). .

Prt 2(14).

Prt 3

Prt 4 .

.75, 81

77

77

77

. 81

.71, 85

Schs 2–4 125, 131

Sch 5 29

Sch 6 6

Sch 7 224 Sch 8 82, 83

Prt 3 73

Sch 9 Prt 4, 73

Sch 10

Equality Act 2010

73, 80, 83

. 71–72

Freedom of Information Act 2000 . . . .133, 222

Sch 1

Freedom of Information (Scotland) Act 2002

59

. 59

Human Rights Act 1998 61

Investigatory Powers Act 2016 69, 77

Police and Justice Act 2006 61

Representation of the People Act 1983 61

Serious Crime Act 2007 61