Conference article

Processing personal data without the consent of the data subject for the development and use of language resources

Aleksei Kelli
University of Tartu, Estonia

Krister Lindén
University of Helsinki, Finland

Kadri Vider
University of Tartu, Estonia

Pawel Kamocki
ELDA, France / IDS Mannheim, Germany

Ramunas Birštonas
Vilnius University, Lithuania

Silvia Calamai
University of Siena, Italy

Penny Labropoulou
ILSP/ARC, Greece

Maria Gavriilidou
ILSP/ARC, Greece

Pavel Stranák
Charles University, Czechia

Download article

Published in: Selected papers from the CLARIN Annual Conference 2018, Pisa, 8-10 October 2018

Linköping Electronic Conference Proceedings 159:8, p. 72-82

Show more +

Published: 2019-05-28

ISBN: 978-91-7685-034-3

ISSN: 1650-3686 (print), 1650-3740 (online)

Abstract

The development and use of language resources often involve the processing of personal data. The General Data Protection Regulation (GDPR) establishes an EU-wide framework for the processing of personal data for research purposes while at the same time allowing for some flexibility on the part of the Member States. The paper discusses the legal framework for language research following the entry into force of the GDPR. In the first section, we present some fundamental concepts of data protection relevant to language research. In the second section, the general framework of processing personal data for research purposes is discussed. In the last section, we focus on the models that certain EU Member States use to regulate data processing for research purposes.

Keywords

Personal Data, Data Protection Regulation, Language Resources

References

[BDSG] Bundesdatenschutzgesetz. Available at https://www.gesetze-im-internet.de/bdsg_2018/index.html (5.9.2018)

[C-101/01] Case C-101/01. Criminal proceedings against Bodil Lindqvist (6 November 2003). Available at http://eur-lex.europa.eu/legal-content/EN/TXT/?qid=1521039149443&uri=CELEX:62001CJ0101 (3.4.2018)

[C-73/07] Case C-73/07. Tietosuojavaltuutettu vs. Satakunnan Markkinapörssi Oy and Satamedia Oy (16 December 2008). Available at https://eur-lex.europa.eu/legalcontent/EN/TXT/HTML/?uri=CELEX:62007CA0073&qid=1536154290371&from=EN (5.9.2018)

[Data Protection Directive] Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. Official Journal L 281, 23/11/1995 p. 0031 – 0050. Available at http://eur-lex.europa.eu/legalcontent/EN/TXT/HTML/?uri=CELEX:31995L0046&qid=1522340616101&from=EN (29.3.2018)

[Draft PDPA 2018a] Estonian Draft Act on Personal Data Protection (Isikuandmete kaitse seaduse eelnõu) (22.08.2018). Available at https://www.riigikogu.ee/tegevus/eelnoud/eelnou/5c9f8086-b465-4067-841e-41e7df3b95af/Isikuandmete%20kaitse%20seadus (3.4.2018)

[Draft PDPA 2018b] Finnish Draft Act on Personal Data Protection (Hallituksen esitys eduskunnalle EU:n yleistä tietosuoja-asetusta täydentäväksi lainsäädännöksi) (01.03.2018). Available at https://www.eduskunta.fi/FI/vaski/HallituksenEsitys/Sivut/HE_9+2018.aspx (4.4.2018)

[Draft PDPA 2018c] Greek Draft Bill on Personal Data Protection (??µ?? ??a t?? ???stas?a ?ed?µ???? ???s?p???? ?a?a?t??a). Available at http://www.opengov.gr/ministryofjustice/wpcontent/uploads/downloads/2018/02/sxedio_nomou_prostasia_pd.pdf (18.4.2018)

[French law] Loi n° 2018-493 du 20 juin 2018 relative à la protection des données personnelles, modifying the French Data Protection Act (loi n° 78-17 du 6 janvier 1978 relative à l’informatique, aux fichiers et aux libertés)

[GDPR] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). OJ L 119, 4.5.2016, p. 1-88. Available at http://eur-lex.europa.eu/legal-content/EN/TXT/?qid=1515793631105&uri=CELEX:32016R0679
(29.3.2018)

[González-Rodríguez et. al. 2008] Joaquín González-Rodríguez, Doroteo Torre Toledano, Javier Ortega-García (2008). Voice Biometrics. In Handbook of Biometrics edited by Anil K. Jain, Patrick Flynn, Arun A. Ross. Springer

[IPDPC] Italian Personal Data Protection Code. Legislative Decree 30.06.2003 No. 196. English version available at: http://194.242.234.211/documents/10160/2012405/Personal+Data+Protection+Code+-+Legislat.+Decree+no.196+of+30+June+2003.pdf (11.4.2018)

[Jain et. al. 2004] Anil K. Jain, Arun Ross, Salil Prabhakar (2004). An Introduction to Biometric Recognition. - IEEE Transactions on Circuits and Systems for Video Technology 14(1). Available at https://www.cse.msu.edu/~rossarun/BiometricsTextBook/Papers/Introduction/JainRossPrabhakar_BiometricIntro_CSVT04.pdf (31.3.2018)

[Kelli et al. 2015] Aleksei Kelli, Kadri Vider, Krister Lindén (2015). The Regulatory and Contractual Framework as an Integral Part of the CLARIN Infrastructure. 123: Selected Papers from the CLARIN Annual Conference 2015, October 14–16, 2015, Wroclaw, Poland. Ed. Koenraad De Smedt. Linköping University Electronic Press, Linköpings universitet, 13-24. Available at http://www.ep.liu.se/ecp/article.asp?issue=123&article=002 (28.3.2018)

[LED] Law of European Delegation. Law No. 25.10.2017 No 163. Available at http://www.gazzettaufficiale.it/eli/id/2017/11/6/17G00177/sg (11.4.2018)

[LLPPD 2018] Lithuanian Law Amending the Law on Legal Protection of Personal Data (Lietuvos Respublikos asmens duomenu teisines apsaugos istatymo pakeitimo istatymas). Available at https://www.etar.lt/portal/legalAct.html?documentId=43cddd8084cc11e8ae2bfd1913d66d57 (30.8.2018)

[Oostveen 2016] Manon Oostveen (2016). Identifiability and the applicability of data protection to big data. International Data Privacy Law 6 (4), 299-309

[Personal Data Protection Act]. Personal Data Protection Act. Entry into force 01.01.2008. English translation available at https://www.riigiteataja.ee/en/eli/507032016001/consolide (3.4.2018)

[Privacy Code] Code of conduct and professional practice Regarding the processing of personal data for historical purposes. English version available at http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/export/1565819 (11.4.2018)

[VLO] CLARIN Virtual Language Observatory. Available at https://vlo.clarin.eu/ (18.4.2018)

[WP29 2017] WP29. Guidelines on Consent under Regulation 2016/679. Adopted on 28 November 2017 [adopted, but still to be finalized]. Available at http://ec.europa.eu/newsroom/article29/itemdetail.cfm?item_id=615239 (2.4.2018)

[WP29 2014a] WP29. Opinion 05/2014 on Anonymisation Techniques Adopted on 10 April 2014. Available at http://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2014/wp216_en.pdf (3.4.2018)

[WP29 2014b] WP29. Opinion 06/2014 on the notion of legitimate interests of the data controller under Article 7 of Directive 95/46/EC. Available at http://ec.europa.eu/justice/article-29/documentation/opinionrecommendation/files/2014/wp217_en.pdf (3.4.2018)

[WP29 2007] WP29. Opinion 4/2007 on the concept of personal data. Adopted on 20th June. Available at http://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2007/wp136_en.pdf (29.3.2018)

Citations in Crossref