Title
Data protection by design and technology neutral law
Abstract
This article argues that to achieve a technology neutral law, technology specific law is sometimes required. To explain this we discriminate between three objectives, often implied in the literature on technological neutrality of law. The first we call the compensation objective, which refers to the need to have technology specific law in place whenever specific technological designs threated the substance of human rights. The second we call the innovation objective, referring to the need to prevent legal rules from privileging or discriminating specific technological designs in ways that would stifle innovation. The third we call the sustainability objective, which refers to the need to enact legislation at the right level of abstraction, to prevent the law from becoming out of date all too soon. The argument that technology neutral law requires compensation in the form of technology specific law is built on a relational conception of technology, and we explain that though technology in itself is neither good nor bad, it is never neutral. We illustrate the relevance of the three objectives with a discussion of the EU cookie Directive of 2009. Finally we explain the salience of the legal obligation of Data Protection by Design in the proposed General Data Protection Regulation and test this against the compensation, innovation and sustainability objectives.
Year
DOI
Venue
2013
10.1016/j.clsr.2013.07.004
Computer Law & Security Review
Keywords
DocType
Volume
Technology neutral law,Data protection by design,Personal data processing systems,Compensation,Innovation,Sustainability,Legal certainty,Fundamental rights,Non-discrimination
Journal
29
Issue
ISSN
Citations 
5
0267-3649
2
PageRank 
References 
Authors
0.47
0
2
Name
Order
Citations
PageRank
Mireille Hildebrandt1132.76
laura tielemans220.47