El impacto del caso concreto en la conformación del régimen regulatorio de protección de datos personales
DOI:
https://doi.org/10.54571/ajee.609Palabras clave:
Protección de datos, datos personales, nuevas tecnologías, derechos digitalesResumen
Las empresas tecnológicas han sido objeto en los últimos años de un debate acalorado tanto en el ámbito jurídico, como fuera de él, en torno a la responsabilidad en el uso indebido de datos personales de usuarios, constituyendo el caso Cambridge Analítica, un punto de inflexión, al afectar los datos personales de millones de usuarios. Este caso y los que le sucedieron, han aumentado la conciencia pública sobre la importancia de proteger los datos personales y han impulsado la renovación del marco regulatorio en el que se desenvuelven estas compañías a nivel mundial, en términos de mayor exigencia, control y garantía, sin soslayar las particularidades que presentan los sistemas jurídicos de países que responden a parámetros históricos, sociales, económicos o normativos diversos.
Este tema seguirá siendo relevante ya que las nuevas tecnologías transforman rápidamente la realidad que el derecho intenta regular, y el legislador solo puede ofrecer soluciones provisionales.
Descargas
Citas
Libros y revistas:
BRUNTON, Finn & NISSENBAUM, Helen “Vernacular resistance to data collection and analysis: A political theory of obfuscation.” First Monday, 20(5). 2015
CALDERÓN, Rafael, "La responsabilidad civil por el uso de datos personales en la era digital", Revista Internacional de Derecho y Tecnología, vol. 1, no. 2, 2019.
FROOMKIN A. Michael. “The death of privacy?” Stanford Law Review, 52(5), 2010. DOI: https://doi.org/10.2307/1229519
GARCÍA, Ana, "Protección de datos personales en la era digital: retos y perspectivas", Revista de Derecho y Sociedad, vol. 2, no. 1, 2021
GREENLEAF, Graham. W. & WATERS, Nigel. “Global data privacy laws” Edward Elgar Publishing. 2018.
KUHLMANN, David & SELZAM Thomas. “Artificial intelligence and privacy.” Privacy and Cybersecurity Law in the Digital Age- Springer, Cham. 2020.
MAYER-SCHÖNBERGER, Viktor, & CUKIER, Kenneth. “Big data: A revolution that will transform how we live, work, and think.” Houghton Mifflin Harcourt. 2013.
MITTAL, Sumeet, VATSA, Mayank & SINGH, Richa “Privacy-preserving machine learning for health care data.” IEEE Transactions on Information Forensics and Security, 14(3), pp. 762-777. 2019.
MOHAMMADI, Ehsan, KARIMIPOUR, Hamidreza & CHEN, Tianqui “A survey on machine learning for intrusion detection systems.” Journal of Network and Computer Applications, 150, 102498, 2020.
MORENO, Juan “Responsabilidad civil en el tratamiento de datos personales por parte de empresas tecnológicas” Actualidad Jurídica Aranzadi nº 924, 2021.
OBAR, Jonathan. A., & OELDORF-HIRSCH, Anne “The biggest lie on the internet: Ignoring the privacy policies and terms of service policies of social networking services.” Information, Communication & Society, 21(9), 2018. DOI: https://doi.org/10.1080/1369118X.2018.1486870
ORGANIZACIÓN PARA LA COOPERACIÓN Y EL DESARROLLO ECONÓMICOS "Directrices de la OCDE sobre privacidad y transparencia", 2016.
PÉREZ, Juan, "El derecho a la protección de datos en la era digital: Retos y perspectivas", Revista de Derecho y Tecnología, vol. 7, no. 1, 2020.
PÉREZ, Mónica, "La responsabilidad civil de las empresas tecnológicas por el uso indebido de datos personales", Revista de Derecho Digital, no. 8, 2018.
RODRÍGUEZ, Fernando, "La protección de datos personales en la era digital: Retos y desafíos para el derecho", Revista de Derecho, Comunicaciones y Nuevas Tecnologías, vol. 1, no. 1, 2019.
ROTHSTEIN, Mark A. (2010). Genetic exceptionalism and legislative pragmatism. Hastings Center Report, 40(1). 2010.
SCHWARTZ, Peter. M., & SOLOVE Daniel. J. “Privacy, data protection, and cybersecurity in Europe and the United States.” Columbia Business Law Review, 1(1), 2011.
SOLOVE Daniel. J. “Understanding privacy.” Harvard University Press. 2008.
TORRES, Teodora, T., “La responsabilidad civil en la protección de datos personales”, Revista de Derecho Privado, nº 17, 2013.
WANG, Yansong., & ZHAO, Zhou. “A survey on machine learning for Internet of Things security.” Journal of Network and Computer Applications, 177, 102953, 2021
WESTIN, Alan F. (2003). “Social and political dimensions of privacy.” Journal of Social Issues, 59(2). DOI: https://doi.org/10.1111/1540-4560.00072
YAQOOB, Ibrar, HASHEM, Ibraim Abaker Targio, AHMED, Ejaz, & SHOJAFAR Mohammad. “Artificial intelligence-based techniques for cyber security: A comprehensive review.” IEEE Communications Surveys & Tutorials, 22(3). 2020.
Páginas web consultadas:
ARCHIBUGI, Daniele y FILIPETTI, Andrea: "Privacy, Security and Data Protection in the European Union and the United States: A Critical Comparison" https://www.researchgate.net/publication/277903271_Privacy_Security_and_Data_Protection_in_the_European_Union_and_the_United_States_A_Critical_Comparison
CADWALLADR, Carole & GRAHAM-HARRISON, Emma (2018). “Revealed: 50 million Facebook profiles harvested for Cambridge Analytica in major data breach.” The Guardian. https://www.theguardian.com/news/2018/mar/17/cambridge-analytica-facebook-influence-us-election
CALDERÓN, Rafael, "La responsabilidad civil por el uso de datos personales en la era digital", Revista Internacional de Derecho y Tecnología, vol. 1, no. 2, 2019, pp. 89-104. https://revistas.ucm.es/index.php/IDTE/article/view/64633
COMISIÓN EUROPEA (2020) "Guía para usuarios: Protección de datos personales" https://ec.europa.eu/info/sites/default/files/2019-02/data_protection_for_users_es.pdf
COMISIÓN EUROPEA. (2019). Antitrust: Commission fines Google €1.49 billion for abusive practices in online advertising. https://ec.europa.eu/commission/presscorner/detail/en/IP_19_1770
COMITÉ SELECTO DE INTELIGENCIA DEL SENADO DE EE.UU: Actividades de influencia extranjera en las elecciones de EE. UU. de 2016, Volumen 2: Cambridge Analytica y otras cuestiones relacionadas con la privacidad y la seguridad de los datos (2019). https://www.intelligence.senate.gov/sites/default/files/documents/Report_Volume2.pdf
CORTE SUPREMA NORTEAMERICANA: Caso Barr v. American Association of Political Consultants, Inc., 140 S. Ct. 2335 (2020). https://www.supremecourt.gov/opinions/19pdf/19-631_2c8f.pdf
CORTE SUPREMA NORTEAMERICANA: Caso Carpenter v. United States, 585 U.S. ___ (2018). https://www.supremecourt.gov/opinions/17pdf/16-402_h315.pdf
CORTE SUPREMA NORTEAMERICANA: Caso In re Equifax Inc. Customer Data Security Breach Litigation, 928 F.3d 690 (11th Cir. 2019). https://law.justia.com/cases/federal/appellate-courts/ca11/17-15444/17-15444-2019-07-19.html
CORTE SUPREMA NORTEAMERICANA: Caso In re Google Inc. Cookie Placement Consumer Privacy Litigation, 964 F.3d 1020 (9th Cir. 2020). https://cdn.ca9.uscourts.gov/datastore/opinions/2020/03/27/17-16278.pdf
CORTE SUPREMA NORTEAMERICANA: Caso In re Nickelodeon Consumer Privacy Litigation, 827 F.3d 262 (3d Cir. 2016). https://www2.ca3.uscourts.gov/opinarch/141368p.pdf
CORTE SUPREMA NORTEAMERICANA. Caso: Facebook, Inc. v. Duguid, 593 U.S. ___ (2021). https://www.supremecourt.gov/opinions/20pdf/19-511_gfbh.pdf
CORTE SUPREMA NORTEAMERICANA. Caso: Facebook, Inc. v. Power Ventures, Inc., 844 F.3d 1058 (9th Cir. 2016). https://cdn.ca9.uscourts.gov/datastore/opinions/2016/07/12/13-17154.pdf
CORTE SUPREMA NORTEAMERICANA. Caso: Federal Trade Commission v. Google Inc., 736 F.3d 1236 (9th Cir. 2013). https://law.justia.com/cases/federal/appellate-courts/ca9/10-60309/10-60309-2013-09-10.html
CORTE SUPREMA NORTEAMERICANA. Caso: Spokeo, Inc. v. Robins, 578 U.S. ___ (2016). https://www.supremecourt.gov/opinions/15pdf/13-1339_5h26.pdf
CORTE SUPREMA NORTEAMERICANA: Caso United States v. Microsoft Corp., 584 U.S. ___ (2018). https://www.supremecourt.gov/opinions/17pdf/17-2_6j37.pdf
CORTE SUPREMA NORTEAMERICANA: Caso United States v. Warshak, 631 F.3d 266 (6th Cir. 2010). https://law.resource.org/pub/us/case/reporter/F3/631/631.F3d.266.08-3997.pdf
CORTE SUPREMA NORTEAMERICANA. Caso: ZL Technologies, Inc. v. LinkedIn Corp., 789 F.3d 1101 (9th Cir. 2015). https://scholar.google.com/scholar_case?case=1597375650880026100&q=ZL+Technologies+v.+LinkedIn&hl=en&as_sdt=2006
EUROPEAN DATA PROTECTION BOARD (2020). “Statement on the processing of personal data in the context of the COVID-19 outbreak.” https://edpb.europa.eu/sites/default/files/files/file1/edpb_statement_2020_processingpersonaldataandcovid-19_en.pdf
ELKINS, Alexander (2018). Quantum computing is coming for your data. TechCrunch. https://techcrunch.com/2018/09/28/quantum-computing-is-coming-for-your-data/
EUROPEAN COMPETITION NETWORK (2019). “Joint statement on the outcome of the Google Search case.”
https://ec.europa.eu/competition/ecn/201903_joint_statement_google_case_en.pdf
EUROPEAN PARLIAMENT. (2018). General Data Protection Regulation (GDPR). https://www.europarl.europa.eu/news/en/headlines/society/20180411STO00622/general-data-protection-regulation-gdpr-what-changes-from-25-may
EUROPEAN PARLIAMENT (2019). “European Parliament calls for more effective EU action against monopolies.” https://www.europarl.europa.eu/news/en/press-room/20190321IPR32102/european-parliament-calls-for-more-effective-eu-action-against-monopolies
FEDERAL TRADE COMMISSION. (2019). “Facebook agrees to pay $5 billion and implement robust new protections of user information in settlement of data privacy cases”. https://www.ftc.gov/news-events/press-releases/2019/07/facebook-agrees-pay-5-billion-implement-robust-new-protections
GENERAL DATA PROTECTION REGULATION (GDPR). https://www.europarl.europa.eu/news/en/headlines/society/20180411STO00622/general-data-protection-regulation-gdpr-what-changes-from-25-may
HARDESTY, Lauren (2018). Quantum computers pose a security threat that we're still totally unprepared for. MIT Technology Review. https://www.technologyreview.com/2018/07/10/141371/quantum-computers-pose-imminent-threat-to-todays-encryption/
INFORMATION COMMISSIONER´S OFFICE (2020). Data protection and coronavirus: what you need to know. https://ico.org.uk/global/data-protection-and-coronavirus-information-hub/data-protection-and-coronavirus/
INFORMATION COMMISSIONER´S OFFICE (2018). ICO issues maximum £500,000 fine to Facebook for failing to protect users' personal information. https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2018/10/ico-issues-maximum-500-000-fine-to-facebook-for-failing-to-protect-users-personal-information/
KRAWCZYK, Hugo (2021). Post-quantum cryptography: What it is and why we need it. Communications of the ACM, 64(1), 40-44. https://cacm.acm.org/magazines/2021/1/249182-post-quantum-cryptography/fulltext
Ley de Privacidad del Consumidor de California: California Consumer Privacy Act (CCPA) (2018). https://oag.ca.gov/privacy/ccpa
Ley de Protección de Datos del Estado de Maine: An Act to Protect the Privacy of Online Consumer Information (2019). https://legislature.maine.gov/legis/bills/getPDF.asp?paper=SP0007&item=1&snum=129
Ley de Protección de Datos del Estado de Virginia: Virginia Consumer Data Protection Act (2021). https://lis.virginia.gov/cgi-bin/legp604.exe?211+sum+SB1392
Ley de Protección de Datos del Estado de Florida: Florida Information Protection Act (2014). https://www.flsenate.gov/Laws/Statutes/2014/501.171
Ley de Protección de Datos del Estado de Vermont: Act 171: An Act Relating to Data Brokers and Consumer Protection (2018). https://legislature.vermont.gov/assets/Documents/2018/Docs/ACTS/ACT171/ACT171%20As%20Enacted.pdf
Ley de Protección de Datos del Estado de Oklahoma: Oklahoma Personal Data Protection Act (2010). https://www.ok.gov/oag/documents/Oklahoma%20Personal%20Data%20Protection%20Act.pdf
Ley de Privacidad del Consumidor de California: California Consumer Privacy Act (CCPA) (2018). https://oag.ca.gov/privacy/ccpa
Ley de Protección de Datos del Estado de Texas: Texas Identity Theft Enforcement and Protection Act (2005). https://statutes.capitol.texas.gov/Docs/BC/htm/BC.521.htm
Ley de Protección de Datos del Estado de Nueva York: New York State SHIELD Act (2019). https://www.nysenate.gov/legislation/bills/2019/s5575
Ley de Protección de Datos del Estado de Carolina del Norte: North Carolina Identity Theft Protection Act (2005). https://www.ncleg.gov/EnactedLegislation/Statutes/PDF/ByArticle/Chapter_75C/Article_2.pdf
Ley de Protección de Datos del Estado de Illinois: Illinois Personal Information Protection Act (2005). https://www.ilga.gov/legislation/ilcs/ilcs3.asp?ActID=2256&ChapterID=64
Ley de Protección de Datos del Estado de Dakota del Norte: North Dakota Century Code (2015). https://www.legis.nd.gov/cencode/t51c16.pdf
NARAYANAN, Arvind & MANICKAM, Priyanka (2019). The impact of quantum computing on cryptography and data security: A survey. Journal of Information Privacy and Security, 15(3), 142-155. https://www.tandfonline.com/doi/abs/10.1080/15536548.2019.1604862
OFICINA DEL COMISIONADO DE INFORMACIÓN DEL REINO UNIDO: “Informe final en investigación sobre el uso de datos de Facebook por parte de Cambridge Analytica” (2018). https://ico.org.uk/media/action-weve-taken/2260271/investigation-into-the-use-of-data-analytics-in-political-campaigns-final-20181105.pdf
OFFICE OF THE AUSTRALIAN INFORMATION COMMISSIONER (2020). Videoconferencing security tips. Office of the Australian Information Commissioner. https://www.oaic.gov.au/privacy/guidance-and-advice/videoconferencing-security-tips/
OFFICE OF THE AUSTRALIAN INFORMATION COMMISSIONER (2018). Australian Privacy Act reform. https://www.oaic.gov.au/privacy-law/privacy-act/australian-privacy-act-reform/
OFFICE OF THE PRIVACY COMMISSIONER OF CANADA (2019). The Personal Information Protection and Electronic Documents Act (PIPEDA). https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda
OFFICE OF THE PRIVACY COMMISSIONER OF CANADA (2020). Advice for videoconferencing apps and services. https://www.priv.gc.ca/en/privacy-topics/technology/videoconferencing-apps-and-services/
ORGANIZACIÓN PARA LA COOPERACIÓN Y EL DESARROLLO ECONÓMICOS, "Directrices de la OCDE sobre privacidad y transparencia", (2016). URL: http://www.oecd.org/internet/empresas/directrices-privacidad-transparencia.htm
PÉREZ, Juan, "El derecho a la protección de datos en la era digital: Retos y perspectivas", Revista de Derecho y Tecnología, vol. 7, no. 1, 2020, pp. 1-17. https://revistas.ucm.es/index.php/RDTI/article/view/69763
REUTERS Agency. (2019). EU to investigate Apple over Spotify's complaint. URL: https://www.reuters.com/article/us-eu-apple-antitrust/eu-to-investigate-apple-over-spotifys-complaint-idUSKCN1R00Q1
REUTERS Agency. (2019). EU to study Apple's iPhone and iPad software: sources. https://www.reuters.com/article/us-eu-apple-antitrust/eu-to-study-apples-iphone-and-ipad-software-sources-idUSKCN1R31Q6
SENADO FEDERAL DO BRASIL. (2018). Lei Geral de Proteção de Dados Pessoais (LGPD). https://www.senado.gov.br/atividade/rotinas/materia/getPDF.asp?t=223688&tp=1
THE NEW YORK TIMES. (2019). “Tech Giants Prepare for a Sweeping E.U. Privacy Law to Take Effect.” https://www.nytimes.com/2018/05/23/technology/eu-gdpr-privacy-law.html
TRIBUNAL FEDERAL DE AUSTRALIA. (2020). Caso Privacy Commissioner v Facebook Inc (No 2) [2020] FCA 1307. https://www.judgments.fedcourt.gov.au/judgments/Judgments/fca/single/2020/2020fca1307
TRIBUNAL GENERAL DE LA UNIÓN EUROPEA (2019) Google/AdSense, T-612/17, Tribunal General de la Unión Europea, 26 de septiembre de 2019. https://curia.europa.eu/juris/liste.jsf?num=T-612/17
TRIBUNAL SUPREMO DE CANADA (2019). Caso Telus Communications Inc. v. Wellman. https://decisions.scc-csc.ca/scc-csc/scc-csc/en/item/17545/index.do
U.S. CONGRESS (2020). Coronavirus Aid, Relief, and Economic Security Act (CARES Act). U.S. Government Publishing Office. https://www.congress.gov/bill/116th-congress/house-bill/748/text
WEHNER, Stephanie, & WILDE, Michael (2018). Quantum computing and cryptography. arXiv preprint arXiv:1801.01465. https://arxiv.org/abs/1801.01465
WONG, James Vincent (2019). California passes landmark data privacy bill, giving consumers more control over their personal information. The Guardian. https://www.theguardian.com/technology/2018/jun/28/california-data-privacy-law-consumers-facebook-google
