The introduction of the GDPR reheated the ongoing debate about the extraterritorial effect of European data protection law. In this debate, Anu Bradford argued that European data protection law affects global markets through the so-called “Brussels Effect”, according to which policies diffuse primarily through market mechanisms. Specifically, this…[Read more]

This paper analyses the current system in Europe for determining who is (or better, are) responsible for observing data protection obligations in networked service settings. In doing so we address the following problems: (1) of ambiguity in applying the concept of data controller in networked settings; and (2) of insufficiencies in the framework…[Read more]

The debate about how to govern personal data has intensified in recent years. The European
Union’s General Data Protection Regulation, which comes into effect in 2018, relies on
transparency mechanisms codified through obligations for organizations and citizen rights. While
some of these rights have existed for decades, their effectiveness is r…[Read more]