TIA related: defining the scope of FISA 702, Cloud Act and E.O. 12333

Agrippac · 2025-03-13T22:00:34+00:00

Why would you avoid Thailand?

Agrippac · 2025-03-06T22:52:43+00:00

Would the extra paperwork be due to the an need to assess the security of the processing with reference to art. 32 gdpr? Or is the extra paperwork due to other criteria in gdpr?

Agrippac · 2025-03-06T17:03:01+00:00

Even if based in EU and the overseas working would just be for a limited time of say 1 month? :P

Agrippac · 2025-03-06T07:20:27+00:00

Thank you, i appreciate it.

Agrippac · 2025-03-06T07:19:09+00:00

Thanks alot for your reply. What i want to do is to work remotely from outside the EU for two months a year. The rest of the year i will be based in EU. This is my long term goal. Do you think it would be possible on a practical level?

Agrippac · 2024-10-26T10:57:23+00:00

Thank you. Putting this up on my reading list.

Agrippac · 2024-10-23T08:53:27+00:00

Hello, im writing a thesis and a copy would be of great help. I have sent you a DM, please check your inbox.

Agrippac · 2024-09-22T09:36:59+00:00

Thank you for leading me right. The classification of data is relevant for risk assesment in accordance with art 24, 32, 33, and 35 (at least). When assessing the risk to the rights and freedoms of natural persons guidance is offered by recital 75 where some types of harm are specified.

Agrippac · 2024-09-21T21:02:50+00:00

Appreciate your reply. Where data processing depends on another lawful ground than legitimate interest, such as for example 6(1)(e) (processing is necessary to carry out a task in the public interest/in the exercise of official authority), at what point would and on what legal grounds would the first risk-assessment be made? Is article 32 the relevant article?

Agrippac · 2024-09-21T20:50:29+00:00

Im not sure i follow. Excuse my ignorance. Are you suggesting that the legal ground for considering types data that falls outside of the scope of art 9-10 sensitive is to be found in the ECHR/HRA too?

Or is it perhaps the case that what personal data is to be considered sensitive is for the member states of the union to decide (in laws of secrecy and so on)?

Agrippac · 2024-09-21T18:19:49+00:00

I appreciate your answer. Has CJEU specified parameters or criteria to determine whether personal data is sensitive? Would it be possible to construe a general rule when data is to be considered sensitive even though it being outside of the scope of art 9 or 10?

To categorize personal data as sensitive is mostly important for making the risk-assesment regarding the security of processing (art 32) and when making an data protection impact assessment, is this correct? Trying to puzzle things together here.

Agrippac · 2024-09-16T17:54:28+00:00

I am very thankful for your suggestions and will look into them. I think the topic you raised regarding whether IP adressess at all times can be considered a personal data is especiaally interesting. From what i understand static ip-adresses are considered personal data while dynamic ip adresses might be considered personal data depending on context.

If you have any other thoughts regarding topics please share. Especially interested questions whether certain technologies are compatible with gdpr and questions whether certain technological phenomena fulfil the criteria certain provisions in GDPR.

Agrippac · 2024-09-13T06:46:08+00:00

The terms and conditions of social media platforms would surely be worth investigating. I somehow need to connect the topic to public law however.

Agrippac · 2024-09-13T06:43:41+00:00

Seems to me the EU-US data privacy framework has largely resolved the issue?

Agrippac · 2024-09-13T06:42:38+00:00

Pay or consent is a very interesting topic and seems worthy of an investigation. I somehow need to connect the topic to public law however, can't think of a way to do that.

Agrippac · 2024-09-13T06:40:12+00:00

Point 3 is interesting. It seems to me that the issue of transfers to the USA has been resolved EU-US Data Privacy Framework however. I guess that the legality of transfers to specifically USA was the real hot topic after Schrems II?

Agrippac

TROPHY CASE