Internet of Things and the Legal Issues related to the Data Protection Law according to the new European General Data Protection Regulation

Internet of Things and the Legal Issues related to the Data Protection Law according to the new European General Data Protection Regulation
复制标题

根据新的欧洲通用数据保护条例,物联网和数据保护法相关的法律问题

DOI:
10.30958/ajl.3-3-2
复制
发表时间:
2017
影响因子:
3.6
通讯作者:
N. Fabiano
N. Fabiano
中科院分区:
医学3区
文献类型:
--
作者:
N. Fabiano

文献摘要

被引文献

相似文献

物联网(IoT)现象需要考虑与数据保护法相关的法律的问题。物联网并不能免除隐私和安全风险,因为它使用的技术往往无法保证可接受的安全级别。在物联网中,隐私的主要风险是通过个人信息识别自然人的分析。然而,关于隐私和安全风险,存在一些对数据安全和责任有潜在影响的问题。物联网系统允许在互联网上传输数据,包括个人数据。物联网生态系统正在发展,公司正在开发应用程序,以提供基于区块链的服务。重要的是要评估区块链的技术结构,以分析数据保护和隐私的法律影响和法律的问题。在这种情况下,有必要考虑将于2018年5月25日适用的新的欧洲通用数据保护条例(GDPR)。GDPR引入了数据保护影响评估(DPIA)、数据泄露通知以及对违反该法规的行为处以高额行政罚款。正确的法律分析可以评估风险并防止错误使用个人数据和信息。
The Internet of Things (IoT) phenomenon needs to consider the legal issues related to the dataprotection law. The IoT is not exempted from privacy and security risks because of the use of technologies that often cannot guarantee an acceptable security level. In the IoT, the main risk for privacy is the profiling that allows identifying natural persons through their personal information. However, regarding the privacy and security risks, there are some issues with potential consequences for data security and liability. The IoT system allows transferring data, including personal data, on the Internet. The IoT ecosystem is evolving and companies are developing applications to provide services based on the blockchain. It is important to evaluate the technical structure of the blockchain to analyse the law impact and the legal issues on data protection and privacy. In this context, it is necessary to consider the new European General Data Protection Regulation (GDPR) that will apply from 25 May 2018. The GDPR introduces Data Protection Impact Assessment (DPIA), data breach notification and very high administrative fines in respect of infringements of the Regulation. A correct law analysis allows to evaluate the risks and to prevent a wrong use of personal data and information.