Skip to main content
SpringerLink
Log in
SpringerLink
Log in

Special Data Processing Activities

  • Chapter
  • First Online:
The EU General Data Protection Regulation (GDPR)

  • 14k Accesses

Abstract

Certain data processing activities open up new and attractive business models to companies. This chapter gives a cursory overview on the key issues for three special data processing activities with high practical relevance: first, big data techniques that allow to process vast quantities of data and, based on the comprehensive data sets that are being used, will often fall within the scope of application of the GDPR; second, cloud computing services that are usually involving the cloud service providers as processors; and third, the Internet of Things that links everyday items to services based on data analysis that will often affect the data subject’s personal privacy and, thus, consist of high-risk processing activities.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 84.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 109.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 159.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Notes

  1. 1.

    Roßnagel/Richter/Nebel ZD 2013, 103, 104; Nebel/Richter, ZD 2012, 407, 408.

  2. 2.

    Keppeler/MMR 2015, 779, 779.

  3. 3.

    Sydow/Kring, ZD 2014, 271, 276.

  4. 4.

    Härting, ITRB 2016, 209, 209.

  5. 5.

    European Data Protection Supervisor, Opinion 8/2016 (2016), p. 6.

  6. 6.

    European Data Protection Supervisor, Opinion 8/2016 (2016), pp. 6–7; Härting, ITRB 2016, 209, 209.

  7. 7.

    Roßnagel, ZD 2013, 562, 562; Liedke, K&R 2014, 709, 709.

  8. 8.

    Härting, ITRB 2016, 209, 210.

  9. 9.

    Dammann, ZD 2016, 307, 313; Ringeling, CRi 2015, 7, 7–11.

  10. 10.

    Werkmeister/Brandt, CR 2016, 233, 234.

  11. 11.

    Koch, ITRB 2015, 13, 18.

  12. 12.

    Koch, ITRB 2015, 13, 18; Dammann, ZD 2016, 307, 314.

  13. 13.

    Werkmeister/Brandt, CR 2016, 233, 235.

  14. 14.

    Werkmeister/Brandt, CR 2016, 233, 235.

  15. 15.

    Art. 29 Data Protection Working Party, WP 221 (2014), p. 2.

  16. 16.

    Koch, ITRB 2015, 13, 16; Weichert, ZD 2013, 251, 256.

  17. 17.

    See also Art. 29 Data Protection Working Party, WP 203 (2013), p. 51; Weichert, ZD 2013, 251, 256.

  18. 18.

    Weichert, ZD 2013, 251, 256.

  19. 19.

    Art. 29 Data Protection Working Party, WP 196 (2012), p. 4.

  20. 20.

    Spies, in: v.d.Bussche/Voigt, Konzerndatenschutz, Cloud Computing (2014), rec. 6; Art. 29 Data Protection Working Party, WP 196 (2012), p. 4.

  21. 21.

    Spies, in: v.d.Bussche/Voigt, Konzerndatenschutz, Cloud Computing (2014), recs. 1–2; Art. 29 Data Protection Working Party, WP 196 (2012), p. 4.

  22. 22.

    Schmid/Kahl, ZD 2017, 54, 55; Art. 29 Data Protection Working Party, WP 196 (2012), pp. 7–8.

  23. 23.

    Hofmann, ZD-Aktuell 2017, 05488.

  24. 24.

    Hofmann, ZD-Aktuell 2017, 05488.

  25. 25.

    Art. 29 Data Protection Working Party, WP 196 (2012), p. 8.

  26. 26.

    Art. 29 Data Protection Working Party, WP 196 (2012), p. 8.

  27. 27.

    Art. 29 Data Protection Working Party, WP 196 (2012), p. 5.

  28. 28.

    Spies, in: v.d.Bussche/Voigt, Konzerndatenschutz, Cloud Computing (2014), rec. 53.

  29. 29.

    Art. 29 Data Protection Working Party, WP 196 (2012), p. 9.

  30. 30.

    Schmid/Kahl, ZD 2017, 54, 56.

  31. 31.

    Art. 29 Data Protection Working Party, WP 223 (2014), p. 4.

  32. 32.

    Art. 29 Data Protection Working Party, WP 223 (2014), p. 4.

  33. 33.

    Dienst/Falke, in: Bräutigam/Rücker, E-Commerce, Internet der Dinge (2017), recs. 33–34.

  34. 34.

    Dienst/Falke, in: Bräutigam/Rücker, E-Commerce, Internet der Dinge (2017), rec. 37; Art. 29 Data Protection Working Party, WP 223 (2014), p. 15.

  35. 35.

    Art. 29 Data Protection Working Party, WP 223 (2014), p. 15.

  36. 36.

    Art. 29 Data Protection Working Party, WP 223 (2014), p. 15.

  37. 37.

    Art. 29 Data Protection Working Party, WP 223 (2014), p. 7.

  38. 38.

    Dienst/Falke, in: Bräutigam/Rücker, E-Commerce, Internet der Dinge (2017), rec. 38.

  39. 39.

    Art. 29 Data Protection Working Party, WP 223 (2014), p. 7.

  40. 40.

    Art. 29 Data Protection Working Party, WP 223 (2014), p. 8.

  41. 41.

    Art. 29 Data Protection Working Party, WP 223 (2014), p. 8.

  42. 42.

    Dienst/Falke, in: Bräutigam/Rücker, E-Commerce, Internet der Dinge (2017), rec. 58.

  43. 43.

    Art. 29 Data Protection Working Party, WP 223 (2014), p. 22.

  44. 44.

    Dienst/Falke, in: Bräutigam/Rücker, E-Commerce, Internet der Dinge (2017), rec. 60.

References

  • Art. 29 Data Protection Working Party (2012) Opinion 5/2012 on Cloud Computing, WP 196

    Google Scholar 

  • Art. 29 Data Protection Working Party (2013) Opinion 3/2013 on purpose limitation, WP 203

    Google Scholar 

  • Art. 29 Data Protection Working Party (2014) Statement on statement of the WP29 on the impact of the development of big data on the protection of individuals with regard to the processing of their personal data in the EU, WP 221

    Google Scholar 

  • Art. 29 Data Protection Working Party (2014) Opinion 8/2014 on the Recent Developments on the Internet of Things, WP 223

    Google Scholar 

  • Dammann U (2016) Erfolge und Defizite der EU-Datenschutzgrundverordnung. ZD, pp 307–314

    Google Scholar 

  • Dienst S, Falke M (2017) Datenschutzrechtliche Herausforderungen im Internet der Dinge. In: Bräutigam P, Rücker D (eds) E-Commerce Rechtshandbuch, 1st edn. C.H. Beck, Munich

    Google Scholar 

  • European Data Protection Supervisor (2016) Opinion 8/2016 – EDPS opinion on coherent enforcement of fundamental rights in the age of big data

    Google Scholar 

  • Härting N (2016) Big Data und Profiling nach der DSGVO. ITRB, pp 209–211

    Google Scholar 

  • Hofmann J (2017) Anforderungen aus DS-GVO und NIS-RL an das Cloud Computing, ZD-Aktuell, 05488

    Google Scholar 

  • Keppeler LM (2015) Was bleibt vom TMG-Datenschutz nach der DS-GVO? MMR, pp 779–783

    Google Scholar 

  • Koch FA (2015) Big Data und der Schutz der Daten. ITRB, pp 13–20

    Google Scholar 

  • Liedke B (2014) BIG DATA – small information: muss der datenschutzrechtliche Auskunftsanspruch reformiert werden? K&R, pp 709–714

    Google Scholar 

  • Nebel M, Richter P (2012) Datenschutz bei Internetdiensten nach der DS-GVO. ZD, pp 407–413

    Google Scholar 

  • Ringeling C (2015) A practical approach to business analytics software. Cri, pp 7–11

    Google Scholar 

  • Roßnagel A (2013) Big data – small privacy? ZD, pp 562–567

    Google Scholar 

  • Roßnagel A, Richter P, Nebel M (2013) Besserer Internetdatenschutz für Europa. ZD, pp 103–108

    Google Scholar 

  • Schmid G, Kahl T (2017) Verarbeitung ‘sensibler’ Daten durch Cloud-Anbieter in Drittstaaten. ZD, pp 54–57

    Google Scholar 

  • Spies A (2014) Cloud Computing. In: von dem Bussche AF, Voigt P (eds) Konzerndatenschutz Rechtshandbuch, 1st edn. C.H. Beck, Munich

    Google Scholar 

  • Sydow G, Kring M (2014) Die Datenschutzgrundverordnung zwischen Technikneutralität und Technikbezug. ZD, pp 271–276

    Google Scholar 

  • Weichert T (2013) Big Data und Datenschutz. ZD, pp 251–259

    Google Scholar 

  • Werkmeister C, Brandt E (2016) Datenschutzrechtliche Herausforderungen für Big Data. CR, pp 233–238

    Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Taylor Wessing, Berlin, Germany

    Paul Voigt

  2. Taylor Wessing, Hamburg, Germany

    Axel von dem Bussche

Authors
  1. Paul Voigt
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Axel von dem Bussche
    View author publications

    You can also search for this author in PubMed Google Scholar

Rights and permissions

Reprints and permissions

Copyright information

© 2017 Springer International Publishing AG

About this chapter

Cite this chapter

Voigt, P., von dem Bussche, A. (2017). Special Data Processing Activities. In: The EU General Data Protection Regulation (GDPR). Springer, Cham. https://doi.org/10.1007/978-3-319-57959-7_9

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-57959-7_9

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-57958-0

  • Online ISBN: 978-3-319-57959-7

  • eBook Packages: Law and CriminologyLaw and Criminology (R0)

Publish with us

Policies and ethics

Search

Navigation