Discutiendo la transparencia de las políticas de privacidad en la Era del Big Data. Hacia la «Norma Social» como nueva Regla de Derecho

  1. Gutiérrez David, María Estrella
Journal:
Dilemata

ISSN: 1989-7022

Year of publication: 2017

Issue Title: Ética de datos, sociedad y ciudadanía

Issue: 24

Pages: 165-184

Type: Article

DIALNET GOOGLE SCHOLAR lock_openDialnet editor

More publications in: Dilemata

Abstract

The aim of this paper is the study of substantive and formal transparency of privacy policies as an essential prerequisite of a meaningful consent to fair data processing practices by third parties. In particular, Big Data techniques raise serious concerns on massive data processing, given the lack of explicit notice about such practices in privacy policies. In this sense, this paper will examine some paradigmatic cases, and will analyse why users’ perception and Data Protection Authorities investigations are coincident in concluding the lack of transparency of privacy policies. Albeit EU General Data Protection Regulation has codified the principle of transparency, one of the main findings of this paper is that privacy policies are still designed to foster legitimization of the «Social Norm» to the detriment of the «privacy by default» principle

Bibliographic References

  • Aleecia M. McDonald; Lorrie Faith Cranor (2008): The Cost of Reading Privacy Policies, Journal of Law and Policy for the Information Society, Vol. 4.
  • Article 29 WP (2009): Opinion 5/2009 on online social networking (WP 163), 12 June.
  • CISCO (2016): Visual Networking Index. Forecast and Methodology, 2015–2020, White Paper, June, http://www.cisco.com/c/en/us/solutions/collateral/service-provider/visual-networking-index-vni/ complete-white-paper-c11-481360.pdf
  • Denham, Elizabeth (2009): Report of findings into the complaint filed by the Canadian Internet Policy and Public Interest Clinic (CIPPIC) against Facebook Inc. under the Personal Information Protection and Electronic Documents Act, Assistant Privacy Commissioner of Canada, 16 July, pp. 139, 141, 253.
  • European Commission (2010): A comprehensive approach on personal data protection in the European Union, COM(2010)609 final, 4 November.
  • European Commission (2010): Attitudes towards Cross-Border Sales and Consumer Protection (Flash Eurobarometer), March, No. 282.
  • European Commission (2011): Attitudes on Data Protection and Electronic Identity in the European Union (Special Eurobarometer), June, No. 359.
  • European Commission (2014): Case No COMP/M.7217 FACEBOOK/ WHATSAPP, C(2014) 7239 final, 3 October.
  • European Commission (2015): Data Protection Report (Special Eurobarometer), June, No. 431.
  • European Commission (2016): Mergers: Commission alleges Facebook provided misleading information about WhatsApp takeover, 20 December, IP/16/4473.
  • Gibbs, Samuel (2016): WhatsApp and Gmail join the 1 billion user club, The Guardian, 2 February, https://www.theguardian.com/technology/2016/feb/02/whatsapp-gmail-google-facebook-user-app
  • Information Commissioner’s Office (2013): Annual Track 2013, June, http://ico.org.uk/about_us/ research/~/media/documents/library/corporate/research_and_reports/annual-track-2012individuals.pdf
  • Information Commissioner’s Office (2016): Privacy notices, transparency and control. A code of practice on communicating privacy information to individuals, 7 October, https://ico.org.uk/media/for-organisations/guide-to-dataprotection/privacy-notices-transparency-and-control-1-0.pdf
  • Kosinski, Michal; Stillwell, David; Graepel, Thore (2013): Private traits and attributes are predictable from digital records of human behavior, Proceedings of the National Academy of the Sciences of the United States of America, Vol. 110, No. 15, http://www.pnas.org/content/110/15/5802.full
  • Kuner, Christopher et al. (2012): The challenge of ‘big data’ for data protection, International Data Privacy Law, Vol. 2, No. 2.
  • Lloyd, Ian J. (2011): Information Technology Law, Oxford, Oxford University Press.
  • McCallig, Damien (2013): Facebook after death: an evolving policy in a social network, International Journal Law Information Technology, Vol. 22, No. 2, http://ijlit.oxfordjournals.org/content/early/2013/09/25/ijlit.eat012.full.pdf+html
  • Schonfeld, Eric (2010): Zuckerberg: We are building a web where the default is social, Techcrunch, 21 April, http://techcrunch.com/2010/04/21/zuckerbergs-buildin-web-default-social/
  • Spanish Data Protection Agency (2013): Decision R/02892/2013, of 18 December 2013.
  • Spanish Data Protection Agency (2013): Decision E/01544/2007, of 6 November 2008.
  • Stucke, Maurice E.; Grunes, Allen P. (2016): Big Data and Competition Policy, New York, Oxford University Press.
  • Tene, Omer; Polonetsky, Jules (2012): To Track or «Do Not Track»: Advancing Transparency and Individual Control in Online Behavioral Advertising, Minnesota Journal of Law, Science & Technology, Vol. 3, Iss. 1, p. 321, http://cyberlaw.stanford.edu/files/publication/files/totrack-ordonotrack.pdf
  • Tene, Omer; Polonetsky, Jules (2013): Big Data for All: Privacy and User Control in the Age of Analytics, Northwestern Journal of Technology and Intellectual Property, Vo. 11, Iss. 5, http://scholarlycommons.law.northwestern.edu/njtip/vol11/iss5/1
  • United Kingdom Office of Fair Trading (2008), Unfair contract terms guidance. Guidance for the Unfair Terms in Consumer Contracts Regulations 1999, (Guideline 19.3), September, http://www. oft.gov.uk/shared_oft/reports/unfair_contract_terms/oft311.pdf
  • United States Department of Commerce (2010), Green Paper: Commercial Data Privacy and Innovation in the Internet Economy: A Dynamic Policy Framework, Internet Policy Task Force, (December), http:// www.commerce.gov/sites/default/files/documents/2010/december/iptf-privacy-green-paper.pdf
  • United States Federal Trade Commission (2010): Protecting consumer privacy in an era of rapid change: a proposed framework for businesses and policymakers, December, http://www.ftc.gov/ sites/default/files/documents/reports/federal-trade-commission-bureau-consumer-protectionpreliminary-ftc-staff-report-protecting-consumer/101201privacyreport.pdf
  • United States Federal Trade Commission (2012), In the Matter of Facebook, Inc., a Corporation, Docket No. C-4365 (27 July) http://www. ftc.gov/sites/default/files/documents/cases/2012/08/120810facebookcmpt.pdf
  • United States Federal Trade Commission (2013), In the matter of Google, Inc., a Corporation, Docket No. C-4336 (24 October) https:// www.ftc.gov/sites/default/files/documents/cases/2011/10/111024googlebuzzcmpt.pdf
  • Weichert, Thilo (2013): Current Data Protection Challenges in Social Networks, Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, 19 November, https://www. datenschutzzentrum.de/vortraege/20131119-weichert-data-protection-social-networks.html
  • Williams, Alan; Calowm Duncan; Lee, Andrew (2015): Drafting Agreements for the Digital Media Industry, 2nd. Edition, New York, Oxford University Press.
Data source: Dialnet