This chapter focuses on the legal uncertainty regarding the applicability of data protection law in the case of profiling. This legal uncertainty stems amongst others from the definitions of personal data, data processing and data controller in EU regulations as well as from the possible exclusion of anonymous data from the applicability of data protection law. We will show that it is perfectly possible to construct and apply profiles without identifying the person concerned in the sense of data protection law.
We will build our legal analysis gradually upon the three different steps that exist in the construction and application of profiles: the collection of personal data and other information to construct the profile; the construction of the profile upon personal and anonymous data and the application of a group profile to a group or an individual. For each level, we will analyse whether and how data protection law applies. We will use case law and legal doctrine in our analysis.
As a result of the legal uncertainty that we find in data protection law, we will then try to find answers in privacy and anti-discrimination law, with a special focus on legislation and jurisprudence in the case of racial and ethnic profiling.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Art.29 Data Protection Working Party, Opinion on the use of location data with a view to providing value-added services, 25 November 2005 (WP 115). Available at http://europa.eu.int/comm/justice_home/fsj/privacy/workinggroup/wpdocs/2006_en.htm.
Art.29 Data Protection Working Party, Opinion 5/2004 on unsolicited communications for marketing purposes under Article 13 of Directive 2002/58/EC, 27 February 2004 (WP 90).
Borking, J., Artz, M., en Van Amelo, L., Gouden Bergen van gegevens. Over Datawarehousing, data mining en privacy, in Registratiekamer, Achtergrondstudies en Verkenningen 10, September 1998. Available at: http://www.cbpweb.nl/documenten/av_10_gouden_bergen_van_gegevens.stm?refer=true&theme=purple.
Bygrave, L. A., ‘Minding the Machine: Article 15 of the EC Data Protection Directive and Automated Profiling’, Computer Law & Security Report, Vol. 17, Elsevier, Neth., 2001, pp. 17–24.
Bygrave, Lee A., Privacy Law & Policy Reporter, Vol. 7, HiTech Editing Pty Ltd., 2000, pp. 67–76.
Custers B., The Power of Knowledge, Wolf Legal Publishers, Nijmegen, 2004.
European Data Protection Supervisor (EDPS), ‘Public access to documents and data protection’, Background Paper Series July 2005 n°1, Brussels, European Communities, 2005. Available at: www.edps.eu.int/publications/policy_papers/Public_access_data_protection_EN.pdf.
European Commission, First report on the implementation of the Data Protection Directive (95/46/EC), 15 May 2003, pp. 10–11. Available at: http://europa.eu.int/comm/justice_home/fsj/privacy/lawreport/index_en.htm.
Fredman, S., Discrimination Law, Oxford University Press, Oxford, 2002.
Gutwirth, S., Privacy and the Information Age, Rowman & Littlefield Publishers Inc, 2002.
Hildebrandt, M., Gutwirth, S., (Eds), Implications of profiling practices on democracy and rule of law, FIDIS Deliverable 7.4, European Union IST FIDIS Project, Brussels, 2005. Available at: www.fidis.net.
Hildebrandt, M., Backhouse, J. (Eds), Descriptive analysis and inventory of profiling practices, FIDIS Deliverable 7.2, European Union IST FIDIS Project, Brussels, 2005. Available at: www.fidis.net.
Hosein, I., ‘Researching the Ethics of Knowledge Management: The Case of Data Mining’, in Department of Information Systems. London School of Economics and Political Science, Working Paper Series 135, 5 October 2005. Available at: http://is2.lse.ac.uk/wp/pdf/WP135.PDF.
Koops, B.J., ‘Reply’ in Hildebrandt, M., Gutwirth, S., (Eds.), Implications of profiling practices on democracy and rule of law, FIDIS Deliverable 7.4, European Union IST FIDIS Project, Brussels 2005. Available at: http://www.fidis.net/.
Kündig, A., Basis for IT Assessment. An overview of the underlying technologies, their applications and the implications for individuals, society and business, Swiss Centre for Technology Assessment, 2002. Available at: http://www.ta-swiss.ch/www-remain/reports_archive/publications/2002/TA43_2002.pdf.
Mallet-Poujol, N., ‘Report: The place of the individual in a world of globalised information: rights and obligations’ in European Conference on Data Protection on Council of Europe Convention 108 for the protection of individuals with regard to automatic processing of personal data: present and future (Proceedings), Warsaw, Council of Europe, 2001. Available at: http://www.coe.int/t/e/legal_affairs/legal_co-operation/data_protection/events/conferences/DP(2001)Proceedings_Warsaw_EN.pdf.
Naylor, D., Ritter, C., ‘B2C in Europe and Avoiding Contractual Liability: Why Businesses with European Operations Should Review their Customer Contracts Now’, 15 September 2004. Available at: http://www.droit-technologie.org/1_2.asp?actu_id=979&motcle=B2C&mode=motamot.
Postman, N., Technopoly: The surrender of culture to technology, Vintage Books, New York, 1993.
T-zine (Tijdnet), ‘No spam law cases in Belgium’, 14 April 2006.
Zwenne, G-J, Schermer, B., Privacy en andere juridische aspecten van RFID: unieke identificatie op afstand van producten en personen [Privacy and other legal aspects of RFID: unique identification from a distance of products and people], Elsevier Juridisch, ‘s Gravenhage, 2005. Available at: http://www.nvvir.nl/doc/rfid-tekst.pdf.
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2008 Springer Science + Business Media B.V
About this chapter
Cite this chapter
Schreurs, W., Hildebrandt, M., Kindt, E., Vanfleteren, M. (2008). Cogitas, Ergo Sum. The Role of Data Protection Law and Non-discrimination Law in Group Profiling in the Private Sector. In: Hildebrandt, M., Gutwirth, S. (eds) Profiling the European Citizen. Springer, Dordrecht. https://doi.org/10.1007/978-1-4020-6914-7_13
Download citation
DOI: https://doi.org/10.1007/978-1-4020-6914-7_13
Publisher Name: Springer, Dordrecht
Print ISBN: 978-1-4020-6913-0
Online ISBN: 978-1-4020-6914-7
eBook Packages: Computer ScienceComputer Science (R0)