Abstract
This paper examines how data protection can help to fight the root causes of “fake news”, while supporting the exercise of other fundamental rights such as the right to free expression, non-discrimination, effective remedy and the right to vote. The General Data Protection Regulation (GDPR) and the draft e-Privacy Regulation are explored as legal instruments that could be applied against fake news, including during times of election. While privacy is by no means a magical solution to all problems in internet, this paper claims that proper enforcement of the EU data protection legislation provides a powerful instrument to address the root causes of fake news and reduce the extent to which personal data has been so far misused in the digital space, including for manipulation by spreading false information to improperly influence people’s decisions or opinions.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
World Press Freedom Index (2018). https://rsf.org/en/rsf-index-2018-hatred-journalism-threatens-democracies
Zuboff, S.: Big other: surveillance capitalism and the prospects of an information civilization. J. Inf. Technol. 30, 75–89 (2015). https://ssrn.com/abstract=2594754
UK Information Commissioner’s Office’s (ICO): Report to the Parliament on Investigation into the Use of Data Analytics in Political Campaigns (2018)
Communication from the European Commission: Tackling Online Disinformation: a European Approach, COM/2018/236
Conclusions of the European Council from 13–14 December 2018
Special Rapporteurs on Freedom of Opinion and Expression of the UN, OSCE, OAS and ACHPR: Joint Declaration on Freedom of Expression and “Fake News”, Disinformation and Propaganda FOM.GAL/3/17, 3 March 2017
United Nations Human Rights Council, Report of the Special Rapporteur on the promotion and protection of the right to freedom of opinion and expression, Frank La Rue, A/HRC/23/40, 17 April 2013
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) OJ L 119, p. 1–88, 4 May 2016
Proposal from the European Commission for a Regulation of the European Parliament and the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002/58/EC (e-Privacy Regulation) COM/2017/010 final - 2017/03 (COD)
European Data Protection Supervisor: Opinion 3/2018 on online manipulation and personal data, 19 March 2018
Civil Liberties Union for Europe, Access Now and EDRi: Informing the “misinformation debate, 18 October 2018. https://edri.org/files/online_disinformation.pdf
CJEU, C-293/12 and C-594/12 Digital Rights Ireland and Seitlinger and Others. ECLI:EU:C:2014:238
ECtHR, Big Brother Watch and Others v UK (App. No. 58170/13, 62322/14 and 24960/15)
Article 29 Data Protection Working Party: Opinion 4/2007 on the Concept of Personal Data, 01248/07/EN WP 136
Vinocur, N.: Google Fine Launches New Era of Privacy Enforcement. In: Politico.eu, 21 January 2019. https://www.politico.eu/article/google-fine-privacy-enforcement-france-gdpr/
Wachter, S.: Affinity Profiling and Discrimination by Association in Online Behavioural Advertising, 15 May 2019. https://ssrn.com/abstract=3388639
Mittelstadt, B.: From individual to group privacy in big data analytics. Philos. Technol. 30(4), 475–494 (2017). https://doi.org/10.1007/s13347-017-0253-7
Article 29 Data Protection Working Party, Opinion 06/2014 on the Notion of Legitimate Interests of the Data Controller under Article 7 of Directive 95/46/EC, 844/14/EN WP 217, 09/04/2014. It stipulates that the data subjects’ rights override the controller’s legitimate interest in case of extensive profiling and consent is necessary as a legal basis
Article 29 Data Protection Working Party: Opinion 03/2013 on Purpose Limitation, 00569/13/EN WP 203
Rubenstein, I.: Voter privacy in the age of big data. Wis. Law Rev. 861 (2014). https://ssrn.com/abstract=2447956. http://dx.doi.org/10.2139/ssrn.2447956
Borgesius, Z.F., et al.: Online political microtargeting: promises and threats for democracy. Utrecht Law Rev. 14(1), 82–96 (2018). https://ssrn.com/abstract=3128787
EU Code of Practice on Disinformation (2018)
Citron, D., Richards, N.: Four principles for digital expression (you won’t believe #3!). In: University of Maryland Legal Studies Research Paper No. 15: 95 (2018) and Washington University Law Review 1353 (2018). https://ssrn.com/abstract=3155384
Dwork, C.: It’s not privacy, and it’s not fair. Stanf. Law Rev. Online 66, 35 (2013). https://scholarship.law.berkeley.edu/cgi/viewcontent.cgi?article=3626&context=facpubs
Mantelero, A.: AI and big data: a blueprint for a human rights, social and ethical impact assessment. Comput. Law Secur. Rev. 34(4), 754–772 (2018). https://ssrn.com/abstract=3225749
Wachter, S., Mittelstadt, B., Floridi, L.: Why a right to explanation of automated decision-making does not exist in the general data protection regulation. Int. Data Priv. Law 7, 76, 78 (2017)
Selbst, A., Powles, J.: Meaningful information and the right to explanation. Int. Data Priv. Law 7(4), 233–245 (2017). https://ssrn.com/abstract=3039125
Malgieri, G., Comande, G.: Why a right to legibility of automated decision-making exists in the general data protection regulation. Int. Data Priv. Law 7(4), 233–245 (2017). https://academic.oup.com/idpl/article/7/4/243/4626991
CJEU, Case C-101/01 Bodil Lindqvist, ECLI:EU:C:2003:596
CJEU, C 434/16 Peter Nowak v Data Protection Commissioner, ECLI identifier: ECLI:EU:C:2017:994
CJEU, C- 131/12 Google Spain SL and Google Inc. v Agencia Española de Protección de Datos (AEPD) and Mario Costeja González. ECLI:EU:C:2013:424
In its recent case-law e.g. C-210/16 Facebook Fanpage, ECLI:EU:C:2018:388, the CJEU seems inclined to consider two entities processing data as joint controllers even if the they have rather different roles in defining the purposes and means for processing the data
Facebook’s Ads policy. https://www.facebook.com/policies/ads/. Accessed 10 July 2019. It imposes restrictions on placing false and misleading content of the ads, specific rules for political and social issue ads as well as a review process of the ads
E.g. Times Newspapers Limited (Nos. 1 and 2) v. the United Kingdom (App. no. 3002/03 and no. 23676/03) the ECtHR underlined that, in the light of its accessibility and its capacity to store and communicate vast amounts of information, the Internet plays an important role in enhancing the public’s access to news and facilitating the dissemination of information
CJEU, C–345/17 Buivids ECLI:EU:C:2019:122
CJEU, Advocate-General Szpunar Opinion on C-136/17 G.C. et al. v CNIL. ECLI:EU:C:2019:14
Article 29 Data Protection Working Party: Guidelines on the Implementation of the Court of Justice of the European Union Judgement on “Google Spain”, C-131/12, 14/EN WP 225
Google’s Privacy Policy, Frequently Asked Questions: How are you implementing the recent Court of Justice of the European Union (CJEU) decision on the right to be forgotten?. https://policies.google.com/faq?hl=en&gl=bg. Accessed 10 July 2019
Balkin, J.: Free speech in the algorithmic society: big data, private governance, and new school speech regulation. In: UC Davis Law Review. Yale Law School, Public Law Research Paper No. 615 (2018 Forthcoming). https://ssrn.com/abstract=3038939
Ausloos, J.: The ‘Right to Be Forgotten’ - worth remembering? Comput. Law Secur. Rev. 28(2), 143–152 (2012). https://ssrn.com/abstract=1970392
ECtHR, Jerusalem v. Austria, 27 February 2001 (App. No. 26958/95)
ECtHR, Feldek v Slovakia hudoc (2001)-VIII
ECtHR, Eon v. France (App. No. 26118/10)
ECtHR, Handyside v. United Kingdom, (App. No. 5493/72) (1976)
European Commission and the High Representative of the EU for Foreign Affairs and Security Policy: Joint Communication on Action Plan against Disinformation, JOIN(2018) 36 final
Report from the High-Level Hearing organized by the European Commission on Preserving Democracy in a Digital Age, 22 February 2018. https://ec.europa.eu/epsc/events/high-level-hearing-preserving-democracy-digital-age_en
ECtHR, Von Hanover v Germany hudoc (2004)-VI; 43 EHRR 1
ECtHR, MGN Ltd. v UK hudoc (2011) 143
CJEU, C-73/07 Tietosuojavaltuutettu v Satakunnan Markkinapörssi Oy and Satamedia Oy.; ECLI:EU:C:2008:727
UK Information Commissioner’s Office (ICO): Data Protection and Journalism: A Guide for the Media (2014)
Section 5 of Schedule 2 of the UK Data Protection Act 2018
Twobirds. https://www.twobirds.com/en/in-focus/general-data-protection-regulation/gdpr-tracker/personal-data-and-freedom-of-expression. Accessed 10 July 2019
Rahman, K.S.: Regulating informational infrastructure: internet platforms as the new public utilities. Georgetown Law Technol. Rev. 2, 2 (2018). https://ssrn.com/abstract=3220737
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2020 Springer Nature Switzerland AG
About this paper
Cite this paper
Ivanova, Y. (2020). Can EU Data Protection Legislation Help to Counter “Fake News” and Other Threats to Democracy?. In: Katsikas, S., Zorkadis, V. (eds) E-Democracy – Safeguarding Democracy and Human Rights in the Digital Age. e-Democracy 2019. Communications in Computer and Information Science, vol 1111. Springer, Cham. https://doi.org/10.1007/978-3-030-37545-4_15
Download citation
DOI: https://doi.org/10.1007/978-3-030-37545-4_15
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-37544-7
Online ISBN: 978-3-030-37545-4
eBook Packages: Computer ScienceComputer Science (R0)