|
|
Risk Management in Personal Data Protection
Voskárová, Anna ; Myška, Matěj (referee) ; Míšek, Jakub (advisor)
The bachelor thesis focuses on the issue of the risk management in the context of personal data protection in the course of the implementation of their processing. Concerning the theoretical background, based on the explanation of relevant parts of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the own methodology for risk management in personal data protection is presented. The thesis also attempts at interpretation of some general expressions, understanding of which is indispensable for the specification of the main issue, such as a risk and the process of risk management itself. The practical output of this bachelor thesis is a web application providing the determination of the severity of the risk to the rights and freedoms of data subjects in the process of the general risk assessment for personal data processing operations.
|
|
|
CCTV systems in the workplace
Galantseva, Julia ; Morávek, Jakub (advisor) ; Matějka Řehořová, Lucie (referee)
CCTV systems in the workplace Abstract This thesis focuses on the topic of CCTV systems in the workplace, both from the perspective of Czech labour laws and the european General Data Protection Regulation. The thesis focuses on the analysis of individual legal sources and presents an overview of the legal obligations and criteria that the employer is obliged to fulfil in order to install and use CCTV systems in the workplace. The thesis is divided into four thematic parts. In the first part of the thesis, space is devoted to the definition of the term "CCTV system" and the division of CCTV systems into types according to criteria relevant to the legal regulation of personal data protection. Subsequently, with emphasis on the development of the opinion of the Personal Data Protection Office, it is examined whether the defined types of CCTV systems fall within the scope of the GDPR. This section also defines the concept of 'dummy' cameras. The second part of the thesis focuses on the interpretation of Section 316 of the Labour Code, which regulates the possibility of employee surveillance in the workplace. The focus of this part of the thesis is a legal analysis of legal terms in the examined provisions, in particular with the help of specialized literature, opinions of the Personal Data Protection Office and...
|
|
| |
|
|
Genetic Databases and Protection of Genetic Data
Vozanková, Anna ; Šolc, Martin (advisor) ; Šimečková Pipková, Petra Joanna (referee)
Genetic Databases and Protection of Genetic Data Abstract This thesis deals with the processing of genetic data obtained by DNA sequencing. The data obtained from the human genome represents a revolutionary basis for scientific research and open the way for the treatment of some so far incurable diseases such as cancer, AIDS, and Alzheimer's disease. The thesis primarily focuses on the legal regulation of the protection of genetic data. The thesis describes the processing of genetic data, including its use and dissemination, mainly through providers of genetic databases and genome browsers for scientific research purposes. From the perspective of the current legal framework in the Czech Republic and the European Union, the thesis analyzes the existing level of protection of genetic data and points out evident shortcomings. However, the thesis is not limited to a description of legal regulations but thoroughly evaluates the issue de lege ferenda. The aim of this thesis is to evaluate the current practice of processing genetic data, particularly its accessibility, storage, the possibility of its anonymization, and ways of its misuse. The thesis focuses on the issue of the implementation and consequences of the current legal regulation mainly established by the Regulation (EU) 2016/679 of the European...
|
|
|
Protection of personal data in the decision-making practice of the Office for Personal Data Protection
Lipanová, Kateřina ; Frinta, Ondřej (advisor) ; Salač, Josef (referee) ; Bajura, Jan (referee)
Protection of personal data in the decision-making practice of the Office for Personal Data Protection Abstract This work is devoted to the right to personal data protection, which is constitutionally protected in the Czech Republic. According to Article 10, paragraph 3 of the Charter of Fundamental Rights and Freedoms, which is part of the constitutional order of the Czech Republic, "Everyone has the right to protection against unauthorized collection, disclosure or other misuse of personal data". The right to personal data protection responds flexibly to global socio-technological developments, which reflects not only the European regulation of the right to personal data protection, but also the case law of European courts and the decision-making practice of individual European data protection authorities. The dissertation is divided into four separate parts (chapters), which are thematically related to personal data protection. The first chapter deals with the international and European development of the right to personal data protection and the development of the right to personal data protection in the Czech Republic. The second chapter contains the definition of basic terms and principles of personal data protection, the knowledge of which is essential for understanding this issue. The third chapter...
|
|
|
Legal aspects of online behavioural advertising
Maršál, Jiří ; Kučera, Zdeněk (advisor) ; Zvára, Michael (referee)
In 2022, the AdTech industry is on the verge of a significant makeover. In addition to technological changes caused by the phasing out of third-party cookies, real-time bidding systems used for online behavioural advertising (OBA) are subject to fierce criticism by privacy advocacy groups. Moreover, the concerns about privacy deficits in advertising ecosystems are starting to translate into regulatory attention. In February 2022, the Belgian data protection authority sanctioned IAB Europe - the ambassador of one of the largest real-time bidding ecosystems in Europe - for failure to ensure lawful data processing. Considering the recent developments, this paper aims to ascertain how online behavioural advertising is governed by current privacy laws and verify whether the prescribed legal requirements are observed in practice. Before assessing its legal aspects, it was first necessary to examine online advertising from a technological perspective. The first part of this paper provides an introduction into AdTech and describes the functioning of real-time bidding (RTB) ecosystems, the roles played by publishers, advertisers and AdTech intermediaries, the programmatic bidding process, the data processed and how the data is exchanged between the involved parties. The second part focuses on practices used in...
|
|
|
Personal data protection with focus on processing and protection in civil aviation
Hodek, Jan ; Scheu, Harald Christian (advisor) ; Svobodová, Magdaléna (referee)
Personal Data Protection with Focus on Processing and Protection in Civil Aviation This diploma thesis focuses on the matter of EU legal regulation of personal data protection and reflects it in the field of civil aviation with focus on commercial air transport, as commercial air transport is at this moment the area of civil aviation where most of the personal data processing and operations with them are made. The goals of this diploma thesis are mainly to describe respective personal data processing in civil aviation and finding out whether GDPR represents an insurmountable legal obstacle for air carriers and civil aviation to operate or whether it is just another complicated act of legislation that air carriers and other entities in civil aviation must reflect. The first chapter of the thesis briefly introduces the history of personal data protection while presenting some of its past and current sources of legislation. Moreover, the first chapter introduces certain legal institutes of current EU personal data protection legislation and draws attention to the continuity and discontinuity of GDPR with the previous one. The second chapter of the thesis provides a short introduction to the topic of civil aviation legislation and describes the relationship between this legislation and GDPR. The...
|
|
|
Microtargeting Internet Advertisement on Specific Person
Fišer, Martin ; Veselý, Vladimír (referee) ; Polčák, Libor (advisor)
This thesis demonstrates the possibilities of using advertising platforms to target internet advertising to a specific person. It describes the basic ways of targeting internet advertising that are commonly used today and the principles of the automated auction with digital advertising. During this process, excessive collection and sharing of personal data between different entities can occur, so the thesis further analyzes the legal norms that try to address this issue. The thesis includes the implementation of a new system that allows targeting internet advertising to a specific person. This system creates ads through the Seznam Sklik ad platform and uses retargeting to target. The functionality was verified with the participation of 4 people targeted by an advertisement created by the new system within 1 week. In total, ad impressions were detected on 15 of the 20 most visited websites in the Sklik content network. The thesis showed that the Seznam Sklik ad platform can be misused to perform sniper-targeting, a worrying finding given the potential violation of user privacy.
|
|
|
The right to be forgotten on the internet
Jůzová, Jana ; Papík, Richard (advisor) ; Šlerka, Josef (referee)
Diploma thesis The Right to be Forgotten on the Internet applies to the functions of Internet search engines, search algorithms and the impact of the digital footprint that on the Internet user essentially leaves. With this issue is, on the one hand, inseparably linked the protection of personal data in the online environment, on the other hand the constitutionally enshrined right to information and other fundamental rights. Not ignored should be also the risk of censorship of the Internet. An application of the right to be forgotten adds a whole new dimension to this problems. The right to be forgotten is inferred from the judgment of the European Court of Justice on 13 May 2014 in the case Costeja versus Google Spain, where an Internet user named Mario Costeja Gonzáles first succeeded with a request of removal of unflattering information about himself from results of the search engine Google. Thus a reform precedent will have a big impact on seeking information on the Internet in the future, since the pronouncement of the judgment about the removal of his personal data may ask any European Internet user. The thesis aims to analyze the issue of right to be forgotten in the context of searching for information on the Internet in the European Internet environment - it means not to be searched on the...
|
|
|
Personal data protection in employment formation
Morávek, Jakub ; Pichrt, Jan (advisor) ; Hůrka, Petr (referee)
1 Resumé Personal data protection in employment formation This thesis is concerned with the questions of personal data protection in connection with labor-law relationships. In the concrete the author focuses on personal data protection in formation of the employment. First the author deals with general legal basis of the issue and, consequently, the author analyses personal data protection in positive law, namely in the Act No. 101/2000 Coll., on the Protection of Personal Data, as amended. The author examines in detail some questionable duties of the employer connected with processing of personal data of his employees and, at the same time, refers to the imperfection of transposition of the Directive 95/46/ES of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of these data. On the basis of given comments the author in the general level presents the scope of personal data that can be requested by the employer from the employee in formation of the employment. The author deals with often discussed cases of processing of personal data in the labor-law relationship as for example using of the employee 's photography, recording his family relationships etc. By means of practical example of...
|
guest ::
