Međunarodni prijenosi osobnih podataka izvan Europske unije

master's thesis

• Title (english): International transfers of personal data outside the European Union
• Author: Adrian Jug
• Mentor: Nina Gumzej (mentor)
• Committee member: Dražen Dragičević (predsjednik povjerenstva)
• Committee member: Marko Jurić (član povjerenstva)
• Committee member: Nina Gumzej (član povjerenstva)
• Granter: University of Zagreb; Faculty of Law; (Information Technology Law and Informatics); Zagreb
• Defense date and country: 2021-12-23, Croatia
• Scientific / art field, discipline and subdiscipline: SOCIAL SCIENCES; Law

Abstract

Kao jedan od mnogih modaliteta obrade osobnih podataka, međunarodni prijenos osobnih podataka se pokazao kao ključan element modernog digitalnog gospodarstva. Naime, uzimajući u obzir rasprostranjenost različitih digitalnih usluga stvaraju se nove prilike za obrade osobnih podataka, a time i za prijenosima istih. Stoga, navedeni prijenosi moraju biti izvršeni na način kako bi predmetni osobni podaci pojedinaca bili sigurni od bilo kakve povrede podataka čime se osiguravaju prava fizičkih osoba. S obzirom na navedeno, cilj ovog rada je analizirati trenutno uređenje sustava međunarodnih prijenosa osobnih podataka prema Općoj uredbi o zaštiti podataka (EU) 2016/679 (dalje u tekstu: Uredba), zajedno s drugim povezanim pravnim izvorima i drugim aktualnostima u predmetnom području. Primjerice, odluka suda EU u predmetu Schrems II ostvarila je značaj utjecaj na tumačenje Uredbe i kako se prijenosi moraju odvijati, čime su u tom kontekstu stvoreni novi zahtjevi za osiguravanje zaštite pojedinaca. Isto tako, područje međunarodnih prijenosa je 2021. godine oblikovano i izlaskom Ujedinjenog Kraljevstva iz EU, čime je redovno odvijanje prijenosa podataka u toj zemlji postalo upitno, najviše zbog prestanka primjene Uredbe. Ovaj je rad podijeljen u dvije tematske cjeline. U prvoj cjelini se analiziraju mehanizmi prijenosa osobnih podataka u treće zemlje prema pravilima Uredbe. U drugoj cjelini se ispituju učinci presude Schrems II na daljnji razvoj Uredbom uspostavljenih mehanizama prijenosa te kratki pregled protoka osobnih podataka u i izvan UK nakon izlaska iz EU.

Abstract (english)

As one of the many modalities of personal data processing, the international transfer of personal data has emerged as a crucial element in the modern digital economy. Namely, given the widespread use of various digital services, new opportunities arise for personal data processing and, consequently, for their transfer. Therefore, these transfers must be carried out in such a way as to protect the personal data of the data subjects from any data breach, thus ensuring the rights of natural persons. Following the above, this paper aims to analyze the current system of international transfers of personal data under the General Data Protection Regulation (EU) 2016/679 (hereinafter: the Regulation), together with other related legal sources and other current events in the subject area. For example, the CJEU's decision in the Schrems II judgement had a significant impact on the interpretation of the Regulation and how international transfers must be carried out, creating new requirements in this context to ensure the protection of individuals. In addition, the area of international data transfers was shaped in 2021 by the United Kingdom's withdrawal from the EU, which challenged the regular transfers of data in that country, mainly because the Regulation no longer applies. This paper is divided into two thematic units. The first part analyzes the mechanisms of international personal data transfers to third countries under the provisions of the Regulation. The second part examines the effects of the Schrems II judgment on the further development of the transfer mechanisms established by the Regulation, and a brief overview of personal data flows inside and outside the UK following exit from the EU.

• Keywords: Opća uredba o zaštiti podataka; međunarodni prijenos osobnih podataka; mehanizmi prijenosa osobnih podataka; standardne ugovorne klauzule; Schrems II; obrada osobnih podataka
• Keywords (english): General Data Protection Regulation; international transfer of personal data; mechanisms for the transfer of personal data; standard contractual clauses; Schrems II; processing of personal data
• Language: croatian
• URN:NBN: urn:nbn:hr:199:886223
• Study programme: Title: Law; Study programme type: university; Study level: integrated undergraduate and graduate; Academic / professional title: magistar/magistra prava (magistar/magistra prava)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2022-01-03 12:56:15