+
+
Data subject's consent in Directive 95/46/EC
+
- Authors:
+- François Mestre
+
+
- Contributors:
+- Víctor Rodríguez Doncel
+
+
- Download serialization:
- License:
+
+
+
+
+
Provenance of this page
+
+
+
+Ontology Specification Draft
+
+
+
+
+
+
+
+
+
+
6. Acknowledgements back to ToC
+
The authors would like to thank Silvio Peroni for developing LODE, a Live OWL Documentation Environment, which is used for representing the Cross Referencing Section of this document and Daniel Garijo for developing Widoco, the program used to create the document template used in this documentation.
+
+
+
\ No newline at end of file
diff --git a/OnToology/ontologies/eulr-consent.owl/documentation/ontology.n3 b/OnToology/ontologies/eulr-consent.owl/documentation/ontology.n3
new file mode 100644
index 0000000..81d69e9
--- /dev/null
+++ b/OnToology/ontologies/eulr-consent.owl/documentation/ontology.n3
@@ -0,0 +1,130 @@
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff8
_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff6 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff8 _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff9 .
+ "NEED TO ADD HERE A REFERENCE TO Working Party 29\nOpinion 15/2011 on the definition of consent" .
+ "When must the consent be provided?\n\nConsent must be provided before the processing of personal data starts, but it can also be required in the course of a processing, where there is a new purpose. This is stressed in various provisions of Directive 2002/58/EC, either through the requirement \"prior\" (e.g. Article 6.3) or through the wording of the provisions (e.g. Article 5.3).\n\nUntil when is the consent valid?\n\nIndividuals who have consented should be able to withdraw their consent, preventing further processing of their data. This is confirmed also under the ePrivacy Directive for specific data processing operations based on consent, such as the processing of location data other than traffic data." .
+ .
+ .
+ .
+ "As to how consent must be provided, Article 8.2(a) requires explicit consent to process sensitive data, meaning an active response, oral or in writing, whereby the individual expresses his/her wish to have his/her data processed for certain purposes. Therefore, express consent cannot be obtained by the presence of a pre-ticked box. The data subject must take some positive action to signify consent and must be free not to consent." .
+ .
+ .
+ .
+ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff2 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff2 _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff3 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7feb "true"^^ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7feb .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7feb .
+ .
+ "Relevance of consent as an enabler of the individual\u2019s autonomy and self-determination (Kant)" .
+ "NEED TO ADD HERE A REFERENCE TO Working Party 29\nOpinion 15/2011 on the definition of consent" .
+ "Where does the consent apply? (in which operations?)\n\nGenerally speaking, the legal framework of Directive 95/46/EC applies whenever consent is sought, independently of whether this happens off-line or on-line. For example, the same rules apply when a bricks and mortar retailer seeks sign up for a loyalty card scheme via a paper form, as would be the case if it did this through its Internet site. In addition, the ePrivacy Directive specifies certain data processing operations which are subject to consent: they mostly relate to the processing of data in connection with the provision of publicly available electronic communication services. The requirements for consent to be valid within Directive 2002/58/EC are the same as under Directive 95/46/EC" .
+ "What is the distinction of the concept of consent from the concept of \u201Cright to object\u201D?\n\nSituations where data controllers use consent as a legal ground to process personal data should not be confused with situations where the controller bases the processing on other legal grounds which entail an individual right to object. For example, this may be the case when the processing relies on the 'legitimate interests' of the data controller ex Article 7(f) of Directive 95/46/EC, yet the individual has the right to object ex Article 14(a) of Directive 95/46/EC. Another example is when a data controller sends e-mail communications to existing clients in order to promote the data controller's own or similar products or services, however, individuals have a right to object under Article 13.2 of Directive 2002/58/EC. In both cases, the data subject has the right to object to the processing, this is not the same as consent." .
+ "Directive 95/46/EC Article 2 (h) of Directive 95/46/EC defines consent as \"any freely given specific and informed indication of his wishes by which the data subject signifies his agreement to personal data relating to him being processed\"" .
+ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff7 "true"^^ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff7 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff7 .
+ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff1 "What are the legal conditions for the consent to be valid (elements of a valid consent)?" .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff1 _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff0 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff1 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff1 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff1 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fea _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe8 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fea _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7feb .
+ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe9 "true"^^ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe9 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe9 .
+ "NEED TO ADD REFERENCE to Working Party 29 Opinion 15/2011 on the definition of consent" .
+ "Valid consent presupposes individuals' capacity to consent. Rules regarding the capacity to consent are not harmonised and may therefore vary from Member State to Member State." .
+ .
+ .
+ .
+ .
+ .
+ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff6 _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff4 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff6 _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff7 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fef "true"^^ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fef .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fef .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff0 _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fee .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff0 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ffc _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ffa .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ffc .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe8 _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe6 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe8 _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe9 .
+ "NEED TO ADD A REFERENCE TO WP29 opinion on definition of consent" .
+ "What are the modalities of the prior informed consent?\n\nConsent must be collected in a way that assures its validity.\nThe Regulations does not prescribe how consent is to be obtained.\nEach Member State DPO provides its own guidance." .
+ .
+ _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ffc .
+ .
+ "Consent must be specific. Blanket consent without determination of the exact purposes does not meet the threshold. Rather than inserting the information in the general conditions of the contract, this calls for the use of specific consent clauses, separated from the general terms and conditions." .
+ .
+ .
+ .
+ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff5 "true"^^ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff5 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff5 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fee _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fec .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fee _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fef .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ffb "true"^^ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ffb .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ffb .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe7 "true"^^ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe7 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe7 .
+ .
+ .
+ .
+ .
+ "V\u00EDctor Rodr\u00EDguez Doncel" .
+ "Data subject's consent in Directive 95/46/EC" .
+ "Fran\u00E7ois Mestre" .
+ "This ontology may be copied/redistributed under a Creative Commons CC-BY-NC 4.0 licence https://creativecommons.org/licenses/by-nc-nd/4.0/, attributing FrancoisMestre.com and linking to CIOlaws.com" .
+ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff4 _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff2 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff4 _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff5 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fed "true"^^ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fed .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fed .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ffa _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff8 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ffa _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ffb .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe6 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe6 _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fe7 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff9 "true"^^ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff9 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff9 .
+ "What information must be provided?\n\nArticle 10\n\nInformation in cases of collection of data from the data subject\n\nMember States shall provide that the controller or his representative must provide a data subject from whom data relating to himself are collected with at least the following information, except where he already has it:\n\n(a) the identity of the controller and of his representative, if any;\n\n(b) the purposes of the processing for which the data are intended;\n\n(c) any further information such as\n\n- the recipients or categories of recipients of the data,\n\n- whether replies to the questions are obligatory or voluntary, as well as the possible consequences of failure to reply,\n\n- the existence of the right of access to and the right to rectify the data concerning him\n\nin so far as such further information is necessary, having regard to the specific circumstances in which the data are collected, to guarantee fair processing in respect of the data subject.\n\nArticle 11\n\nInformation where the data have not been obtained from the data subject\n\n1. Where the data have not been obtained from the data subject, Member States shall provide that the controller or his representative must at the time of undertaking the recording of personal data or if a disclosure to a third party is envisaged, no later than the time when the data are first disclosed provide the data subject with at least the following information, except where he already has it:\n\n(a) the identity of the controller and of his representative, if any;\n\n(b) the purposes of the processing;\n\n(c) any further information such as\n\n- the categories of data concerned,\n\n- the recipients or categories of recipients,\n\n- the existence of the right of access to and the right to rectify the data concerning him\n\nin so far as such further information is necessary, having regard to the specific circumstances in which the data are processed, to guarantee fair processing in respect of the data subject.\n\n2. Paragraph 1 shall not apply where, in particular for processing for statistical purposes or for the purposes of historical or scientific research, the provision of such information proves impossible or would involve a disproportionate effort or if recording or disclosure is expressly laid down by law. In these cases Member States shall provide appropriate safeguards." .
+ "NEED TO ADD REFERENCE to art 10 and 11 of Dir 95/46/EC" .
+ .
+ "For data other than sensitive data, Article 7(a) requires consent to be unambiguous. \"Unambiguous\" calls for the use of mechanisms to obtain consent that leave no doubt as to the individual's intention to provide consent. In practical terms, this requirement enables data controllers to use different types of mechanisms to seek consent, ranging from statements to indicate agreement (express consent), to mechanisms that rely on actions that aim at indicating agreement.\n\nConsent based on an individual's inaction or silence would normally not constitute valid consent, especially in an on-line context. This is an issue that arises in particular with regard to the use of default settings which the data subject is required to modify in order to reject the processing. For example, this is the case with the use of pre-ticked boxes or Internet browser settings that are set by default to collect data." .
+ .
+ .
+ .
+ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff3 "true"^^ .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff3 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7ff3 .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fec _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fea .
+_:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fec _:AX2dX1c9e790cX3aX159f53ce456X3aXX2dX7fed .
+ .
+ .
+ .
+ .
+ .
+