Skip Navigation


International Journal of Law and Information Technology Advance Access originally published online on May 19, 2008
International Journal of Law and Information Technology 2009 17(3):233-251; doi:10.1093/ijlit/ean007
This Article
Right arrow Full Text
Right arrow Full Text (PDF)
Right arrow All Versions of this Article:
17/3/233    most recent
ean007v1
Right arrow Alert me when this article is cited
Right arrow Alert me if a correction is posted
Services
Right arrow Email this article to a friend
Right arrow Similar articles in this journal
Right arrow Alert me to new issues of the journal
Right arrow Add to My Personal Archive
Right arrow Download to citation manager
Right arrowRequest Permissions
Google Scholar
Right arrow Articles by Bercic, B.
Right arrow Articles by George, C.
Social Bookmarking
Add to CiteULike   Add to Connotea   Add to Del.icio.us  
What's this?

International Journal of Law and Information Technology Vol. 17 No. 3 © Oxford University Press 2008; all rights reserved

Identifying Personal Data Using Relational Database Design Principles1

DR Bostjan Bercic

DR Carlisle George

Institute for Economics, Law and Informatics, Celovska 136, SI-1000 Ljubljana, Slovenia Email: bostjan.bercic{at}ipri-zavod.si
School of Computing Science, Middlesex University, The Burroughs, London, NW4 4BT, United Kingdom Email: c.george{at}mdx.ac.uk


  Abstract

The European Union (EU) directive on personal data and resulting data protection legislation of EU member states require from data controllers, a notification of their activities to the appropriate supervisory authority. Included in this notification is also a description of the data or categories of data which are processed. Legislation in some EU member states (e.g. Slovenia) require that not only a description but also a concrete list of personal data attributes needs to be included in this notification. In such cases it is sometimes difficult to ascertain in concreto whether some collected attribute represents personal data (and should therefore be included in the list of attributes) or whether it is a non-personal attribute. Similarly, under the EU directive data subjects have various rights, including the right to access their data, and data controllers are sometimes faced with the problem of determining whether various data items constitute personal data. Further, the impending case in the European Court of Human Rights arising out of the decision of the UK case of Durant v Financial Services Authority (which narrowed the scope of personal data) has added some uncertainty to the interpretation of the EU directive. In view of the legal uncertainty regarding what constitutes personal data, this paper examines whether relational database design principles can be applied to identifying personal data. Using this approach, the paper explores various parallels between personal data identification and principles of relational database design. The paper thus makes a novel contribution to the ongoing uncertainty in data protection law. The paper also discusses the wider issue of applying computing/scientific principles to interpreting the law.


Add to CiteULike CiteULike   Add to Connotea Connotea   Add to Del.icio.us Del.icio.us    What's this?




Disclaimer: Please note that abstracts for content published before 1996 were created through digital scanning and may therefore not exactly replicate the text of the original print issues. All efforts have been made to ensure accuracy, but the Publisher will not be held responsible for any remaining inaccuracies. If you require any further clarification, please contact our Customer Services Department.