Volume 27, Issue 1 (2023)
CLR 2023, 27(1): 105-132 |
Back to browse issues page
Download citation:
BibTeX | RIS | EndNote | Medlars | ProCite | Reference Manager | RefWorks
Send citation to:
BibTeX | RIS | EndNote | Medlars | ProCite | Reference Manager | RefWorks
Send citation to:
Ahmadvand B, Jahan shahi A. Comparative Studying the Personal Data in the European Union
and Iranian Legal System. CLR 2023; 27 (1) :105-132
URL: http://clr.modares.ac.ir/article-20-66499-en.html
URL: http://clr.modares.ac.ir/article-20-66499-en.html
1- Assistant Professor in Public Law, Department of Theory-Oriented STI Studies, National Research Institute for Science Policy, Tehran, Iran , behnazahmadvand@gmail.com
2- MA. in Private Law, Faculty of Law & Political Sciences, University of Shiraz, Shiraz, Iran
2- MA. in Private Law, Faculty of Law & Political Sciences, University of Shiraz, Shiraz, Iran
Abstract: (852 Views)
Personal data, as one of the key concepts in the field of personal data protection legislation, is defined in the General Data Protection Regulation as any information relating to an identified or identifiable natural person. Identifying a person directly or indirectly may be through data content or the purpose of data processing or the effect of data processing on the person. In EU law, to determine whether a natural person can be identified through data processing, all means that are reasonably likely to be used by the controller or processor must be taken into account, and to ensure whether there is a reasonable possibility to determine whether a natural person is present or not, all objective factors must be considered, such as the cost and time required for identification and the technology available at the time of processing. Based on the criterion of identifiability, data that may potentially lead to the identification of a person in the future is also covered by the law; such a standard can create the necessary dynamics in the laws. Iran's legislator has differentiated in the protection of private and non-private data and has limited compliance with processing rules to the first category, but the approach of the draft data protection bill has similarities with European Union and has provided broader protection, however, it needs to be amended by adding the criterion of identification to the legal definition, as well as the protection of the data of the deceased.
Keywords: Personal Data, Identification of a Natural Person, Reasonableness of Identification, General Data Protection Regulation, E-Commerce Law, Data Protection Bill, Privacy in Cyberspace
Article Type: Brief Communication |
Subject:
Comparative Law
Received: 2023/01/2 | Accepted: 2023/05/27 | Published: 2023/07/5
Received: 2023/01/2 | Accepted: 2023/05/27 | Published: 2023/07/5
Send email to the article author
| Rights and permissions | |
 |
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License. |