The limits of the extraterritorial effect of the EU general data protection regulation Cover Image

Granice vanteritorijalnog dejstva opšte uredbe o zaštiti podataka Evropske unije
The limits of the extraterritorial effect of the EU general data protection regulation

Author(s): Mihajlo A. Vučić
Subject(s): Law, Constitution, Jurisprudence, EU-Legislation
Published by: Институт за међународну политику и привреду
Keywords: GDPR;extraterritoriality; data protection; right to privacy; EU

Summary/Abstract: The EU General Data Protection Regulation (GDPR) has an impact on standards of data protection in other legal systems due to its extraterritorial effect. The attractive internal market is the main reason for foreign companies that use personal data of the EU citizens or residents in their business operations to comply with its provisions. Therefore the EU jurisdiction stretches extraterritorially. The extraterritorial activity of one sovereign jurisdiction, in principle, is not contrary to international law but creates problems in practical application and enforcement, as well as objections of other sovereign jurisdictions that can claim a stronger link with the legal issue at hand. Through international treaties that regulate the extraterritorial jurisdictional issues, these problems can be solved. However, the right of personal data protection of the GDPR is constructed as a human right, absolutely protected, which automatically negates the effect of such a treaty. The Court of Justice of the EU has shown the willingness to defend the integrity of this right. This article raises the question of whether the attraction of the internal market together with the conception of the right to data protection as a human right can impose the EU’s data protection model as a global model. It is argued that economically powerful states, even if they share human rights values with the EU, can stand the extraterritorial impact of the GDPR shown through the lens of the EU-US relationship. However, the real problem exists in the conflict of jurisdiction with an economic power with a totally different system of values concerning human rights, and especially data protection rights, such as China. In this context, the article’s conclusion states that, in the best scenario, the extraterritorial effect of the GDPR can lead to the EU’s data protection model becoming a role model fora bloc of like-minded legal systems, especially since data protection in current international relations is rather a security than an economic issue.

  • Issue Year: 2020
  • Issue No: 73-74
  • Page Range: 41-59
  • Page Count: 19
  • Language: Serbian