Η κατάρτιση προφίλ στο πλαίσιο του ΓΚΠΔ, της Digital Market Act και της Digital Services Act
Profiling under the General Data Protection Regulation, the Digital Market Act and the Digital Services Act
![Thumbnail](/xmlui/bitstream/handle/unipi/17424/%ce%95%ce%a1%ce%93%ce%91%ce%a3%ce%99%ce%91%20%ce%93%ce%99%ce%91%20%ce%a4%ce%97%ce%9d%20%ce%9a%ce%91%ce%a4%ce%91%ce%a1%ce%a4%ce%99%ce%a3%ce%97%20%ce%a0%ce%a1%ce%9f%ce%a6%ce%99%ce%9b%20%ce%94%ce%97%ce%9c%ce%9f%ce%a3%ce%99%ce%95%ce%a5%ce%a3%ce%97.pdf.jpg?sequence=4&isAllowed=y)
View/ Open
Keywords
Profiling ; Κατάρτιση προφίλ ; DSA ; DMA ; GDPRAbstract
The current thesis investigates the cases of profiling of the subjects, under the specific provisions of the General Data Protection Regulation (GDPR), Regulation (EU) 2022/2065 (Digital Services Act – known as DSA) and Regulation (EU) 2022/1925 (Digital Markets Act – known as DMA). The above Regulations, viewed in the light of the protection of personal data, constitute the strongest arsenal of the European Union, against the increased challenges presented for the subjects in the modern digital era we live in. More specifically, in the 1st chapter, after presenting a brief overview of the GDPR, the meaning of "profiling" under investigation will be specified, seen also in the light of the GDPR. Examples of it will be presented below, its specific conditions will be analyzed, as well as its consequences on the rights of the subjects, while special reference will be made to decisions taken on the basis of exclusively automated processing, as described in Article 22 of Regulation (EU) 2016/679. This chapter will conclude with a comprehensive list of the principles governing the processing of personal data and in particular the additional safeguards reserved by the legislator for certain cases thereof. The 2nd chapter is dedicated to DMA and the specific regulations it includes in relation to user profiling incidents. Chapter 3 of this thesis, which presents particularly extensively Case C-634/21, which was referred to the Court of Justice of the European Union, is particularly significant. The judgment issued on 07/12/2023 by the CJEU is a milestone for the interpretation and deeper understanding of Article 22 of the GDPR, but also for the protection of the rights of subjects in general against unfair automated individual decision-making practices against them. The 4th chapter deals with the other important Regulation of the European Union for the digital environment, the DSA, in the context of the analysis of which an attempt is made to identify the specific provisions for profiling and a comparative view with the corresponding provisions of the GDPR. Finally, the research will conclude with the indicative listing of some cases of f ines for profiling practices in violation of the provisions of the current legislation, while at the same time an overall evaluation of the findings of this thesis will be attempted.