(O)betydelsen av näringsfrihet i GDPR - En analys av avvägningen mellan rätten till skydd av personuppgifter och näringsfriheten i GDPR
(2023) JURM02 20232Department of Law
Faculty of Law
- Abstract (Swedish)
- Alla verksamheter som behandlar personuppgifter, men en anknytning till EU, måste uppfylla kravet på laglighet i GDPR. En särskilt viktig laglig grund i praktiken utgörs av artikel 6.1(f) GDPR. I korthet följer av artikeln att en av-vägning måste göras mellan den personuppgiftsansvariges berättigade intresse och den registrerades intressen och grundläggande rättigheter.
Idag använder allt fler företag personuppgifter i sina respektive näringsverksamheter för vinstrelaterade intressen. I sådana situationer aktualiseras två intressen med grund i EU-stadgan: dels fysiska personers rätt till skydd av personuppgifter, dels företagens rätt att utöva en ekonomisk eller kommersiell verksamhet i enlighet med näringsfriheten.
Förevarande... (More) - Alla verksamheter som behandlar personuppgifter, men en anknytning till EU, måste uppfylla kravet på laglighet i GDPR. En särskilt viktig laglig grund i praktiken utgörs av artikel 6.1(f) GDPR. I korthet följer av artikeln att en av-vägning måste göras mellan den personuppgiftsansvariges berättigade intresse och den registrerades intressen och grundläggande rättigheter.
Idag använder allt fler företag personuppgifter i sina respektive näringsverksamheter för vinstrelaterade intressen. I sådana situationer aktualiseras två intressen med grund i EU-stadgan: dels fysiska personers rätt till skydd av personuppgifter, dels företagens rätt att utöva en ekonomisk eller kommersiell verksamhet i enlighet med näringsfriheten.
Förevarande uppsats åsyftar att analysera forskningsfrågan om hur rätten till skydd av personuppgifter förhåller sig till näringsfriheten inom ramen för artikel 6.1(f) GDPR. I uppsatsen har de EU-rättsliga rättskällorna använts för att fastställa gällande rätt och för att kunna besvara forskningsfrågan. Uppsatsen har av den anledningen använt en rättsdogmatisk metod och dessutom en EU-rättslig metod för att säkerställa resultatets riktighet.
För att besvara forskningsfrågan har uppsatsen tagit utgångspunkt i två delfrågor: dels hur rätten till skydd av personuppgifter regleras i EU-rätten, dels hur näringsfriheten regleras i EU-rätten. Utredningen visar på att rätten till skydd av personuppgifter utgör en stark och vidgående rättighet, medan näringsfriheten förhåller sig svagare i EU-rätten. Det finns av den anledningen en obalans mellan rättigheternas respektive tyngd i EU-stadgan.
Uppsatsen visar på att EU-domstolen i princip konsekvent lämnat näringsfriheten därhän i avvägningen enligt artikel 6.1(f) GDPR. Näringsfriheten kan dock i stället sägas ha beaktats indirekt i avvägningen enligt artikeln i GDPR. Detta följer av att EU-domstolen ändå avvägt sådana ekonomiska och kommersiella intressen som omfattas av näringsfriheten mot rätten till skydd av personuppgifter.
Uppsatsen visar vidare på att det finns en presumtion i artikel 6.1(f) GDPR för att rätten till skydd av personuppgifter överväger sådana intressen som omfattas av näringsfriheten. Det sagda gäller även om artikel 16 EU-stadgan uttryckligen skulle beaktas i avvägningen. Detta följer av det faktum att rätten till skydd av personuppgifter generellt sätt utgör en starkare rättighet i EU-stadgan än näringsfriheten. Sammantaget förhåller rätten till skydd av person-uppgifter sig överordnad i förhållande till näringsfriheten inom ramen för artikel 6.1(f) GDPR (Less) - Abstract
- Any businesses that process personal data, with a connection to the EU, must fulfill the legality requirement of the GDPR. A particularly important legal basis in practice is Article 6.1(f) GDPR. In short, the article requires a balance to be struck between the legitimate interest of the controller and the fundamental rights and interests of the data subject.
Today, more and more companies are using personal data in their respective businesses for profit-related interests. In such situations, two interests based on the EU Charter come into play: the right of natural persons to the protection of personal data, and the right of companies to pursue an economic or commercial activity in accordance with the freedom to conduct a business.
... (More) - Any businesses that process personal data, with a connection to the EU, must fulfill the legality requirement of the GDPR. A particularly important legal basis in practice is Article 6.1(f) GDPR. In short, the article requires a balance to be struck between the legitimate interest of the controller and the fundamental rights and interests of the data subject.
Today, more and more companies are using personal data in their respective businesses for profit-related interests. In such situations, two interests based on the EU Charter come into play: the right of natural persons to the protection of personal data, and the right of companies to pursue an economic or commercial activity in accordance with the freedom to conduct a business.
This essay aims to analyze the research question of how the right to protection of personal data relates to the freedom to conduct a business in the framework of Article 6.1(f) GDPR. In this essay, the sources of EU law have been used to establish the law and to answer the research question. For this reason, the essay has used a legal dogmatic method and an EU legal method to ensure the accuracy of the results.
In order to answer the research question, the essay has been based on two sub-questions: how the right to protection of personal data respectively how the freedom to conduct a business is regulated in EU law. The study shows that the right to protection of personal data is a strong and extensive right, while the freedom to conduct a business constitutes a relatively weak right. For this reason, there is an imbalance between the respective weight of the rights in the EU Charter.
The essay shows that the CJEU has in principle consequently omitted the freedom to conduct a business in the balancing exercise under Article 6.1(f) GDPR. However, the freedom to conduct a business can be said to have been given indirect importance in the balancing exercise under the article. This follows from the fact that the CJEU nevertheless has balanced the economic and commercial interests covered by the freedom to conduct a business against the right to protection of personal data.
The essay further demonstrates that there is a presumption in Article 6.1(f) GDPR that the right to protection of personal data will override the interests covered by the freedom to conduct a business. The foregoing applies even if Article 16 of the EU Charter were to be explicitly taken into account in the balancing exercise. This follows from the fact that the right to protection of personal data generally constitutes a stronger right in the EU Charter than the freedom to conduct a business. Overall, the right to protection of personal data takes precedence over the freedom to conduct a business in the framework of Article 6.1(f) GDPR. (Less)
Please use this url to cite or link to this publication:
http://lup.lub.lu.se/student-papers/record/9143401
- author
- Berggren, Filippa LU
- supervisor
- organization
- alternative title
- The (in)significance of the freedom to conduct a business in the GDPR - An analysis of the balance between the right to the protection of personal data and the freedom to conduct business in the GDPR
- course
- JURM02 20232
- year
- 2023
- type
- H3 - Professional qualifications (4 Years - )
- subject
- keywords
- EU-rätt, EU law, GDPR, näringsfrihet, Freedom to conduct a business, rätten till skydd av personuppgifter, Protection of personal data
- language
- Swedish
- id
- 9143401
- date added to LUP
- 2024-01-25 12:22:50
- date last changed
- 2024-01-25 12:22:50
@misc{9143401,
abstract = {{Any businesses that process personal data, with a connection to the EU, must fulfill the legality requirement of the GDPR. A particularly important legal basis in practice is Article 6.1(f) GDPR. In short, the article requires a balance to be struck between the legitimate interest of the controller and the fundamental rights and interests of the data subject.
Today, more and more companies are using personal data in their respective businesses for profit-related interests. In such situations, two interests based on the EU Charter come into play: the right of natural persons to the protection of personal data, and the right of companies to pursue an economic or commercial activity in accordance with the freedom to conduct a business.
This essay aims to analyze the research question of how the right to protection of personal data relates to the freedom to conduct a business in the framework of Article 6.1(f) GDPR. In this essay, the sources of EU law have been used to establish the law and to answer the research question. For this reason, the essay has used a legal dogmatic method and an EU legal method to ensure the accuracy of the results.
In order to answer the research question, the essay has been based on two sub-questions: how the right to protection of personal data respectively how the freedom to conduct a business is regulated in EU law. The study shows that the right to protection of personal data is a strong and extensive right, while the freedom to conduct a business constitutes a relatively weak right. For this reason, there is an imbalance between the respective weight of the rights in the EU Charter.
The essay shows that the CJEU has in principle consequently omitted the freedom to conduct a business in the balancing exercise under Article 6.1(f) GDPR. However, the freedom to conduct a business can be said to have been given indirect importance in the balancing exercise under the article. This follows from the fact that the CJEU nevertheless has balanced the economic and commercial interests covered by the freedom to conduct a business against the right to protection of personal data.
The essay further demonstrates that there is a presumption in Article 6.1(f) GDPR that the right to protection of personal data will override the interests covered by the freedom to conduct a business. The foregoing applies even if Article 16 of the EU Charter were to be explicitly taken into account in the balancing exercise. This follows from the fact that the right to protection of personal data generally constitutes a stronger right in the EU Charter than the freedom to conduct a business. Overall, the right to protection of personal data takes precedence over the freedom to conduct a business in the framework of Article 6.1(f) GDPR.}},
author = {{Berggren, Filippa}},
language = {{swe}},
note = {{Student Paper}},
title = {{(O)betydelsen av näringsfrihet i GDPR - En analys av avvägningen mellan rätten till skydd av personuppgifter och näringsfriheten i GDPR}},
year = {{2023}},
}