Right of Access under GDPR and Copyright



The paper discusses the right to obtain a copy of personal data based on the access right guaranteed in Articles 15 (3) and limited in 15 (4) of the GDPR. Main question is to what extent, the access right provided to data subject under the data protection rules is compatible with copyright. We argue that the subject matter of Article 15 (3) of the GDPR - copy of personal data – may infringe copyright protection of third parties but not a copyright protection attributed to the data controllers.

Firstly, because the right of access and copyright may be in certain circumstances incompatible. Secondly, the data controllers are primarily responsible for balancing conflicting rights and neutral balancing exercise could only be applied by the Data Protection Authorities. Thirdly, the case law of the CJEU regarding this issue will need to be developed because the copy as a result of access right may be considered as a new element in data protection law.

Balancing of Interests and Rights, Computer Program Directive, Copy of the Personal Data Undergoing Processing, Copyright, Database Directive, Data Controller, Data Protection Directive, Data Subject, General Data Protection Regulation, Right of Access

[1] Article 29 Working Party. (2016) Guidelines on the right “to data portability”. 16/EN WP 242 rev.01. Brussels: Directorate C of the European Commission. Available from: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=611233 [Accessed 19 September 2018].

[2] Berne Convention for the Protection off Literary and Artistic Works, 19 November 1984. Available from: http://www.wipo.int/wipolex/en/treaties/text.jsp?file_id=283693 [Accessed 19 September 2018].

[3] Bygrave, L. A. (2015) Information Concepts in Law: Generic Dreams and Definitional Daylight. Oxford Journal of Legal Studies. 35, (1), pp. 91–120. Available from: http://ojls.oxfordjournals.org/content/35/1/91 [Accessed 19 September 2018]. https://doi.org/10.1093/ojls/gqu011

[4] Carey, P. (2009) Data Protection, A Practical Guide to UK and EU Law. 3rd ed. New York: Oxford University Press.

[5] European Commission. (2017) Commission Staff Working Document on the free flow of data and emerging issues of the European data economy, Accompanying the document, Communication Building a European data economy, SWD.(2017) 2 final. Brussels. Available from: https://ec.europa.eu/digital-single-market/en/news/staff-working-document-free-flow-data-and-emerging-issues-european-data-economy [Accessed 19 September 2018].

[6] Copyright Act 2015, SI 185/2015. Slovak Republic. In Slovak.

[7] Copyright, Designs and Patents Act 1988 (c. 48). United Kingdom of Great Britain and Northern Ireland. London: HMSO. In English.

[8] Charter of Fundamental Rights of the European Union, 26 October 2012, (2012/C 326/02) Available from: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:12012P/TXT&from=EN [Accessed 19 September 2018].

[9] Directive 2009/24/EC of the European Parliament and of the Council of 23 April 2009 on the legal protection of computer programs. Official Journal of the European Union (OJ L 111/16) 5 May. Available from: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32009L0024&from=EN [Accessed 19 September 2018].

[10] Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. Official Journal of the European Union (OJ L 281/31) 23 November. Available from: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:31995L0046&from=EN [Accessed 19 September 2018].

[11] Directive 2001/29/EC of the European Parliament and of the Council of 22 May 2001 on the harmonisation of certain aspects of copyright and related rights in the information society. Official Journal of the European Union (OJ L 167/10) 22 June. Available from: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32001L0029&from=EN [Accessed 19 September 2018].

[12] Directive 96/9/EC of the European Parliament and of the Council of 11 March 1996 on the legal protection of databases. Official Journal of the European Union (OJ L 77/20) 27 March. Available from: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:31996L0009&from=EN [Accessed 19 September 2018].

[13] Goldstein, P. and Hugenholtz, B. (2010) International Copyright, Principles, Law, and Practice. 2nd ed. Oxford University Press.

[14] Guadamuz, A. (2017) Artificial intelligence and copyright. [online] WIPO Magazine. Available from: http://www.wipo.int/wipo_magazine/en/2017/05/article_0003.html [Accessed 19 September 2018].

[15] Jánošík, J. (2017) Transparency of machine-learning algorithms is a double-edged sword. [online] welivesecurity. Available from: https://www.welivesecurity.com/2017/11/13/transparency-machine-learning-algorithms/ [Accessed 19 September 2018].

[16] European Commission. (2017) JRC Technical Report. The economics of ownership, access and trade in digital data. JRC Digital Economy Working Paper 2017-01. JRC104756. Available from: https://ec.europa.eu/jrc/sites/jrcsh/files/jrc104756.pdf [Accessed 19 September 2018].

[17] Judgement of 16 July 2009, Infopaq International A/S v. Danske Dagblades Forening, C-5/08, EU:C:2009:465.

[18] Judgement of 1 December 2011, Eva-Maria Painer v. Standard VerlagsGmbH, C-145/10, EU:C:2011:798.

[19] Judgement of 17 July 2014, YS v. Minister voor Immigratie, Integratie en Asiel, C-141/12, and Minister voor Immigratie, Integratie en Asiel v. M.S, C-372/12, EU:C:2014:2081.

[20] Judgement of 9 November 2004, Fixtures Marketing Ltd v. Organismos prognostikon agonon podosfairou AE (OPAP), C-444/02, EU:C:2004:697.

[21] Judgement of 2 May 2012, SAS INSTITUTE v. World Programming Ltd, C-406/10, EU:C:2012:259.

[22] Judgement of 1 March 2012, Football Dataco Ltd and others against Yahoo! UK and others, C-604/10, EU:C:2012:115.

[23] Judgement of 22 December 2010, Bezpečnostní softwarová asociace – Svaz softwarové ochrany v. Ministerstvo kultury, C-393/09, EU:C:2010:816.

[24] Judgment of 6 November 2003, Bodil Lindqvist, C-101/01, EU:C:2003:596.

[25] Judgment of 29 January 2008 Productores de Música de España (Promusicae) v. Telefónica de España SAU, C-275/06, EU:C:2008:54.

[26] Judgment of the Court of 24 November 2011 Scarlet Extended SA v. Société belge des auteurs, compositeurs et éditeurs SCRL (SABAM), C-70/10, EU:C:2011:771.

[27] European Commission. (2016) Legal study on Ownership and Access to Data. European Commission DG Communications Networks, Content & Technology, Osborne Clarke LL.P. Available from: https://publications.europa.eu/en/publication-detail/-/publication/d0bec895-b603-11e6-9e3c-01aa75ed71a1 [Accessed 19 September 2018].

[28] Opinion of Advocate General of 26 January 2017, Valsts policijas Rīgas reģiona pārvaldes Kārtības policijas pārvalde v. Rīgas pašvaldības SIA ‘Rīgas satiksme’, C-13/16, EU:C:2017:43.

[29] Polčák, R. (2016) Informace a data v právu. Revue pro právo a technologie, 7 (13), pp. 67–91. Available from: https://journals.muni.cz/revue/article/view/4946 [Accessed 19 September 2018].

[30] European Commission. (2012) Proposal for the Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data’ (General Data Protection Regulation). COM(2012) 11 final. Available from: http://www.europarl.europa.eu/RegData/docs_autres_institutions/commission_europeenne/com/2012/0011/COM_COM(2012)0011_EN.pdf [Accessed 19 September 2018].

[31] Council of the European Union. (2015) Proposal for the Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data’ (General Data Protection Regulation). ST-9565-2015-INIT. Available from: http://data.consilium.europa.eu/doc/document/ST-9565-2015-INIT/en/pdf [Accessed 19 September 2018].

[32] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2017 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. Official Journal of the European Union (OJ L 119/1) 4 May. Available from: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN [Accessed 19 September 2018].

[33] Švidroň, J. (2000) Základy práva duševného vlastníctva. Bratislava: JUGA.

[34] Trade-Related Aspects of Intellectual Property Rights (TRIPS), 15 April 1994. Available from: https://www.wto.org/english/docs_e/legal_e/27-trips_01_e.htm [Accessed 19 September 2018].

[35] Wilkinson, M.A. (2001) The Copyright Regime and Data Protection Legislation. In: Ysolde Gendreau (ed.). Law Publications. Cowansville, Les Editions Yvon Blais Inc., pp. 77–100. Available from: http://works.bepress.com/ma_wilkinson/17/ [Accessed 19 September 2018].

[36] Zech, H. (2015) Information as Property. JIPITEC, 6, pp. 192–197. Available from: https://www.jipitec.eu/issues/jipitec-6-3-2015/4315/zech%206%20%283%29.pdf [Accessed 19 September 2018].