Criminalization of the personal data breach

Maciej Nawacki

Uniwersytet Warmińsko-Mazurski w Olsztynie Wydział Prawa i Administracji


Abstract

The problem of the scope of criminalization under Art. 107 Act on Personal Data Protection is important when processing personal data or sets of personal data is common. It is not clear to what extent the provision of Art. 107 Act on PDP includes the criminalization of violation of the provisions of the General Data Protection Regulation. Moreover, the imposition of criminal sanctions for infringement of national data protection law and administrative sanctions should not lead to a breach of the principle of ne bis in idem. Undoubtedly, the more careful editing of Art. 107 Act on PDP would avoid many doubts about the interpretation of this provision. The article is concerned with the analysis of the personal data breach. The purpose of this study is to interpret the features of “non-permissible” and “unauthorized processing personal data”. The key is to determine the meaning and mutual relationship between these terms and the personal data breach. The skilful use of interpretation rules that is
known in criminal law and administrative law allows criminals to be held responsible for the most serious violations of the rules of personal data processing. The author draws attention to the relationship between general conditions for the corrective powers, imposing  administrative fines and the personal data breach. The legal analysis indicates that the term of personal data breach determines the scope of criminalization of the crime of illegal processing of personal data.


Keywords:

personal data, personal data breach, criminal law, administrative penalties, the offense of illegal processing of personal data, criminalization


Dattenschutz-Grundverordnung. Bundesdatenschutzgesetz. Kommentar, pod red. J. Kühling, B. Buchner, München 2020   Google Scholar

Kodeks postępowania karnego. Tom. I Komentarz. Art. 1-424, pod red. D. Drajewicza, Warszawa 2021   Google Scholar

Krzysztofek M., Ochrona danych osobowych w Unii Europejskiej, Warszawa 2014   Google Scholar

Marek A., Kodeks karny. Komentarz, Warszawa 2007   Google Scholar

Morawski L., Zasady wykładni prawa, Toruń 2006   Google Scholar

Nowak P., O skutkowości przestępstw formalnych, Zeszyty Prawnicze, t. 14, nr 1 z 2014 r, s. 159 – 175.   Google Scholar

Ochrona danych osobowych. Przewodnik po ustawie i RODO z wzorami, pod red. M. Gawrońskiego, Warszawa 2018   Google Scholar

Ogólne rozporządzenie o ochronie danych osobowych. Komentarz pod. red. M. Sakowskiej- Baryła, Warszawa 2018   Google Scholar

System Prawa Karnego. T. 11. Szczególne dziedziny prawa karnego. Prawo karne wojskowe, skarbowe i pozakodeksowe. pod. red.. M. Bojarskiego, Warszawa 2014   Google Scholar

Ustawa o ochronie danych osobowych. Komentarz pod red. P. Litwińskiego, Warszawa 2018   Google Scholar

Źródła prawa karnego. System Prawa Karnego. Tom 2, pod red. T. Bojarskiego, Warszawa 2011   Google Scholar


Published
2021-05-22

Cited by

Nawacki, M. (2021). Criminalization of the personal data breach. Studia Prawnoustrojowe, (52). https://doi.org/10.31648/sp.6615

Maciej Nawacki 
Uniwersytet Warmińsko-Mazurski w Olsztynie Wydział Prawa i Administracji