Welcome to the Jungle: The Liability of Internet Intermediaries for Privacy Violations in Europe

In Europe, roughly three regimes apply to the liability of Internet intermediaries for privacy violations conducted by users through their network. These are: the e-Commerce Directive, which, under certain conditions, excludes them from liability; the Data Protection Directive, which imposes a number of duties and responsibilities on providers processing personal data; and the freedom of expression, contained inter alia in the ECHR, which, under certain conditions, grants Internet providers several privileges and freedoms. Each doctrine has its own field of application, but they also have partial overlap. In practice, this creates legal inequality and uncertainty, especially with regard to providers that host online platforms and process User Generated Content.

Platform Privacy: The Missing Piece of Data Protection Legislation

After years of deliberation, the EU commission sped up the reform process of a common EU digital policy considerably in 2015 by launching the EU digital single market strategy. In particular, two core initiatives of the strategy were agreed upon: General Data Protection Regulation and the Network and Information Security (NIS) Directive law texts. A new initiative was additionally launched addressing the role of online platforms. This paper focuses on the platform privacy rationale behind the data protection legislation, primarily based on the proposal for a new EU wide General Data Protection Regulation. We analyse the legislation rationale from an Information System perspective to understand the role user data plays in creating platforms that we identify as “processing silos”. Generative digital infrastructure theories are used to explain the innovative mechanisms that are thought to govern the notion of digitalization and successful business models that are affected by digitalization. We foresee continued judicial data protection challenges with the now proposed Regulation as the adoption of the “Internet of Things” continues. The findings of this paper illustrate that many of the existing issues can be addressed through legislation from a platform perspective. We conclude by proposing three modifications to the governing rationale, which would not only improve platform privacy for the data subject, but also entrepreneurial efforts in developing intelligent service platforms. The first modification is aimed at improving service differentiation on platforms by lessening the ability of incumbent global actors to lock-in the user base to their service/platform. The second modification posits limiting the current unwanted tracking ability of syndicates, by separation of authentication and data store services from any processing entity. Thirdly, we propose a change in terms of how security and data protection policies are reviewed, suggesting a third party auditing procedure.

Darstellung von Entscheidungskriterien zur Produktion und Distribution von Online-Vorlesungen

Das Interesse an Online-Vorlesungen, -Vorträgen oder -Präsentationen für E-Learning hat deutlich zugenommen. Hierfür gibt es eine Reihe von Gründen, die mit neuen Formen der Produktion und Distribution von Online-Vorlesungen zusammenhängen. Mit der Verfügbarkeit von Rapid-Authoring-Werkzeugen wird der Workflow für die Erstellung und den Einsatz von Online-Vorlesungen erleichtert und flexibilisiert. Hierbei ist zu beobachten, dass durch die Vielzahl der Möglichkeiten im Workflow zunehmend individuelle Rahmenbedingungen und Anforderungen berücksichtigt werden können. Der folgende Beitrag beschreibt diese Veränderungen. Er fasst die Optionen im Prozess der Produktion und Distribution von Online-Vorträgen im Internet zusammen. Ein solcher Überblick über das Themengebiet ist erforderlich für das Herausarbeiten eines individuellen Workflows. Hierzu werden Entscheidungskriterien für die Auswahl von Werkzeugen und Plattformen dargestellt und die mediendidaktischen Implikationen diskutiert.