Applicable Law Concerning Obligations Arising from the Infringements of Personal Data Laws Due to the Use of Artificial Intelligence Systems

Zbigniew Więckowski

Cardinal Stefan Wyszyński University in Warsaw , Poland
https://orcid.org/0000-0002-4079-0487

Marek Świerczyński

Cardinal Stefan Wyszyński University in Warsaw , Poland
https://orcid.org/0000-0002-4079-0487


Abstract

An issue that is characteristic of AI is data processing on a massive scale (giga data, Big Data). This issue is also important because of the proposition to require manufacturers to equip AI systems with a means to record information about the operation of the technology, in particular the type and magnitude of the risk posed by the technology and any negative effects that logging may have on the rights of others. Data gathering must be carried out in accordance with the applicable laws, particularly data protection laws and trade secret protection laws. Therefore, it is necessary to determine the applicable law in line with existing conflict-of-law regulations.

Keywords:

AI, personal data, data protection law, conflict-of-laws

Ahern, John, and Wiliam Binehy. Rome II Regulation on Law Applicable to Non-Contractual Obligations. Leiden: Brill, 2009.

Balcarczyk, Justyna. “Wybrane problemy związane z projektem ustawy – Prawo prywatne międzynarodowe.” Rejent, no. 7–8 (2009): 9–25.

Braciak, Joanna. Prawo do prywatności. Warsaw: Wydawnictwo Sejmowe, 2004.

Briere, Carine. “Le reglement (CE) no 864/2007 du 11 juillet 2007 sur la loi applicable aux obligations non contractuelles (Rome II).” Journal de droit international 135 (2008): 31–74.

Brkan, Maja. “Data Protection and Conflict-of-Laws: A Challenging Relationship. European Data Protection Law Review 2, no. 3 (2016): 324–341. https://doi.org/10.21552/EDPL/2016/3/8. (Crossref)

Cadio, Prudence, and Thomas Livenais. “Photographie du champ territorial du reglement données personnelles: de nouveaux opérateurs concernées?.” In Le RGDP, edited by Stéphanie Prévost, Erwan Royer, 31–36. Paris: Dalloz, 2018.

Całus, Andrzej. “Znaczenie rozporządzenia Rzym II dla unifikacji prawa właściwego dla czynów niedozwolonych w państwach członkowskich Unii Europejskiej.” In Czyny niedozwolone w prawie polskim i w prawie porównawczym edited by Mirosław Nesterowicz, 146–110. Warsaw: Wolters Kluwer, 2012.

Carruthers, Janeen, and Elizabeth Crawford. “Variations on a theme of Rome II. Reflections on proposed choice of law rules for non-contractual obligations: Part I.” Edinbourgh Law Review 9 (2005): 65–97; Part II, Edinbourgh Law Review 9 (2005): 238–266.

Czerniawski, Michał. “Zakres terytorialny a pojęcie ‘jednostki organizacyjnej’ w przepisach ogólnego rozporządzenia o ochronie danych – zarys problemu.” In Ogólne rozporządzenie o ochronie danych. Aktualne problemy prawnej ochrony danych osobowych, edited by Grzegorz Sibiga, 22–28. Warsaw: C.H. Beck, 2016.

de Hert, Paul, and Michał Czerniawski. “Expanding the European data protection scope beyond territory: Article 3 of the General Data Protection Regulation in its wider context.” International Data Protection Law 6, no. 3 (2016): 230–243. https://doi.org/10.1093/idpl/ipw008. (Crossref)

de Hert, Paul, and Papakonstantinou, Vagelis. “The proposed data protection Regulation replacing Directive 95/46/EC: A sound system for the protection of individuals.” Computer Law & Security Review 28, no. 2 (April 2012): 130–142. https://doi.org/10.1016/j.clsr.2012.01.011. (Crossref)

Dickinson, Andrew. The Rome II Regulation. Oxford: Oxford University Press, 2010.

Domagała, Natalia, Bartłomiej Oręziak and Marek Świerczyński, “Profiling in the recruitment of subjects for clinical trials in the light of GDPR.” Zeszyty Prawnicze 20, no. 2 (2020): 265–280. https://doi.org/10.21697/zp.2020.20.2.14. (Crossref)

Dornis, Tim. “When in Rome, do as the Romans do? – a defense of the lex domicilii communis: in the Rome II Regulation.” European Legal Forum 4 (2007): 152–159.

Fawcett, James, and Janeen Carruthets, and Peter North. Private International Law. Oxford: Oxford University Press, 2017.

Feraci, Ornella. “La legge applicabile alla tutela dei diritti della personalità nella prospettiva comunitaria.” Rivista di diritto internazionale, no. 4 (2009): 1020–1085.

Gömann, Merlin. “The new territorial scope of EU data protection law: deconstructing a revolutionary achievement.” Common Market Law Review 54, no. 2 (2017): 567–690. https://doi.org/10.54648/cola2017035. (Crossref)

Graziano, Thomas. “Das auf aufservertragliche Schuldverhältnisse anzuwendende Recht nacht Inkraftreten der Rom II – Verordnung.” RabelsZ 73 (2009): 1–177. (Crossref)

Haas, Gérard. La réglamentation sur la protection des données personnelles. St Herblain: Éditions ENI, 2018.

Hartley, Trevor. “Choice of Law for Non-Contractual Liability: Selected Problems under the Rome II Regulation.” ICLQ 57 (2008): 899–908. (Crossref)

Kamarinou, Dimitra, and Christopher Millard, Jatinder Singh. “Machine Learning with Personal Data.” Queen Mary School of Law Legal Studies Research Paper, no. 247(2016): 1–23.

Kozyris, Phaedon. “Rome II: Tort Conflicts on the Right Track! A Postscript to Symeon Symeonides’ Missed Opportunity.” AJCL 56 (2008): 471–497. (Crossref)

Lecomte, Frédéric. Nouvelle donne pour les données; le RGPD en quelques principes pour être prêt le 25 mai 2018. Paris: Fauves, 2018.

Leible, Stefan, and Matthias Lechmann. “Die neue EG-Verordnung über aufervertragliche Schuldverhältnisse anzuwendende Recht (Rom II).” Recht der Internationalen Wirtschaft 53 (2007): 721–734.

Litwiński, Paweł, and Maciej Kawecki. Rozporządzenie UE w sprawie ochrony osób fizycznych w związku z przetwarzaniem danych osobowych i swobodnym przepływem takich danych. Komentarz. Warsaw: Wolters Kluwer, 2017.

Long, William, and Géraldine Scali, Francesca Blythe, Alan Raul. “European Union overview.” In Data Protection and Cybersecurity Law Review, edited by Alan Raul Raul, 25–26. London: The Law Reviews, 2015.

Noto La Diega, Guido. “Against the Dehumanisation of Decision-Making: Algorithmic Decisions at the Crossroads of Intellectual Property, Data Protection and Freedom of Information.” Journal of Intellectual Property, Information Technology and E-Commerce Law 9, no. 1 (2018): 3–34.

Plender, Richard, and Michael Wilderspin. European Private International Law of Obligation. London: Sweet and Maxwell, 2020.

Royvroy, Antoinette. “Of Data and Men. Fundamental Rights and Freedoms in a World of Big Data. Report for the Bureau of the Consultative Committee of the Convention for the Protection of Individuals With Regard to Automatic Processing of Personal Data.” Council of Europe, TD-PD-BUR 2016. Accessed February 7, 2023. https://rm.coe.int/16806a6020.

Rushworth, Adam, and Andrew Scott. “Rome II: Choice of law for non-contractual obligations.” LMCLQ (2008): 274–306.

Svantesson, Dan. “Article 4(1)(A) ‘Establishment of the Controller’ in EU Data Privacy Law – Time to Rein in this Expanding Concept?.” International Data Privacy Law 6, no. 3, (2016): 210–221. https://doi.org/10.1093/idpl/ipw013. (Crossref)

Symeonides, Symeon. “Rome II and Tort Conflicts: A Missed Opportunity.” AJCL 56, no. 1 (2008): 173–222. (Crossref)

Świerczyński, Marek. “Jurysdykcja krajowa w świetle rozporządzenia ogólnego o ochronie danych osobowych.” Europejski Przegląd Sądowy 12 (2016): 21–28.

Świerczyński, Marek. “Prawo właściwe dla zobowiązań deliktowych wynikających z naruszenia zasad ochrony danych osobowych przyjętych w RODO.”Problemy Prawa Prywatnego Międzynarodowego 27 (2019): 39–59. https://doi.org/10.31261/PPPM.2020.27.02. (Crossref)

Voigt, Paul, and Axel von dem Bussche. The EU General Data Protection Regulation (GDPR). A Practical Guide Cham: Springer, 2017. (Crossref)

Wolff, Heinrich, and Stefan Brink, ed. Beck’scher Online-Kommentar Datenschutzrecht, Munich: C.H. Beck, 2017, Rn. 1–46.

Download

Published
2023-03-30


Więckowski, Z., & Świerczyński, M. (2023). Applicable Law Concerning Obligations Arising from the Infringements of Personal Data Laws Due to the Use of Artificial Intelligence Systems. Review of European and Comparative Law, 52(1), 169–181. https://doi.org/10.31743/recl.13995

Zbigniew Więckowski  z.wieckowski@uksw.edu.pl
Cardinal Stefan Wyszyński University in Warsaw

Dr., Assistant Professor, Institute of Legal Studies, the Cardinal Stefan Wyszyński University in Warsaw; correspondence address: ul. W.ycickiego 1/3, 01-938 Warszawa, b. 17, Poland.

https://orcid.org/0000-0002-4079-0487
Marek Świerczyński 
Cardinal Stefan Wyszyński University in Warsaw

Dr. habil., Associate Professor, Institute of Legal Studies, the Cardinal Stefan Wyszyński University in Warsaw; correspondence address: ul. W.ycickiego 1/3, 01-938 Warszawa, b. 17, Poland.

https://orcid.org/0000-0002-4079-0487



License

Creative Commons License

This work is licensed under a Creative Commons Attribution 4.0 International License.