How uninformed is the average data subject? A quest for benchmarks in EU personal data protection

Information obligations have always been crucial in personal data protection law. Re- inforcing these obligations is one of the priorities of the legislative package introduced in 2012 by the European Commission to redefine the personal data protection legal landscape of the European Union (EU). Those responsible for processing personal data (the data controllers) must imperatively convey certain pieces of information to those whose data are processed (the data subjects), and they are expected to do so in an increasingly 'transparent' manner. Beyond these punctual information requirements, however, data subjects appear to always be and inevitably remain in a state of relative ignorance, as in almost constant need of further guidance. Data subjects are nowadays often depicted as unknowing consumers of online services, services which surreptitiously take away from them per- sonal data thus conceived as a valuable asset. In light of these developments, this contribution criti- cally investigates how is EU law envisaging data subjects in terms of knowledge. The paper reviews the birth and evolution of information obligations as an element of European personal data protection law, and asks whether thinking of data subjects as consumers is consistent with the notion of 'average consumer' functioning in EU consumer law. Finally, it argues that time might have come to openly clarify when are data subjects unlawfully misinformed, and that, in the meantime, individuals might benefit not only from accessing more 'transparent' information, but also from being made more aware of the limitations of the information available to them.

ISBN:978-84-697-0826-2

Publication year:2014

Keywords:privacy, data protection