Skip to main content

Conflict of Laws, Transnational Contracts in Personal Data

  • Chapter
  • First Online:
Data Protection Law

Abstract

This Chapter explores whether the law of contracts is an adequate mechanism for personal data protection pertaining to transnational commercial trade. The question arises whether Data Protection has become a new frontier in transnational contract law. It is well understood that the transition into the new digital economy has begun and is moving at a rapid rate. Subsequently, data protection is having to be considered by organizations when establishing contracts, both domestically and internationally. In this regard it is understood that national contract laws are far from consistent or uniform. Following recent case law, this Chapter examines whether the Convention on the International Sale of Goods (CISG) can be a mechanism to strengthen the protection of data in transnational contracts.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 99.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 129.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 129.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Notes

  1. 1.

    Zech H (2017) Data as a Tradeable Commodity – Implications for Contract Law, Josef Drexl (ed.), Proceedings of the 18th EIPIN Congress: The New Data Economy between Data Ownership, Privacy and Safeguarding Competition, Edward Elgar Publishing, pp. 1–15.

  2. 2.

    Jerome J (2013) Buying and Selling Privacy, Big Data’s Different Burdens and Benefits, 66 Stan. L. Rev.

  3. 3.

    Ibid.

  4. 4.

    Kozinski, A Federal Judge, Would Pay $2400 A Year, Max, For Privacy, https://www.huffingtonpost.com/2013/03/04/alex-kozinski-privacy_n_2807608.html, accessed 2 November 2018.

  5. 5.

    Zannier, F A Bite of Me, Kickstarter, http://www.kickstarter.com/projects/1461902402/a-bit-e-of-me, accessed 11 November 2018.

  6. 6.

    Schwartz P, Managing Global Data Privacy A Report from Privacy Projects (2009) p. 18, https://www.brookings.edu/wp-content/uploads/2016/06/internet-data-and-trade-meltzer.pdf, accessed 4 May 2018.

  7. 7.

    Ibid.

  8. 8.

    Ibid.

  9. 9.

    Bauer, M Quantum Computing is Coming for Your Data (2017)https://www.wired.com/story/quantum-computing-is-coming-for-your-data, accessed 26 October 2018.

  10. 10.

    Ibid.

  11. 11.

    Van Allen, M., Chaudhry, U Quantum computing is about to disrupt the government contracts market, Bloomberg Government, https://about.bgov.com/blog/quantum-computing-emerging-technology-bound-disrupt-government-contracts-market/, accessed 26 October 2018.

  12. 12.

    Jean Bacon., J Michels., D, Millard., C, Singh, J Blockchain Demystified: A Technical and Legal Introduction to Distributed and Centralised Ledgers, 25 RICH. J.L. & TECH., no. 1, (2018).

  13. 13.

    Ibid.

  14. 14.

    Ibid.

  15. 15.

    Ibid. For example, a smart contract that does not give a consumer a right of withdrawal or refund may fall foul of consumer protection law.

  16. 16.

    Ibid.

  17. 17.

    Ibid.

  18. 18.

    Ibid.

  19. 19.

    York, H., McMillan, M., Wong, K Blockchain and Smart Contracts: The dawn of the Internet of Finance? Communications Law Bulletin, Vol 35.3 (2016).

  20. 20.

    Brkan, M Data Protection and Conflict-of-laws: A Challenging Relationship EDPL (2016).

  21. 21.

    Corps Ltd -v- Apple Computer Inc [2004] EWHC 768.

  22. 22.

    Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, OJL 281.

  23. 23.

    Brkan, M Data Protection and Conflict-of-laws: A Challenging Relationship EDPL (2016).

  24. 24.

    Ibid. Brkan highlights that if the controller has an establishment in the EU, the regulation applies, according to its Article 3(1), ‘to the processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union, regardless of whether the processing takes place in the Union or not. Article 3 contains two important elements. On the one hand, it can be seen that the first part of the rule for territorial application of EU data protection legislation partially remained the same as in Data Protection Directive: processing of data in the context of the activities of a controller or processor, established in the Union. Therefore, with regard to this issue, the legal questions concerning the interpretation of this provision also remain the same, in particular the meaning of the phrase ‘in the context of the activities’ and ‘establishment’. It should be noted that – just as in Data Protection Directive the notion of establishment is defined in Recital 19 GDPR as ‘the effective and real exercise of activity through stable arrangements’.

  25. 25.

    Ibid. Brkan adds that Article 3(1) – regardless of whether the processing takes place in the Union’ broadens the applicability of GDPR much further than the current regime. The place of processing or an activity closely related to processing is currently an important factor for determination of applicable law. Within the GDPR, the place of processing becomes an unimportant criterion for such determination. Rightly so, given the fact that data can be processed anywhere in the world, in particular from a technical perspective (servers being located in a different country than the headquarters of a company). It can be established that the criterion of processing is still important in that it still has to be done in the context of the activities of an establishment of a controller or a processor. However, that processing can be done in a third country, not within the EU, as long as the establishment of the controller is within the EU.

  26. 26.

    Ibid. Recital 20 of GDPR it becomes clear that it should be ‘apparent that the controller is envisaging the offering’ of goods/services to European data subjects. Through this recital, it is also clarified that, whereas mere access to a website or e-mail address are not sufficient for the GDPR to apply, other criteria, such as the mention of Member State’s currency or offering of goods/services in a language of this Member State could point to controller’s intention to offer goods/services to European data subjects.

  27. 27.

    Ibid.

  28. 28.

    Ibid.

  29. 29.

    Ibid.

  30. 30.

    Svantesson, D Extraterritoriality in Data Privacy Law (Ex Tuto 2013), p. 107, in Brkan, M Data Protection and Conflict-of-laws: A Challenging Relationship EDPL (2016).

  31. 31.

    Case 191/15, Verein für Konsumenteninformation v. Amazon [2016] par. 73–80.

  32. 32.

    Rquejo, M Jurisdiction, Conflict of Laws and Data Protection in Cyberspace, (2017), http://conflictoflaws.net/2017/jurisdiction-conflict-of-laws-and-data-protection-in-cyberspace/, accessed 2 November 2018.

  33. 33.

    Case322/14, Jaouad El Majdoub v CarsOnTheWeb.Deutschland GmbH 2015.

  34. 34.

    Ibid.

  35. 35.

    Ibid.

  36. 36.

    Ibid.

  37. 37.

    Rquejo, M Jurisdiction, Conflict of Laws and Data Protection in Cyberspace, (2017), http://conflictoflaws.net/2017/jurisdiction-conflict-of-laws-and-data-protection-in-cyberspace/, accessed 2 November 2018.

  38. 38.

    Facebook Commercial Terms and conditions, https://www.facebook.com/legal/commercial_terms, accessed 2 November 2018.

  39. 39.

    Mills, A Jurisdiction, Conflict of Laws and Data Protection in Cyberspace (Part 2) https://www.youtube.com/watch?v=NYt6SFUkeYU, accessed 2 November 2018.

  40. 40.

    Akai Pty Ltd v People’s Insurance Co Ltd (1996) 188 CLR 418.

  41. 41.

    Ibid, at 441.

  42. 42.

    Ibid, at 441.

  43. 43.

    Oceanic Sun (1988) 165 CLR 197, 225 (Brennan J), 261 (Gaudron J).

  44. 44.

    Ibid.

  45. 45.

    Hargood v OHTL Public Company Ltd [2015] NSWSC 446, 23–30.

  46. 46.

    Ibid.

  47. 47.

    Ibid.

  48. 48.

    Ibid.

  49. 49.

    Gonzalez v Agoda Company Pty Ltd [2017] NSWSC 1133.

  50. 50.

    Ibid.

  51. 51.

    Ibid.

  52. 52.

    Ibid.

  53. 53.

    Ibid.

  54. 54.

    Ibid.

  55. 55.

    Ibid.

  56. 56.

    Mik, E Terms of Use: Reflections on a Theme (2014). Asian Law Institute 11th Conference, 28–30 May 2014, Kuala Lumpur. Research Collection School of Law.

  57. 57.

    Chwee Kin Keong vDigilandmall.comPte Ltd [2004] SGHC 71 at 91.

  58. 58.

    Ibid – at 38 to 60.

  59. 59.

    Ibid.

  60. 60.

    Ibid, at 91 to 93.

  61. 61.

    Ibid, at 107.

  62. 62.

    Unfair Contract Terms Act 1994, section 27.

  63. 63.

    John Reginald Stott Kirkham v Trane US Inc [2009] 4 SLR 428.

  64. 64.

    Ibid.

  65. 65.

    AbdulRashid bin AbdulManaf vHii Yii Ann [2014] SGHC 194.

  66. 66.

    Sinta Dewl Rosadi, LLB (Unpad), LLM (Washington College of Law, American University), Ph.D (Unpad), Associate Professor in Law at Faculty of Law University of Padjadjaran, Bandung, Indonesia, provided input and verified the information in this section.

  67. 67.

    Suharnoko Contract Law in A Comparative Perspective, Vol. 2, Indonesia Law Review (2012).

  68. 68.

    Ibid.

  69. 69.

    Ibid.

  70. 70.

    Allagan, T Indonesian Private International Law: The Development after More than a Century, Indonesian Journal of International Law, Vol. 14 No. 3, (2017) pp. 381–416.

  71. 71.

    451/Pdt.G/2012/PN.Jkt.Bar.

  72. 72.

    Ibid, Jones Day, https://www.jonesday.com/files/Publication/202d219d-d9e4-4656-b25d-3071c32a870d/Presentation/PublicationAttachment/e5a54e8d-9240-4111-a178-374d0be20912/Indonesia_High_Court_Upholds.pdf, accessed 5 November 2018.

  73. 73.

    Ibid.

  74. 74.

    Ibid.

  75. 75.

    Ibid.

  76. 76.

    Ibid.

  77. 77.

    Corley, M The Need for an International Convention on Data Privacy: Taking a Cue from the CISG,

    41 Brook. J. Int’l L. 721 (2016), 722.

  78. 78.

    Samuelson, P Privacy As Intellectual Property? Privacy as Intellectual Property, 52 Stan. L. Rev. 1125 (1999), 1126.

  79. 79.

    Chesterman S (2012) After Privacy: The Rise of Facebook, the Fall of WikiLeaks, and Singapore’s Personal Data Protection Act 2012, Singapore Journal of Legal Studies,

  80. 80.

    Ciani abobve n at 288.

  81. 81.

    COM (2017) 9 final.

  82. 82.

    Ciani, J Governing Data Trade in Intelligent Environments: Taxonomy of Possible Regulatory Regimes between Property and Access Rights, Intelligent Environments 2018., 285, 286.

  83. 83.

    Ibid.

  84. 84.

    Samuelson, P Privacy As Intellectual Property? Privacy as Intellectual Property, 52 Stan. L. Rev. 1125 (1999), 1126.

  85. 85.

    Council Regulation 2016/679.

  86. 86.

    Debevoise & Plimton, https://www.debevoise.com/insights/publications/2018/05/gdpr-should-i-care, accessed 20 June 2018.

  87. 87.

    Ibid.

  88. 88.

    Article 41 Convention on the International Sale of Goods.

  89. 89.

    Article 42 Convention on the International Sale of Goods.

  90. 90.

    Article 42(1)(a) Convention on the International Sale of Goods.

  91. 91.

    Honnold, O Uniform Law for International Sales under the 1980 United Nations Convention, Kluwer, (1999) p. 295.

  92. 92.

    Ibid, 265.

  93. 93.

    Austrian Supreme Court (Oberster Gerichtshof) 12 September 2006 [10 Ob 122/05x].

  94. 94.

    Pace https://iicl.law.pace.edu/cisg/case/austria-ogh-oberster-gerichtshof-supreme-court-austrian-case-citations-do-not-generally-12, accessed 2 June 2018.

  95. 95.

    France 17 December 1996 Supreme Court (Ceramique Culinaire v. Musgrave), http://cisgw3.law.pace.edu/cases/961217f1.html, accessed 20 June 2018.

  96. 96.

    Janal, R., The Seller’s Responsibility for Third Party Intellectual Property Rights under the Vienna Sales Convention, in Andersen, C and Schroeter U., (eds) Sharing International Commercial Law across National Boundaries. Hill Publishing (2008), pp. 203–206.

  97. 97.

    Austrian Supreme Court (Oberster Gerichtshof) http://cisgw3.law.pace.edu/cases/060912a3.html

  98. 98.

    Rauda C, Etier G, Warranty for Intellectual Property Rights in the International Sale of Goods, Vindobona Journal of International Commercial Law and Arbitration, Issue 1 (2000) pp. 30–61.

  99. 99.

    The Paris Convention for the Protection of Industrial Property (1967), the Universal Convention of Copyright (1971) and the Berne Convention for the Protection of Literary and Artistic Works (1971). The Secretariat’s Commentary refers to Article 2(viii) of the Convention of the World Intellectual Property Organization of 14 July 1967 (WIPO). This rule is very important for finding the definition of intellectual property law in the sense of the CISG for the words industrial or other intellectual property. These terms were introduced by the Finnish deputy during the deliberations on Article 42 CISG, and are rooted in a proposition of the WIPO on the project of Article 42 CISG (at the time being Article 40 of the New York project).

  100. 100.

    Convention Establishing the World Intellectual Property Organization http://www.wipo.int/treaties/en/text.jsp?file_id=283854, accessed 20 June 2018.

  101. 101.

    [2012] EWCA Civ 48.

  102. 102.

    Ibid, para 22.

  103. 103.

    Ibid, para 23.

  104. 104.

    Cornish W, Llewelyn D, Aplin T, Intellectual property: patents, copyright, trademarks and allied rights, Sweet & Maxwell, 2010, in Coogan v News Group Newspapers Ltd & Anor [2012] EWCA Civ 48, paras 36–38.

  105. 105.

    Zeller B., Walters R., Trakman, L Data Protection – a new frontier for transnational contract law? Journal Law and Commerce, University of Pittsburgh School of Law (2018) – under review.

  106. 106.

    Ibid.

  107. 107.

    Trakman L, Walters R, Zeller B, Is Privacy and Personal Data set to become the new Intellectual Property? International Review of Intellectual Property and Competition Law (2018).

  108. 108.

    Ibid.

  109. 109.

    Ibid.

  110. 110.

    Ibid.

  111. 111.

    South Central Bell Telephone Co v Sidney J Barthelemy, 643 So. 2d 1240.

  112. 112.

    Ibid at 1246.

  113. 113.

    Lookosfky points out that the CISG is an elastic document and it ought not be stretched beyond its essential design.

  114. 114.

    Ibid, 276.

  115. 115.

    Lookosfky J In Dubio Pro Conventione? Some Thoughts about Opt-Outs, Computer Software and Preemption Under the CISG, 13 Duke J. Int & Comp. L. 258 (2003), pp. 274–277 Decision of OLG Köln, 26 August 1994, RIW 1994, 970, CLOUT Case 122, available at http://cisgw3.law.pace.edu/cisg/wais/db/cases2/940826g1.html – holding that a contract calling for a “scholarly analysis of a certain segment of the German market for express delivery services” did not constitute a contract for the “sale of goods”. In this connection, the court noted that a sale of goods is characterized by the transfer of property in an “object”; though the analysis results were embodied in a written report, the main concern of the parties was the right to use the ideas therein.

  116. 116.

    Poikela T Conformity of Goods in the 1980 United Nations Convention of Contracts for the International Sale of Goods Nordic Journal of Commercial Law (2003).

  117. 117.

    Ibid.

  118. 118.

    Trakman L, Walters R, Zeller B, Is Privacy and Personal Data set to become the new Intellectual Property? International Review of Intellectual Property and Competition Law (2018).

  119. 119.

    van Erp, S Ownership of Data: The Numerus Clausus of Legal Objects, Brigham-Kanner Property

    Rights Conference Journal 6 (2017), PP. 235, 235–236.

  120. 120.

    Trakman L, Walters R, Zeller B, Is Privacy and Personal Data set to become the new Intellectual Property? International Review of Intellectual Property and Competition Law (2018).

References

  • Allagan, T (2017) Indonesian Private International Law: The Development after More than a Century, Indonesian Journal of International Law, Vol. 14 No. 3, pp. 381–416

    Article  Google Scholar 

  • Brkan, M (2016) Data Protection and Conflict-of-laws: A Challenging Relationship EDPL

    Google Scholar 

  • Bauer, M (2017) Quantum Computing is Coming for Your Datahttps://www.wired.com/story/quantum-computing-is-coming-for-your-data, accessed 26 October 2018.

  • Ciani, J Governing Data Trade in Intelligent Environments: Taxonomy of Possible Regulatory Regimes between Property and Access Rights, Intelligent Environments 2018., 285, 286.

    Google Scholar 

  • Cornish W, Llewelyn D, Aplin T, (2010) Intellectual property: patents, copyright, trademarks and allied rights, Sweet & Maxwell

    Google Scholar 

  • Corley, M The Need for an International Convention on Data Privacy: Taking a Cue from the CISG, 41 Brook. J. Int’l L. 721 (2016), 722.

    Google Scholar 

  • Honnold, O (1999) Uniform Law for International Sales under the 1980 United Nations Convention, Kluwer, p. 295

    Google Scholar 

  • Janal, R., (2008) The Seller’s Responsibility for Third Party Intellectual Property Rights under the Vienna Sales Convention, in Andersen, C and Schroeter U., (eds) Sharing International Commercial Law across National Boundaries. Hill Publishing, pp. 203–206.

    Google Scholar 

  • Jean Bacon., J Michels., D, Millard., C, Singh, J (2018) Blockchain Demystified: A Technical and Legal Introduction to Distributed and Centralised Ledgers, 25 RICH. J.L. & TECH., no. 1

    Google Scholar 

  • Jerome J (2013) Buying and Selling Privacy, Big Data’s Different Burdens and Benefits, 66 Stan. L. Rev.

    Google Scholar 

  • Lookosfky J (2003) In Dubio Pro Conventione? Some Thoughts about Opt-Outs, Computer Software and Preemption Under the CISG, 13 Duke J. Int & Comp. L. 258, pp. 274–277

    Google Scholar 

  • Mik, E (2014) Terms of Use: Reflections on a Theme, Asian Law Institute 11th Conference, 28-30 May 2014, Kuala Lumpur. Research Collection School of Law.

    Google Scholar 

  • Mills, A Jurisdiction, Conflict of Laws and Data Protection in Cyberspace (Part 2) https://www.youtube.com/watch?v=NYt6SFUkeYU, accessed 2 November 2018.

  • Poikela T (2003) Conformity of Goods in the 1980 United Nations Convention of Contracts for the International Sale of Goods Nordic Journal of Commercial Law

    Google Scholar 

  • Rquejo, M Jurisdiction, Conflict of Laws and Data Protection in Cyberspace, (2017), http://conflictoflaws.net/2017/jurisdiction-conflict-of-laws-and-data-protection-in-cyberspace/, accessed 2 November 2018.

  • Samuelson, P Privacy As Intellectual Property? Privacy as Intellectual Property, 52 Stan. L. Rev. 1125 (1999), 1126

    Google Scholar 

  • Suharnoko Contract Law in A Comparative Perspective, Vol. 2, Indonesia Law Review (2012)

    Google Scholar 

  • Schwartz P, (2009) Managing Global Data Privacy A Report from Privacy Projects p. 18, https://www.brookings.edu/wp-content/uploads/2016/06/internet-data-and-trade-meltzer.pdf, accessed 4 November 2018.

  • Svantesson, D Extraterritoriality in Data Privacy Law (Ex Tuto 2013), p. 107, in Brkan, M Data Protection and Conflict-of-laws: A Challenging Relationship EDPL (2016)

    Google Scholar 

  • Van Allen, M., Chaudhry, U Quantum computing is about to disrupt the government contracts market, Bloomberg Government, https://about.bgov.com/blog/quantum-computing-emerging-technology-bound-disrupt-government-contracts-market/, accessed 26 October 2018.

  • van Erp, S Ownership of Data: The Numerus Clausus of Legal Objects, Brigham-Kanner Property Rights Conference Journal 6 (2017), PP. 235, 235–236

    Google Scholar 

  • York, H., McMillan, M., Wong, K (2016) Blockchain and Smart Contracts: The dawn of the Internet of Finance? Communications Law Bulletin, Vol 35.3

    Google Scholar 

  • Zannier, F A Bite of Me, Kickstarter, http://www.kickstarter.com/projects/1461902402/a-bit-e-of-me, accessed 11 November 2018.

  • Zech H (2017) Data as a Tradeable Commodity – Implications for Contract Law, Josef Drexl (ed.), Proceedings of the 18th EIPIN Congress: The New Data Economy between Data Ownership, Privacy and Safeguarding Competition, Edward Elgar Publishing, pp. 1–15

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Rights and permissions

Reprints and permissions

Copyright information

© 2019 Springer Nature Singapore Pte Ltd.

About this chapter

Check for updates. Verify currency and authenticity via CrossMark

Cite this chapter

Walters, R., Trakman, L., Zeller, B. (2019). Conflict of Laws, Transnational Contracts in Personal Data. In: Data Protection Law. Springer, Singapore. https://doi.org/10.1007/978-981-13-8110-2_14

Download citation

  • DOI: https://doi.org/10.1007/978-981-13-8110-2_14

  • Published:

  • Publisher Name: Springer, Singapore

  • Print ISBN: 978-981-13-8109-6

  • Online ISBN: 978-981-13-8110-2

  • eBook Packages: Law and CriminologyLaw and Criminology (R0)

Publish with us

Policies and ethics