The General Data Protection Regulation and its impact in Switzerland ; Le Règlement général sur la protection des données et son impact en Suisse
The thesis raises the question of the place that can or should be occupied by ex post facto control through civil action in data protection law.In Europe, the General Data Protection Regulation is a clear attempt to encourage civil action, either individually or collectively, in order to make data controllers and processors liable, to punish wrongful or negligent behaviour, and to guarantee compensation for damages suffered by data subjects in the event of a breach of the Regulation's provisions. Data protection law is inherently a right with economic implications, guided by economic considerations. The Regulation is an illustration of this: it waives the mechanism of prior authorisation for any processing of personal data, in order to promote the free flow of personal data within the European Union to support the creation of a single data market and facilitate technological innovation.It establishes an ex-post legal control based on general principles and a standard of "due care" for data controllers.It offers guarantees to users whose data are processed by recognising the right to bring class action lawsuits, which is a major innovation.The thesis focuses on the generalisation of a posteriori control by the Regulation, with the transformation of the personal data protection authorities into a supervisory authority a posteriori. This external and visible change corresponds to a profound transformation of the nature of personal data protection law, as established as positive European law by the Regulation: this positive European law of personal data protection becomes a law of an essentially economic nature, like antitrust law, which it now complements. Indeed, this law approaches the circulation of personal data in the same spirit as competition law approaches the free circulation of persons, capital, goods, etc., but whereas antitrust law focuses on the high cost (in terms of price of services or goods) due to certain questionable practices (cartel practices, for example), data protection law focuses on the ...