Binding Corporate Rules: Corporate Self-Regulation of Global Data Transfers

Binding Corporate Rules: Corporate Self-Regulation of Global Data Transfers

Volumn , Issue , 2012, Pages 1-376

  Moerel, Lokke ^a  

^a De Brauw Blackstone Westbroek ^*  (Netherlands)

Author keywords

Binding Corporate Rules; Data protection; Data transfers; Privacy; Self regulation; Transnational private regulation

Indexed keywords

EID: 84904102540     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1093/acprof:oso/9780199662913.001.0001     Document Type: Book

References (123)

1. Carola Glinski, 'Corporate codes of conduct: moral or legal obligation?', in McBarnet, Voiculescu, Campbell, The New Corporate Accountability, Corporate Social Responsibility and the Law (Cambridge University Press 2007), at 119-47.
2. Doreen McBarnet and Patrick Schmidt, 'Corporate accountability through creative enforcement: human rights, the Alien Torts Claims act and the limits of legal impunity', in McBarnet, Voiculescu, Campbell, The New Corporate Accountability, Corporate Social Responsibility and the Law (Cambridge University Press 2007), at 148-76.
3. A.J.A.J. Eijsbouts, 'Elementaire beginselen van Maatschappelijk Verantwoord Ondernemen', in A.J.A.J. Eijsbouts et al, Maatschappelijk Verantwoord Ondernemen en het Recht, Preadviezen NJV 2010-1 (Kluwer 2010)
4. Stuart Macaulay, 'Non-Contractual Relations in Business: A Preliminary Study' (1963) American Sociological Review 28: 55-83;
5. Hugh Beale and Tony Dugdale, 'Contracts Between Businessmen' (1975) British Journal of Law and Society 2: 45-60
6. Pierre Trudel, 'Privacy Protection on the Internet', in Serge Gutwirth et al (eds.), Reinventing Data Protection? (Springer 2009)
7. David Vogel, 'Private Global Business Regulation' (2008) Annual Review of Political Science 11: 261-82.
8. Gus Hosein, 'Challenges in Privacy Advocacy', in Serge Gutwirth et al (eds.), Reinventing Data Protection? (Springer 2009)
9. General Business Principles of Royal Philips Electronics NV and its group companies, to be found at #http://www.philips.com/shared/assets/Investor_relations/pdf/businessprinciples/GeneralBusinessPrinciples.pdf#.
10. To be found at #http://www.oecd.org#.
11. OECD, Consultation on an update of the OECD Guidelines for Multinational Enterprises, Consultation Note, 8 December 2009, #http://www.oecd.org#.
12. #http://www.unglobalcompact.org#.
13. #http://www.unglobalcompact.org/AboutTheGC/TheTenPrinciples/index.html#.
14. #http://www.globalcompactselfassessment.org/humanrights/fairtreatment#.
15. L.F.H. Enneking, 'Crossing the Atlantic, The Political and Legal Feasibility of European Foreign Direct Liability Cases' 2009 The George Washington International Law Review, vol 40, at 907-10.
16. Stephen Bottomley and Anthony Forsyth, 'The New Corporate law:Employees' Interest', in McBarnet, Voiculescu, Campbell, The New Corporate Accountability, Corporate Social Responsibility and the Law (Cambridge University Press 2007) 335
17. C. Joerges, Rethinking European Law's Supremacy, EUI Working Papers 2005/12 (2005), at 7.
18. Christopher Kuner, 'Internet Jurisdiction and Data Protection Law: An International Legal Analysis (Part 1)' (1 October 2010), International Journal of Law and Information Technology, Vol 18, p 176. Available at SSRN: #http://ssrn.com/abstract=1496847#
19. Maria Veronica Perez Asinari, 'International Aspects of Personal Data Protection: Quo Vadis EU?', in Maria Veronica Perez Asinari and Pablo Palazzi (eds.), Challenges of Privacy and Data Protection Law (31 Cahiers du CRID) (Bruylant 2008), at 381
20. L. Strikwerda, Inleiding tot het Nederlands Internationaal privaatrecht (Kluwer 2008), at 69
21. Fawcett, Private International Law (Oxford University Press 2008), at 737
22. Peter Swire, 'Of Elephants, Mice, and Privacy: International Choice of Law and the Internet' (1998) 32 International Lawyer 991
23. Lucas Bergkamp, European community Law for the New Economy (Intersentia 2003), at 123;
24. 'Data Protection as a Fundamental Right', in: Serge Gutwirth et al (eds.), Reinventing Data Protection? (Springer 2009), Chapter 3;
25. Olha Cherednychenko, 'EU Fundamental Rights, EC Fundamental Freedoms and Private Law' (2006) European Review of Private Law 1, at 36.
26. John Ahern and William Binchy, The Rome II Regulation on the Law Applicable to Non-contractual Obligations:a new international litigation regime (Martinus Nijhoff Publishers 2009)
27. P.H.L.M. Kuypers, Forumkeuze in het Nederlands internationaal privaatrecht (Kluwer 2008), at 468.
28. Richard Plender, The European Contracts Convention, The Rome Convention on the Choice of Law for Contracts (Sweet & Maxwell 1991)
29. A.T. Ottow, De Markt Meester? De zoektocht naar nieuwe vormen van toezicht (Boom Juridische Uitgevers 2009)
30. National Regulatory Spheres', in Andreas Follesdal, Ramses A. Wessel, and Jan Wouters (eds.), Multilevel regulation and the EU, The interplay between global, European and national normative processes (Martinus Nijhof Publishers 2008), at 22-47.
31. Kevin Campbell and Douglas Vick, 'Disclosure law and the market for corporate social responsibility', at 241-78;
32. Peter Muchlinski, 'Corporate social responsibility and international law: the case of human rights and multinational enterprises', at 453
33. Campbell, The New Corporate Accountability, Corporate Social Responsibility and the Law (Cambridge University Press 2007).
34. New Governance, Compliance, and Principles-based Securities Regulation' [2008] American Business Law Journal, 45, 1-60
35. C. Parker, The Open Corporation: Effective Self-regulation and Democracy (Cambridge University Press, 2001)
36. J. Black, Forms and Paradoxes of Principles-based Regulation' [2008] Capital Markets Law Review 3, 425-57
37. K.D. Krawiec, 'Cosmetic Compliance and the Failure of Negotiated Governance' [2003] Washington University Law Review 81, at 487-544.
38. Overview of the corporate governance codes in the EU: #http://www.ecgi.org/codes/index.php#.
39. Aurora Voiculescu, 'Green paper to new uses of human rights instruments', in McBarnet, Voiculescu, Campbell, The New Corporate Accountability, Corporate Social Responsibility and the Law (Cambridge University Press 2007), at 376.
40. J.W. Winter, 'Geen regels maar best practices', in K.M. van Hassel and M.P. Nieuwe Weme (eds.), Willems' wegen, Opstellen aangeboden aan prof.mr. J.H.M. Willems (Kluwer, 2010), at 464.
41. Christopher Kuner, 'Internet Jurisdiction and Data Protection Law: An International Legal Analysis (Part 2)' [2010] International Journal of Law and Information Technology, vol 18; available at SSRN: #http://ssrn.com/abstract=1689495#, at 13
42. Ulrich Dammann and Spiros Simitis, EG-Datenschutzrichtlinie (Nomos Verlagsgesellschaft 1997), at 112-13.
43. W.A.K. Rank and A.J. Haasjes, 'Misbruik van de Wbp in civiele procedures tegen financiële instellingen' Tijdschrift voor Financieel Recht 2005-12, at 370-9
44. A.J.E. van den Bergen, 'De Wet bescherming persoonsgegevens in de financiële procespraktijk' Tijdschrift voor Financieel Recht 2005-10, at 296-306.
45. J. Black, Legitimacy and the Competition for Regulatory Share, LSE Working Paper 14/2009 (2009) at 15
46. B. Morgan & K. Yeung, An Introduction to Law and Regulation: Text and Materials (Cambridge University Press 2007), at 92-3
47. Linda Senden, 'Soft Law, Self-Regulation and Co-Regulation in European Law:Where do they meet?' (January 2005) Electronic Journal of Comparative Law 9(1)
48. Fabrizio Cafaggi, 'Rethinking Private Regulation', in Fabrizio Cafaggi (ed.), Reframing Self-Regulation in European Private Law (Kluwer Law International 2006), Chapter 1, at 27-34.
49. Yesim Yilmaz, 'Private Regulation: a Real Alternative for Regulatory Reform,' Cato policy Analysis No 303 20 April 1998, available at #http://www.cato.org#.
50. Bärbel R. Dorbeck-Jung, 'Challenges to the Legitimacy of International Regulation: The Case of Pharmaceuticals Standardisation', in Andreas Follesdal, Ramses A. Wessel and Jan Wouters (eds.), Multilevel regulation and the EU, The interplay between global, European and national normative processes (Martinus Neijhof Publishers 2008)
51. Aileen McHarg, 'The Constitutional Dimension of Self-Regulation,' in Fabrizio Cafaggi (ed.), Reframing Self-Regulation in European Private Law (Kluwer Law International 2006), at 93;
52. Amy Sinden, 'Addressing Corporate Environmental Wrongs', in McBarnet, Voiculescu, Campbell, The New Corporate Accountability, Corporate Social Responsibility and the Law (Cambridge University Press 2007), at 504
53. John Ruggie, Protect, Respect and Remedy: a Framework for Business and Human Rights, 7 April 2008, A/HRC/8/5, to be found at #http://www.ohchr.org#
54. Willem van Genugten, Kees Homan, Nico Schrijver, and Paul de Waart, The United Nations of the Future; Globalization with a Human Face (KIT Publishers 2006).
55. Harris, O'Boyle, Law of the European Convention on Human Rights (2nd edn Oxford University Press 2009), at 20
56. B.J. De Vos, Horizontale werking van grondrechten. Een kritiek (Maklu Uitgevers, 2010)
57. T. Daintith and M. Sah, 'Privatisation and the Economic neutrality of the Constitution' [1993] Public Law 465
58. D. Feldman and F. Campbell, 'Constitutional Limitations on Privatisation', in J.W. Bridge (ed.), Comparative Law facing the 21st century (UKNCCL, 2001).
59. Yves Poullet, 'Selected comments on themes developed in this volume', in Bert-Jaap Koops et al (eds.), Starting Points for ICT Regulation. Deconstructing Prevalent Policy One-Liners (TCM Asser Press 2006), at 254.
60. Marc Suchman, 'Managing Legitimacy: Strategic and Institutional Approaches' [1995] Academy of Management Review 20(3), at 571-610.
61. Donal K. Casey and Colin David Scott, 'The Crystallization of Regulatory Norms,' (22 February 2011), Journal of Law and Society 38(1), at 76-95. Available at SSRN: #http://ssrn.com/abstract=1772396#
62. M. Bovens, D. Curtin, and P. Hart (eds), The Real World of EU Accountability: What Deficit? (Oxford University Press 2010), at 37.
63. Corien Prins 'Should ICT Regulation Be Undertaken at an International Level?', in Bert-Jaap Koops et al (eds.), Starting Points for ICT Regulation. Deconstructing Prevalent Policy One-Liners (TCM Asser Press 2006), at 172.
64. Christopher Kuner, 'An International Legal Framework for Data Protection:Issues and Prospects' [2009] Computer Law and Security Review, at 307
65. Viviane Reding, 'The Upcoming Data Protection Reform for the European Union' [2011] 1 International Data Privacy Law, at 5.
66. The New York Times Google Inc. profile at #http://topics.nytimes.com/top/news/business/companies/google_inc/index.html?scp=2&sq=china%20google %20yahoo&st=cse#.
67. Christopher Kuner, 'Developing an adequate legal framework for international data transfers', in Serge Gutwirth et al (eds.), Reinventing Data Protection? (Springer 2009), at 271.
68. Stephen J. Kobrin, The Trans-Atlantic Data Privacy Dispute, Territorial Jurisdiction and Global Governance, Working Paper Series, The Wharton School (November 2002), at 23
69. Christopher Kuner, European Data Protection Law: Corporate Compliance and Regulation (Oxford University Press 2007), at 125
70. Christopher Kuner, 'Data Protection Law and International Jurisdiction on the Internet (Part 1)' [2010] International Journal of Law and Information Technology, at 183.
71. John M. Conley and Cynthia A. Williams, Global Banks as Global Sustainability Regulators: the Equator Principles, at 5, available at #http://www.hill.org#
72. Deirdre Curtin and Linda Senden, 'Public accountability of Transnational Private Regulation' [2011] 38 Journal of Law and Society, at 185;
73. Bert-Jaap Koops, Miriam Lips, Sjaak Nouwt, Corien Prins, Maurice Schellekens, 'Should Self-Regulation Be The Starting Point?', in Bert-Jaap Koops et al (eds.), Starting Points for ICT Regulation. Deconstructing Prevalent Policy One-Liners (TCM Asser Press 2006)
74. Duncan H. Brown and Jeffrey Layne Blevins, 'The Safe Harbor Agreement between the United States and Europe: A Missed Opportunity to balance the Interests of E-Commerce and Privacy On-Line' (2002) Journal of Broadcasting and Electronic Media 46(4) available online at #http://www.allbusiness.com/legal/laws/384290-1.html#.
75. Peter P. Swire, 'Elephants and Mice Revisited: Law and Choice of Law on the Internet' (2005) University of Pennsylvania Law Review, vol 153
76. C. Joerges, 'Constitutionalism in Postnational Constellations: Contrasting Social Regulation in the EU and in the WTO', in C. Joerges and E.-U. Petersmann (eds.), Constitutionalism, Multilevel Trade Governance and Social Regulation (Hart Publishing 2006)).
77. Lorenzo Sacconi, 'Corporate Social Responsibility (CSR) as a Model of "extended" Corporate Governance: an Explanation Based on the Economic Theories of Social Contract, Reputation', in Fabrizio Cafaggi, Reframing Self-Regulation in European Private Law (Kluwer Law International 2006), Chapter 12, at 294.
78. Lokke Moerel, 'The long arm reach of EU data protection law: Does the Data Protection Directive apply to processing of personal data of EU citizens by websites worldwide?' [2011] 1 International Data Privacy Law, at 28-46.
79. Lokke Moerel, 'Back to basics: when does EU data protection law apply?' [2011] 2 International Data Privacy Law, at 92-110.
80. Wolfgang Schulz and Thorsten Held, Regulated selfregulation as a form of modern government. An analysis of case studies from media and telecommunications law (University of Luton Press 2004), at 7.
81. #http://www.export.gov/safeharbor#.
82. Sharon Gilad, 'It runs in the family: meta-regulation and its siblings' (2010) Regulation & Governance 4, at 502.
83. Bruno de Witte, 'Legal Instruments and Law-Making in the Lisbon Treaty', in Stefan Griller and Jacques Ziller (eds.), The Lisbon Treaty: EU Constitutionalism without a Constitutional Treaty? (Springer 2008), at 96
84. Jacques Ziller, 'Constitutional Boundaries of Self-Regulation', in Fabrizio Cafaggi (ed.), Reframing Self-Regulation in European Private Law (Kluwer Law International 2006), at 157.
85. All dating from 2010 and to be found at #http://ec.europa.eu/justice/policies/privacy/workinggroup/wpdocs/2010-others_en.htm#.
86. Luc Verhey and Tom Zwart, Agencies in European and Comparative Perspective (Intersentia 2003);
87. Ronald van Ooik, 'The Growing Importance of Agencies in the EU: Shifting Governance and the Institutional Balance' in D.M. Curtin and R.A. Wessel (eds.), Good governance and the European Union: Reflections on Concepts, Institutions and Substance, (Intersentia 2005), at 151-2.
88. H. van Meerten and A. Ottow, 'The proposals for the European Supervisory Authorities: the right (legal) way forward?' [2010] Tijdschrift voor Financieel Recht, vol 1; available at SSRN: #http://ssrn.com/abstract=1517371#.
89. Annetje Ottow and Saskia Lavrijssen, 'The legality of independent regulatory authorities', in L. Besselink, F. Pennings and A. Prechal (eds.), The Eclipse of Legality (Kluwer Law International 2010), Chapter 5, at 73
90. Joel Reidenberg, 'Resolving Conflicting International Data Privacy Rules in Cyberspace' [2000] Stanford Law Review, at 1315
91. Abraham L. Newman, Protectors of Privacy, Regulating Personal Data in the Global Economy (Cornell University Press 2008).
92. P. De Hert and S. Gutwirth, 'Data Protection in the Case Law of Strasbourg and Luxembourg:Constitutionalism in Action', in Serge Gutwirth et al (eds.), Reinventing Data Protection? (Springer 2009)
93. Waltraut Kotschy, 'Directive 95/46/EC, General Rules on the Lawfulness of the Processing of Personal Data', in A. Bullesbach, Y. Poullet, and Corien Prins (eds.), Concise European IT law (Kluwer Law International 2006), at 47
94. Liam Curren and Jane Kaye, 'Revoking consent: A "blind spot" in data protection law?' (2010) Computer Law & Security Review 26(3), at 278
95. Antoinette Rouvroy and Yves Poullet, 'The right to Informational Self-Determination and the Value of Self-Development. Reassessing the Importance of Privacy for Democracy', in Serge Gutwirth et al (eds.), Reinventing Data Protection? (Springer 2009)
96. Roger Brownsword, 'Consent in Data protection Law', in Serge Gutwirth et al (eds.), Reinventing Data Protection? (Springer 2009)
97. Christopher Kuner, 'The New EU Standard Contractual Clauses For International Data Transfers to Data Processors' Privacy & Security Law Report, 19 April 2010, at 1-7.
98. Bing, 'Data protection, jurisdiction and the choice of law' [1999] Privacy Law and Policy Reporter 65, at 9
99. Sjaak Nouwt, 'Towards a Common Approach to Data Protection', in Serge Gutwirth et al (eds.), Reinventing Data Protection? (Springer 2009)
100. Miriam Wugmeister, Karin Retzer, Cynthia Rich, 'Global solution for cross-border data transfers: making the case for corporate privacy rules' [2007] Georgetown Journal of International Law, vol 38, at 449-98.
101. T. Büthe and W. Mattli, The New Global Rulers: The Privatization of Regulation in the World Economy (Princeton University Press 2011), at 34
102. Cécile De Terwangne, 'Is a Global Data Protection Regulatory Model Possible?', in Serge Gutwirth et al (eds.), Reinventing Data Protection? (Springer 2009)
103. Ira Rubinstein, Privacy and Regulatory Innovation: Moving Beyond Voluntary Codes (1 March 2010)
104. Lee Bygrave, 'International Agreements to Protect Personal Data', in James B. Rule and Graham Greenleaf, Global Privacy Protection: The First Generation (Edward Elgar Publishing 2009), at 44-5;
105. Lieneke Viergever, 'Privacy in the Clouds' [2010] Tijdschrift voor Internetrecht, at 78-86.
106. Katherine Campbell, Lawrence A. Gordon, Martin P. Loeb and Lei Zhou, 'The economic cost of publicly announced information security breaches:empirical evidence from the stock market' (2003) Journal of Computer Security 11, at 443-5
107. L. Murphy Smith and Jacob L. Smith, 'Cyber Crimes Aimed at Publicly Traded Companies: Is Stock Price Affected?' Texas A&M University, at 12
108. Doreen McBarnet and Marina Kurkchiyan, 'Corporate social responsibility through contractual control? Global supply chains and other regulation', in McBarnet, Voiculescu, Campbell, The New Corporate Accountability, Corporate Social Responsibility and the Law (Cambridge University Press 2007), at 63
109. Christine Parker, 'Meta-regulation: legal accountability for corporate social responsibility', in McBarnet, Voiculescu, Campbell, The New Corporate Accountability, Corporate Social Responsibility and the Law (Cambridge University Press 2007), at 228
110. Lokke Moerel, Jeroen Koeter, and Nani Jansen, 'U.S. Subpoenas and European Data Protection Legislation' US Privacy & Data Security Law Journal, July 2009, at 649-59.
111. 'U.S. Secretly Tracks Global Bank Data' Los Angeles Times, 23 June 2006;
112. 'Bank Data is Sifted by U.S. in Secret to Block Terror' New York Times, 23 June 2006.
113. Charles Raab and Bert-Jaap Koops, 'Privacy Actors, Performances and the Future of privacy Protection', in Serge Gutwirth et al (eds.), Reinventing Data Protection? (Springer 2009), at 216;
114. Colin J. Bennett and Charles D. Raab, The Governance of Privacy (MIT Press 2006), at 279.
115. Dan L. Burk, 'Comment on "Should ICT Regulation be Undertaken at an International Level?"', in Bert-Jaap Koops et al (eds.), Starting Points for ICT Regulation. Deconstructing Prevalent Policy One-Liners (TCM Asser Press 2006)
116. P. Hustinx, 'The Role of Data Protection Authorities', in Serge Gutwirth et al (eds.), Reinventing Data Protection? (Springer 2009)
117. Miriam Lips, 'Inventory of General ICT Regulatory Starting Points', in Bert-Jaap Koops et al (eds.), Starting Points for ICT Regulation. Deconstructing Prevalent Policy One-Liners (TCM Asser Press 2006)
118. Yves Poullet, 'ICT and Co-Regulation: Towards a New Regulatory Approach?', in Bert-Jaap Koops et al (eds.), Starting Points for ICT Regulation. Deconstructing Prevalent Policy One-Liners (TCM Asser Press 2006), at 247.
119. Maurice Schellekens, Bert-Jaap Koops, and Corien Prins, Conclusion, in Bert-Jaap Koops et al (eds.), Starting Points for ICT Regulation. Deconstructing Prevalent Policy One-Liners (TCM Asser Press 2006)
120. Norbert Reich, 'Diverse Approaches to Consumer Protection Philosophy' Journal of Consumer Policy [1992], 14: 257-92
121. Christine Parker and John Braithwaite, 'Regulation', in Peter Cane and Mark Tushnet (eds.),The Oxford Handbook of Legal Studies (Oxford University Press 2003).
122. E.M.L. Moerel, 'The country of origin principle in the E-commerce Directive: the expected "one stop shop"?' [2001] CTLR, at 184.
123. Oliver Castendyk, Egbert Dommering, Alexander Scheuer, European Media Law (Kluwer International 2008), at 847-66.