Siapka & Tzanou on the GDPR and Gender

Anastasia Siapka (KU Leuven – Centre for IT & IP Law (CiTiP)) & Maria Tzanou (University of Sheffield) have posted Re-imagining Data Protection: Femtech and Gendered Risks in the GDPR (Costello and Leiser (eds.), Critical Reflections on the EU’s Data Protection Regime: GDPR in the Machine) on SSRN. Here is the abstract:

The chapter investigates the EU’s General Data Protection Regulation (GDPR) from a gender perspective to question whether the Regulation does/ should explicitly recognise gender and, if so, how. It makes three distinct contributions: First, it argues that gender matters within the GDPR. Using femtech as a case study at the intersection of data protection and reproductive and sexual rights, we show that technology-facilitated gendered surveillance is inextricably linked with the sexual and reproductive rights of women and girls (or the lack thereof).

Second, the chapter argues that gendered risks should be encompassed by the GDPR ’ s risk-based approach. In this regard, we articulate a conceptualisation of gendered risks for the first time in the data protection scholarship and identify types of gendered risks that are not currently captured by the GDPR ’ s narrow focus on individual risks: these include embodied, collective and societal gendered risks.

Third, the chapter argues that the GDPR should be made gender responsive by explicitly acknowledging gendered risks.