Abstract

Big data has revolutionized the ways information is collected, combined and evaluated. Relying on huge amounts of data originating from a multiplicity of sources, big data analytics allow for the unprecedented monitoring of citizens. Core data-protection principles of transparency, proportionality and purpose limitation are put into question. European legislators have reacted by strengthening relevant data protection instruments. In particular, the General Data Protection Regulation (EU) 2016/679, which will come into force in 2018, enables individuals to better control the use of their data. Though innovative, like the «privacy by design» obligation or the right to be forgotten, the improvements provided for are not sufficient to tackle formidable scientific progress in data aggregation. Hence, the big data revolution calls for a substantive change in the way data protection is conceived and regulated: a risk-based approach should supplant the traditional but deceptive informational autonomy approach.