IPaP Flashcards

1
Q

Types of IP rights

A
  • copyright
  • patent
  • trademark
  • trade secrets
  • database sui generis right
  • design rights
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Criteria of copyright

A

A creation that is an expression, in the field of literature, science or art, and is original

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Time limiation copyright

A

70 years after the death of the author

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Registration copyright

A

not required

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

patent object

A

inventions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

patent criteria

A

novelty, inventive, and for industrial application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

patent time limitation

A

20 years

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

patent registration

A

required

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

trademark object

A

a sign

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

trademark criteria

A

distinctive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

trademark time limitation

A

10 years with unlimited renewals

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

trademark registration

A

both possible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

trade secrets object

A

secret information with commercial value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

trade secret time limitation

A

as long as the secret can be maintained

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

trade secret registration

A

not required

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

database criteria

A

substantial investment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

database right time limitation

A

15 years

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

database right registration

A

no registration required

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

design right object

A

the outer appearance of goods

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

design right criteria

A

a novelty and individual character

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

design right time limitation

A

3 years (unregistered) and 25 years (registered)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Creativity

A

The author could make free and creative choices and stamp their personal touch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is irrelevant under copyright?

A

the effort or the cost involved

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How can someone provide public access to copyrighted data without infringement?

A
  • terms of service allow it
  • license allows it
  • copyright law allows it
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Is copyright transferable?

A

Yes, with exceptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are the exclusive copyright rights?

A
  • exploitation
  • moral rights
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Exploitation rights

A
  • reproduction
  • distribution and communication to the public
  • adaptation, translation, and arrangement
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Reproduction

A

Specifies how it is allowed, how much it is allowed, and if temporarily or permanently allowed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Does second communication fall under copyright law?

A

Yes, because it has not been considered by the holder of the copyright

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Transfering copyright vs license

A

By transfering, the original owner can no longer exercise it. With licensing, they can.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What counts as an investment?

A

The cost of collection or verficiation of existing data elements, but not the cost of creation!

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Does database rights exist in the USA?

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

When is database right infringed?

A
  • substantial parts are extracted
  • systematically insubstantial parts are extracted
  • public access to the database
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Exceptions to database right

A
  • lawful user can extract or re-utilize insubstantial parts of a PUBLIC database for ANY purpose
  • anyone can extract or re-utilize substantial parts of a PUBLIC database for non-commercial teachings or scientific research
  • anyone can extract or re-utilize substantial parts of a public database for the purpose of public security or an administrative or judicial procedure
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Exceptions for EXCLUSIVE database rights

A

Only research and cultural heritage organisations with scientific research as purpose can re-utilize (but anyone can extract)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Other ways to protect data

A
  • property law
  • contract law
  • unfair competition law
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Alternatives when data is protected

A
  • public sector information (PSI)
  • open licensing (open source)
  • data portability
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

PSI

A

Information that is owned by the state and is costly to collect. The state might have an obligation to release that data and allow its re-use

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

When is data likely to be subject to the PSI regime?

A

If it is linked to the execution of the activities of the state, there are no third party IP rights over the data, and it is not kept secret for some reason of public policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Data portability

A

Data subjects have the right to receive personal data concerning them in a structured, commonly used, and machine-readable format. This data can be transferred to another controller

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Does the sui generis right apply when databases contain data obtained from or generated by the use of a product or related service

A

NO (LinkedIn example)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Similarity of privacy and data protection

A
  • both legal and human rights
  • power control tools
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Which is broader? Privacy or data protection

A

privacy because it is more than just information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

privacy

A

Protect the opacity of the personal sphere

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

negative or positive right? privacy

A

negative

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

negative or positive right? data protection

A

positive

47
Q

What does data protection ensure?

A

transparency of the data processing

48
Q

Material scope

A

the range of subjects a given law covers

49
Q

personal scope

A

the range of persons subject to a given law

50
Q

when does the GDPR apply?

A

to the processing of personal data wholly or partly by automated means and to the processing other than automated means of personal data which (are intended to) form part of a filing system

51
Q

What is processing?

A

anything done with personal data

52
Q

Does GDPR apply to pseudonymisation data?

A

yes

53
Q

Is data of deceased or of legal persons or organizations protected by the GDPR?

A

no

54
Q

is subjective data protected by the GDPR?

A

yes

55
Q

When is identification not considered likely?

A
  • when prohibited by law
  • practically impossible due to disproportionate efforts
56
Q

is anonymisation and deletion processing?

A

yes

57
Q

2016 Breyer case

A

Dynamic IP addresses are personal data since a government agency designated with
cybersecurity attacks can access all the data (most likely).

58
Q

does joint controllership mean equal responsibility?

A

no

59
Q

household exemption

A

the GDPR does not apply to the processing of personal data by a natural
person in the course of a purely personal or household activity with no connection to a
professional or commercial activity.

60
Q

when does the household exemption not apply anymore?

A

if the data is made available to the public
or advertisers

61
Q

how can controller vs processer be determined?

A
  • explicit legal competence
  • implicit legal competence
  • contracts
  • factual influenec
62
Q

Google Spain vs Mario Costeja Gonzales 2014

A

If processing can be distinguished from and is additional to that carried out by others, you
are a controller.

63
Q

Wirtschafsakademie Schleswig Holstein 2018 and Tietosuojavaltuutettu vs Jehovan case

A

One can be a controller, even without having access to the data. For example, by setting up
a group in which data is collected by others. In that case, you enabled it.

64
Q

Purpose limitation

A

specified, explicit, and legitimate purpose

65
Q

when to define the purpose (purpose limitation)

A

before data processing

66
Q

Which activities are presumed compatible for further processing?

A
  • archiving in public interest
  • scientific or historical research purposes
  • statistical purposes
67
Q

proportionality

A

An action must be proportionate to a legitimate
goal.

68
Q

integrity and confidentiality principle

A

data shall be processed in a manner that ensures appropriate security of the personal data by using appropriate technical or organisational measures

69
Q

Who are exempted from accountability?

A

small organisations under 250 people

70
Q

when does the exemption of accountability not count?

A
  • when the processing is likely to result in a risk to the rights and freedoms of data subjects
  • when the processing is not occasional
  • when the processing includes sensitive data
  • when the processing is related to criminal convictions or offenses
71
Q

accountability

A

Both the controller and the processor must keep a written record of processing activities

72
Q

grouns for lawful processing

A
  • free, unambiguous, and informed consent
  • contract
  • legal obligations
  • vital interest of the data subject
  • task in the public interest or on official authority of a controller
  • legitimate interest of a controller, unless overridden by rights and freedoms of the data subject
73
Q

when should free, unambiguous, and informed consent be obtained?

A

before or at collection

74
Q

what does free consent mean?

A

that there is a real choice (for each specific purpose)

75
Q

what should be provided for informed consent?

A
  • controllers’ identity
  • purpose of each processing operation
  • what type of data is collected
  • the existence of the right to withdraw consent
  • information about ADM
  • data transfers
76
Q

is opt-out allowed for free, unambiguous, and informed consent?

A

no, it must be unambiguous

77
Q

disadvantages of free, unambiguous, and informed consent

A
  • difficult to obtain
  • proof of burden on the controller
78
Q

contract as lawful processing ground criteria

A
  • performance impossible without data processing
  • performance is of mutual obligation
79
Q

when can vital interests of the data subject be used as lawful processing ground?

A

only in medical emergencies

80
Q

which ground for lawful processing needs a clear basis in the law?

A

task in the public interest or on official authority of a controller

81
Q

which lawful processing ground cannot be used by public authorities?

A

the legitimate interest of a controller or third party ground

82
Q

what is a legitimate interest?

A

a stake or a benefit in the processing that is lawful

83
Q

sensitive data categories

A
  • racial or ethnic origin
  • political opinions
  • religious or philosophical beliefs
  • trade union membership
  • genetic data
  • biometric data
  • health data
  • sexual life/orientation data
84
Q

can proxies be sensitive data?

A

yes, if it is processed with a purpose to reveal the sensitive data

85
Q

Exceptions for processing sensitive data

A
  • explicit consent
  • legal obligation related to employment
  • vital interests (medical emergencies)
  • not-for-profit bodies
  • public information
  • legal claims
  • substantial public interest
  • healthcare
  • public health
  • archive and research
86
Q

explicit consent

A

signed or double verification

87
Q

explicit consent for health data

A

also needs to demonstrate that the data subject is aware that they renounce the special protection of health data

88
Q

which not-for-profit bodies can use the exception for sensitive data?

A

not-for-profit bodies with a political, philosophical, religious, or trade union aim

89
Q

what is the limitation for not-for-profit bodies for sensitive data exception

A

it only counts for the data related to the members

90
Q

when does the public information ground apply for the sensitive data exception?

A

when the data has been made publically available by the data subject themselves

91
Q

limitation of the healthcare exception of sensitive data

A

by a professional subject to the obligations of professional secrecy

92
Q

criteria public health exception for sensitive data

A

must be based on the law

93
Q

criteria archive and research exception for sensitive data

A

must be based on the law

94
Q

Criteria for exceptions for scientific research

A

ethical standards for research must be kept up

95
Q

exception for scientific research

A

softer specification and specific consent needed

96
Q

scientific research exception: consent change

A

consent can be given to certain areas of scientific research instead of purposes exactly

97
Q

scientific research exception: further processing

A

deemed compatible if:
- safeguards
- purpose cannot be achieved otherwise (even if completely different)

98
Q

scientific research exception: informing

A

the data subject does not have to be informed

99
Q

scientific research exception: the right to erasure criteria

A

exceptempted from if:
- it must be necessary for the purpose of scientific research
- safeguards
- erasure must be impossible or seriously impair the achievement of the objectives of that processing

100
Q

advantages of ADM and profiling

A
  • efficient
  • saves resources
  • personalization
101
Q

disadvantages of ADM and profiling

A
  • risks the individual’s rights and freedoms (because opaque and existing biases)
102
Q

why is ADM regulated?

A

since it is scoring between people

103
Q

problems with scoring

A
  • opacity
  • arbitrary assessments
  • disparate impact
104
Q

opacity

A

Scoring cannot be fully understood by those who are subject to it or by supervisory
authorities, since the opacity is inherit in the algorithms or by trade secrets. Therefore,
it cannot be effectively resisted nor challenged.

105
Q

arbitary assessments

A

significant variations exists between ratings on the same criteria

106
Q

disparate impact

A

Algorithms absorb the bias of the data and perhaps their creators. They amplify bias towards
traditionally disadvantaged groups.

107
Q

when has a data subject the right not to be subject of a decision based solely on automated processing (including profiling)?

A

if it produces legal effects concerning them or similarly significantly effects them

108
Q

what qualifies as human intervention?

A

the controller must ensure that there is meaningful human
oversight, carried out by someone who has the authority and competence to change the
decision, and all the available input and output data should be considered.

109
Q

profiling

A

any form of automated processing of personal data consisting to evaluate
certain personal aspects to a natural person

110
Q

exceptions for ADM and profiling

A
  1. If the decision is necessary for entering into or the performance of a contract
  2. If the decision is authorised by law to which the controller is subject
  3. If explicit consent is obtained
111
Q

which rights should still be given, even if there is an exception for ADM and profiling?

A
  • rights of human intervention
  • express their point of view
  • right to contest
112
Q

When can ADM use sensitive data?

A

if the sensitive data is processed based on the ground of valid explicit consent and processing of sensitive data is necessary for reasons of substantial public interest. Safeguards are necessary

113
Q

safeguards

A
  • scientific/methodological correctness
  • minimize the risk of errors
  • data security
  • prevent discriminatory effects
114
Q

ADM: transparency criteria

A
  • information about the existence of ADM
  • meaningful information about the logic
  • significance
  • consequences (real, tangible examples!)