Data Protection in Commercial Arbitration: In the Light of GDPR

The present paper analyzes the applicability of the data protection rules towards commercial arbitration. This topic became especially relevant in the context of the adoption of the new data protection framework of the European Union, namely the General Data Protection Regulation (GDPR). GDPR imposes significant requirements for organizations engaged in data processing activities. The purpose of this is to support the main actors in commercial arbitration towards ensuring compliance with the data protection legislation. In five chapters the author (i) examines the role of the arbitrators, arbitral institutions, appointing authorities and other key participants in the arbitration proceedings from a data protection perspective; (ii) analyzes the various types of personal data and the possible legal grounds for their processing in arbitration; (iii) focuses on the data subjects' rights under GDPR and their possible limitations in arbitration; (iv) describes the data governance obligations of data controllers in arbitration; (v) explores the future of arbitration and the possible usage of artificial intelligence. The book also contains a Model Privacy Policy for Arbitral Institutions.