Summary: 1. Introduction. – 1.1. Significance of the Study. – 1.2. Research Problem. – 1.3. Research Methodology. – 1.4. Study Outline. – 2. The Nature of the Right to Informational Self-Determination. – 2.1. The Concept of the Right to Privacy. – 2.2. Definition of Informational Self-Determination. – 2.3. The Legal Nature of the Right to Informational Self-Determination. – 3. The Content of the Right to Informational Self-Determination. – 3.1. Rights of the Data Subject During Processing. – 3.1.1. The Right of Access by the Data Subject. – 3.1.2. Scope of the Right. – 3.2. The Right to Data Portability. – 3.3. The Right to Rectification. – 3.4. The Right to Object to Data Processing. – 3.5. The Right to Object to Direct Marketing. – 3.6. The Right to Request Erasure (Right to be Forgotten). – 4. Practical Challenges and Ways to Address Them. – 4.1. Practical Challenges. – 4.1.1. The Limitations of Consent in AI and Big Data Environments. – 4.1.2. Difficulties in Exercising Individual Rights. – 4.1.3. The Problem of Centralised Enforcement and Institutional Performance Disparities. – 4.1.4. The Protection of Mental Data and Emerging Data Patterns. – 4.2. Proposed Approaches to Address Implementation Gaps. – 4.2.1. A Critical Analysis of the Gap Between Legal Text and Practice. – 4.2.2. A Study of Judicial and Regulatory Cases. – 4.2.3. Evaluating the Effectiveness of Oversight and Supervision. – 4.2.4. Recommendations to Strengthen the Practical Application of the Right to Informational Self-Determination. – 5. Conclusions.
Background: The right to informational self-determination has emerged as a pivotal component of digital rights in the era of artificial intelligence and big data. Rooted in the broader right to privacy, this right enables individuals to control the collection, use, and dissemination of their personal data. Despite its recognition in instruments such as the General Data Protection Regulation (GDPR), a significant gap persists between the legal framework and practical implementation. The rationale of this study lies in analysing the disjunction between legislative guarantees and the realities of enforcement, with a focus on the European legal landscape. The increasing complexity of digital technologies and the emergence of new data categories—such as mental data—have challenged both legal doctrines and institutional capabilities.
Methods: The study employs a doctrinal legal analysis, drawing on a comprehensive examination of the GDPR provisions, judicial precedents from the Court of Justice of the European Union, national supervisory authority reports, and academic commentaries. Comparative elements are included to contextualise the European framework within broader international developments. Practical cases and regulatory enforcement patterns are used to identify gaps and assess the effectiveness of current mechanisms. The research also incorporates an analytical evaluation of algorithmic environments and their implications for consent, transparency, and individual agency.
Results and Conclusions: The study finds that while the GDPR offers a robust structure for personal data protection, its practical application is hindered by structural, technical, and interpretive challenges. Consent is often rendered ineffective in AI-driven contexts; individuals struggle to exercise their rights, and regulatory enforcement remains uneven across Member States. The research highlights the need for a harmonised institutional model, enhanced user interfaces, and the legal recognition of emerging data types like mental data. It concludes that bridging the legislative-implementation divide requires integrating legal, technological, and ethical tools within a cohesive framework—reaffirming the right to informational self-determination as a cornerstone of digital human dignity.