Curriculum Vitae and Publications Dr. Diana Dimitrova

Dr. Diana Dimitrova is a research assistant in the Intellectual Properties Rights Department at FIZ Karlsruhe. She researches and publishes on a wide variety of data protection topics, especially on the rights of data subjects and on data protection topics in the migration context. In August 2021, Diana defended her PhD at the Vrije Universiteit Brussel on the topic of the rights of access and rectification in the Area of Freedom, Security and Justice. She is the Co-Editor of the biweekly „Data Protection Insider“ Newsletter. Diana is one of the core members of the annual CPDP (Computers, Privacy and Data Protection) Conference. Before joining FIZ Karlsruhe, Diana was a research assistant from 2012-2016 at KU Leuven, Belgium, where she researched on data protection topics in the framework of EU FP-7 research project. In 2012 she completed an internship at the EDPS in Brussels. Diana holds an LL.M. in European law at the University of Leiden, the Netherlands.

• Dimitrova, Diana; De Hert, Paul
  Real Transparency and Real Oversight of Law Enforcement Data. The ECHR and the Lack of Accountability of Indirect Access Procedures
  Utrecht law review, 2025; Vol. 21(1), p. 49-69 
  DOI: 10.36633/ulr.905
• Matsumi, Hideyuki; Hallinan, Dara; Dimitrova, Diana; Kosta, Eleni; De Hert, Paul (eds.)
  Data Protection and Privacy, Volume 16: Ideas That Drive Our Digital World
  CPDP2023: 16th annual international conference, Brussels, Belgium, May 24-26, 2023
  New York, NY: Hart Publishing, 2024; 304 p.; ISBN 9781509976003; Computers, Privacy, and Data Protection
  https://www.bloomsbury.com/uk/data-protection-and-privacy-volume-16-9781509976003/
• Dimitrova, Diana; De Hert, Paul
  DPA independence and ‘indirect’ access - illusory in Belgium, France and Germany?
  Maastricht Journal of European and Comparative Law, 2024; online first
  DOI: 10.1177/1023263X241237688
• Kosta, Eleni; Boehm, Franziska (eds.); Dimitrova, Diana et al. (assistent eds.)
  The EU Law Enforcement Directive (LED). A Commentary
  Oxford: Oxford University Press, 2024; 992 p.; ISBN 978-0192855220
  https://global.oup.com/academic/product/the-eu-law-enforcement-directive-led-9780192855220?q=kosta&lang=en&cc=gb#
• Dimitrova, Diana
  [Commentary] Article 14 Right of Access by the Data Subject
  In: The EU Law Enforcement Directive (LED). A Commentary / Kosta, Eleni; Boehm, Franziska (eds.); Dimitrova, Diana et al. (assistent eds.); Oxford: Oxford University Press, 2024; ISBN 978-0192855220
  https://global.oup.com/academic/product/the-eu-law-enforcement-directive-led-9780192855220?q=kosta&lang=en&cc=gb#
• Dimitrova, Diana
  [Commentary] Article 15 Limitations to the Right of Access
  In: The EU Law Enforcement Directive (LED). A Commentary / Kosta, Eleni; Boehm, Franziska (eds.); Dimitrova, Diana et al. (assistent eds.); Oxford: Oxford University Press, 2024; ISBN 978-0192855220
  https://global.oup.com/academic/product/the-eu-law-enforcement-directive-led-9780192855220?q=kosta&lang=en&cc=gb#
• Dimitrova, Diana
  [Commentary] Article 16 Right to Rectification or Erasure of Personal Data and Restriction of Processing
  In: The EU Law Enforcement Directive (LED). A Commentary / Kosta, Eleni; Boehm, Franziska (eds.); Dimitrova, Diana et al. (assistent eds.); Oxford: Oxford University Press, 2024; ISBN 978-0192855220
  https://global.oup.com/academic/product/the-eu-law-enforcement-directive-led-9780192855220?q=kosta&lang=en&cc=gb#
• Dimitrova, Diana; Hert, Paul De 
  The LED’s right of access to one’s data: Loopholes on proper access, legality review and data protection authority Accountability
  New Journal of European Criminal Law, 2024; Vol.  15(1), p. 12-32 
  DOI: 10.1177/20322844231214484
• Matsumi, Hideyuki; Hallinan, Dara; Dimitrova, Diana; Kosta, Eleni; Hert, Paul De (eds.)
  Data Protection and Privacy, Volume 15: In Transitional Times
  New York, NY: Hart Publising, 2023; ISBN  9781509954551; Computers, Privacy, and Data Protection, 272 p.
• Dimitrova, Diana: Increased Negotiation Power for the Data Subject: A Matter of Interpretation and Enforcement, European Data Protection Law Review, 2022 (published February 2, 2023); Vol. 8(4), p. 474-492; DOI: 10.21552/edpl/2022/4/7
• P. J. Pesch; D. Dimitrova; F. Boehm: Data Protection and Machine-Learning-Supported Decision-Making at the EU Border: ETIAS Profiling Under Scrutiny, In: Privacy Technologies and Policy. 10th Annual Privacy Forum, APF 2022, Warsaw, Poland, June 23–24, 2022. Proceedings / Gryszczyńska, Agnieszka; Polański, Przemysław; Gruschka, Nils et al. (eds.); Cham:Springer, 2022; 146 p.; ISBN 978-3-031-07314-4; Lecture Notes in Computer Science 13279, p. 50-72, DOI: 10.1007/978-3-031-07315-1_4
• Dimitrova, Diana; Drechsler, Laura; Gkotsopoulou, Olga et al.
  Contribution to the public consultation on the Guidelines 01/2022 on data subject rights – the right of access
  European Data Protection Board, 2022
  https://edpb.europa.eu/sites/default/files/webform/public_consultation_reply/20220311.EDPB_Guidelines_Access_CLEAN_FINAL.pdf
• D. Dimitrova: Surveillance at the borders: Travellers and their data protection rights, In: Research Handbook on Privacy and Data Protection Law. Values, Norms and Global Politics / González Fuster, Gloria; Van Brakel, Rosamunde; De Hert, Paul (eds.); Elger: Cheltenham, 2022; ISBN 978 1 78643 850 8; 480 p.; p. 302-334, https://www.e-elgar.com/shop/gbp/research-handbook-on-privacy-and-data-protection-law-9781786438508.html
• D. Dimitrova; T. Quintel, Technological Experimentation Without Adequate Safeguards? Interoperable EU Databases and Access to the Multiple Identity Detector by SIRENE Bureaux
  In: Data Protection and Privacy. Data Protection and Artificial IntelligenceISBN: 9781509941759; Computers Privacy and Data Protection, 280 S. London: Hart Publishing, 2021;
• D. Dimitrova: The rise of the personal data quality principle: Is it legal and does it have an impact on the right to recitification? European Journal of Law and Technology, 2021; Vol. 12(3), 23 S. https://www.ejlt.org/index.php/ejlt/article/view/768/1042
• D. Dimitrova, contributor to the „Pilot Project on the Fundamental Rights Review of EU Data Collection instruments and Programmes“, carried out by Fondazione Giacomo Brodolini and a group of independent experts on behalf of the European Commission, DG JUST.
  http://www.fondazionebrodolini.it/en/projects/pilot-project-fundamental-rights-review-eu-data-collection-instruments-and-programmes
• F. Boehm; D. Dimitrova, Wie sicher ist die Corona-App, Leibniz-Magazin September 2020
• D. Dimitrova; Video Surveillance at Work – In Need of Regulation? (López Ribalda and Others App nos 1874/13 and 8567/13); European Data Protection Law Review, 2020; Vol. 6 (1); S. 152-157,
  DOI: https://doi.org/10.21552/edpl/2020/1/21
• D. Dimitrova; Right to Explanation under the Right to Access to Personal Data
  In: European Data Protection Law Review, 2020; Vol. 6 (2); S. 211-230,
  https://edpl.lexxion.eu/article/EDPL/2020/2/8
• D. Dimitrova; P. De Hert; The Rigth of Access under the Policy Directive: Small Steps forward
  In: Privacy Technologies and Policy: 6th Annual Privacy Forum, APF 2018, Barchelona; Medina, M.; Mitrakas, A.; Rannenberg, K.; Schweighofer, E.; Tsouroulas, N. (Hrsg.); Springer; ISBN 978-3-030-02546-5, S. 111-130, https://link.springer.com/chapter/10.1007/978-3-030-02547-2_7
• D. Dimitrova; Data Protection within Police and Judical Cooperation
  in: Specialized Administrative Law of the European Union. A Sectoral Review / Hofmann, Herwig C. H.; Rowe, Gerard C.; Türk, Alexander (Hrsg.) ; Oxford: Oxford University Press; 2018; 720 S.; ISBN 978-0-19-878743-3; S. 204-233
• F. Pichierri, D. Dimitrova, "Smart environments in the health context, self-management and data protection in the STARR project" , in: International Review of Law, Computers & Technology 2018,
  DOI: 10.1080/13600869.2018.1433954
• "Rigas satiksme – The Scope and Limits of Data Protection: Case note"
  in: European Data Protection Law Review (EDPL), 2017, v. 3(3), 418-422,
  DOI: 10.21552/edpl/2017/3/21
• March 2017: "Connecting the dots in the Area of Freedom, Security and Justice (AFSJ)– Part I"
  KU Leuven CiTiP Blog, 28.03.2017. https://www.law.kuleuven.be/citip/blog/connecting-the-dots-in-the-area-of-freedom-security-and-justice-afsj-part-i
• March 2017: "Connecting the dots in the Area of Freedom, Security and Justice (AFSJ)– Part II"
  Ku Leuven CiTiP Blog, 30.03.2017. https://www.law.kuleuven.be/citip/blog/connecting-the-dots-in-the-area-of-freedom-security-and-justice-afsj-part-ii/
• September 2016: “The ‘Rubik’s cube’ of applicable data protection law in the EU,” CiTiP Blog, https://www.law.kuleuven.be/citip/blog/the-rubiks-cube-of-applicable-data-protection-law-in-the-eu/.
• “The 'Smartification' of EU Borders: When 'Smart' Technology Does Not Come with 'Smart' Safeguards,” CiTiP Working Paper 28/2016. Available at SSRN: http://ssrn.com/abstract=2800115.
• March 2016: Blog published by LSE on “Data Protection at the Schengen borders after Paris.” http://blogs.lse.ac.uk/mediapolicyproject/2016/03/14/data-protection-at-the-schengen-borders-after-paris/.
• October 2015: Blog published by LSE on the CJEU’s judgment on Safe Harbour: “(Un)Safe Harbour: Stop! Or the Court of Justice will shoot.” http://blogs.lse.ac.uk/mediapolicyproject/2015/10/06/unsafe-harbour-stop-or-the-court-of-justice-will-shoot/.
• September 2015: Blog published by LSE on ‘The Willems judgement: CJEU’s missed chance to reign in biometric data usage:’ http://blogs.lse.ac.uk/mediapolicyproject/2015/09/09/the-willems-judgment-cjeus-missed-chance-to-reign-in-biometric-data-usage/.
• May 2015: Blog published by LSE on ‘Passenger Name Records and data protection issues: busting some myths’: http://blogs.lse.ac.uk/mediapolicyproject/2015/05/19/passenger-name-records-and-data-protection-issues-busting-some-myths/.
• Co-authored the article ‘Iris scanners can now identify us from 40 meters away,‘ published by The Conversation: http://theconversation.com/iris-scanners-can-now-identify-us-from-40-feet-away-42141.
• Co-authored a research paper on the topic: Privacy By Design – The Case of Automated Border Control: http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2548516. It is also a book chapter in 'Privacy and Identity Management for the Future Internet in the Age of Globalisation,' 9th IFIP WG 9.2, 9.5, 9.6/11.7, 11.4, 11.6/SIG 9.2.2 International Summer School, Patras, Greece, September 7-12, 2014, Revised Selected Papers.
• January  2015:  Blog  published  by  LSE  on  Rights  of  Passengers  using  Automated  Border  Control:  http://blogs.lse.ac.uk/mediapolicyproject/2015/01/28/data-protection-rights-of-passengers-using-automated-border-control/.
• July 2014: Blog published by LSE on Automated Border Control and data protection considerations:  http://blogs.lse.ac.uk/mediapolicyproject/2014/07/21/biometrics-please-automated-border-controls-data-protection-obligations/.

• Dimitrova, Diana
  Ekimdzhiev and Others v. Bulgaria: Secret Surveillance and Electronic Communications Surveillance only with Adequate Safeguards, or Nothing New under the Sun
  Online published in: Strasbourg Observers (Blog), March 02, 2022
  https://strasbourgobservers.com/2022/03/02/ekimdzhiev-and-others-v-bulgaria-nothing-new-under-the-sun/

• Co-organization of a FastPass Panel at the Computers, Privacy and Data Protection 2016 Conference.
• Co-organization of and presentation at the Amsterdam Privacy Conference 2015 FastPass panel.
• 25. August 2015: Presentation at the ISBC 2015 Workshop in Karlsruhe. Topic: Identification and Surveillance at EU’s external borders. Participation in the following panel discussion at the ISBC 2015 Workshop.
• 24. May 2015: Presentation at the ISCRAM ELSI Workshop on the topic of data protection and mobile technologies for disaster management, Kristiansand, Norway.
• 30. April 2015: Presentation at FRONTEX on privacy and data protection aspects of Automated Border Control (ABC).
• 11. September 2014: Presentation at the IFIP Summer School on Privacy and Identity Management (2014), Patras, Greece. Topic: Privacy By Design – The Case of Automated Border Control.
• 8. September 2014: Presentation at the European Association on Biometrics, Darmstadt, Germany. Topic: Legal aspects of Automated Border Control.
• 19. June 2014: Presentation at the IoT week in London. Topic: Legal aspects of working with real data in research projects.