Art. 85 GDPR leaves most of the responsibility to reconcile the right to the protection of personal data pursuant to the GDPR with the right to freedom of expression and information (Art. 11 CFR) to the member states. However, many states did little to nothing to pass specific rules to relieve the mentioned addressees. Thus, has the situation for the freedom of expression fundamentally changed? To what extent do certain rules of the GDPR enable or require a media-friendly interpretation? Which member states fulfilled their obligations to pass rules under Art. 85 GDPR? Could the lack of such rules enable a misuse of Data Protection Law that could jeopardise media freedoms?
