The article explores the complex interplay between data protection regulations and the Victims’ Rights Directive (VRD) concerning victim support services in the European Union. It examines how the application of General Data Protection Regulation (GDPR) principles, particularly the use of consent as a primary legal basis for data processing, can lead to secondary victimisation by creating procedural barriers to effective victim care and support. The study identifies gaps in the existing frameworks and proposes GDPR-compliant practices to prioritise victim needs without compromising data privacy. It also analyses alternative legal grounds for processing victim data and offers recommendations to balance data protection with victim support needs, aiming to mitigate secondary victimisation.
AfzalJ (2024) Future of legal tools and justice. In: Implementation of Digital Law as a Legal Tool in the Current Digital Era. Singapore: Springer Nature, pp. 155–177.
2.
Belgian Data Protection Authority (2021) Guidelines on victim data sharing and privacy safeguards.
3.
Belgian Parliamentary Inquiry Commission (2017) Final report on the Brussels attacks. Brussels: Belgian Federal Parliament.
4.
BoychenkoOKonstantinouNAltanL, et al. (2023) Report on the practical implementation of the EU victims’ rights directive.
5.
BrownK (2018) Stereotypes and victim blaming: A study of secondary victimisation in legal proceedings. Journal of Legal Studies25(3): 123–137.
6.
BrownKWilsonS (2015) Training strategies to address secondary victimisation. Journal of Criminal Justice Education18(1): 78–92.
7.
BufalieriLLa MorgiaMMeiA, et al. (2020) GDPR: When the right to access personal data becomes a threat. In: 2020 IEEE International Conference on Web Services (ICWS), Beijing, China, 19–23 October, pp. 75–83. New York: IEEE.
CappsB (2008) Consent in the law, by Deryck Beyleveld and Roger Brownsword (Oxford: Hart Publishing, 2007). Legal Studies28(1): 149–153.
11.
CarrollCP (2021) The ‘lottery’ of rape reporting: Secondary victimization and Swedish criminal justice professionals. Nordic Journal of Criminology22(1): 23–41.
Council of Europe Committee of Ministers (2006) Appendix to Recommendation Rec(2006)8 on assistance to crime victims (Adopted 14 June 2006). Strasbourg: Council of Europe.
14.
CsabaF (2022) Secondary victimization during criminal procedure. Journal of Eastern European Criminal Law2: 37–44.
15.
Dutch Ministry of Justice and Security (2020) Act on victim support and data protection.
16.
European Commission (2020) EU strategy on victims’ rights 2020–2025. Brussels: European Commission.
17.
European Commission (2022) Commission staff working document – Evaluation of Directive 2012/29/EU (SWD(2022) 179 final). Brussels: European Commission.
18.
European Data Protection Board (2018) Guidelines on consent under Regulation 2016/679.
19.
European Data Protection Board (2024) Guidelines 1/2024 on the meaning of and legal basis of Article 6(1)(f) GDPR for processing personal data based on legitimate interest.
20.
European Parliament (2023) Victims’ rights in the EU: Revision of Directive 2012/29/EU. Brussels: European Parliamentary Research Service.
21.
European Union Agency for Fundamental Rights (FRA) (2017) Selection of relevant ICCPR and recent passages from published reports related to Italy. Vienna: FRA.
22.
European Union, GDPR (2016) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR (2016)).
23.
European Union, LED (2016) Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences (LED (2016)).
24.
European Union, Victim Right Directive (2012) Directive 2012/29/EU of the European Parliament and of the Council of 25 October 2012 establishing minimum standards on the rights, support and protection of victims of crime, and replacing Council Framework Decision 2001/220/JHA (Victim Right Directive (2012)).
25.
Finnish Data Protection Ombudsman (2021) Guidelines on consent in trauma-informed care.
French Ministry of Justice (2019) SIAV: Integrated system for victim support and data sharing.
28.
GarciaM (2019) Impact of revictimisation on victims’ psychological well-being. Journal of Trauma Psychology15(4): 567–582.
29.
GassóAMMueller-JohnsonKGómez-DuránEL (2021) Victimization as a result of non-consensual dissemination of sexting and psychopathology correlates: An exploratory analysis. International Journal of Environmental Research and Public Health18(12): 6564.
30.
German Federal Ministry of Justice (2020) Data protection and victim support guidelines.
31.
GiveCNdimaSSteegeR, et al. (2019) Strengthening referral systems in community health programs: A qualitative study in two rural districts of Maputo Province, Mozambique. BMC Health Services Research19: 263.
32.
González FusterGDe HertPGutwirthS (2011) Privacy and data protection in the EU security continuum (INEX Policy Brief No. 12).
33.
González-EstebanECalvoP (2022) Ethically governing artificial intelligence in the field of scientific research and innovation. Heliyon8(2).
34.
GrzelakA (2018) Protection of personal data of crime victims in European union law – Latest developments. Polish Yearbook of International Law38: 209–228.
35.
HolderRKirchengastTCassellP (2021) Transforming crime victims’ rights: From myth to reality. International Journal of Comparative and Applied Criminal Justice45(1): 1–13.
36.
JeffreyJ (2021) The criminal injustice system: An analysis of professional perspectives of secondary-victimisation for female victim/survivors of domestic and sexual violence navigating the legal system (Doctoral dissertation, University of Worcester).
37.
JohnsonLSmithR (2017) Support services and secondary victimisation: A comparative analysis. Journal of Social Work30(1): 89–104.
38.
JonesA (2019) Policy reforms to address secondary victimisation: A comparative study. Journal of Law and Society35(4): 521–536.
KormyloCAdjeridIBallS, et al. (2025) Till tech do us part: Betrayal aversion and its role in algorithm use. Management Science.
41.
Latvian Data Protection Authority (2021) Data sharing protocols for victim support services.
42.
MalgieriG (2023) Vulnerability and data protection law. Oxford: Oxford University Press.
43.
MalgieriGComandéG (2017) Sensitive-by-distance: Quasi-health data in the algorithmic era. Information and Communications Technology Law26(3): 229–249.
44.
ManteleroA (2016) Personal data for decisional purposes in the age of analytics: From an individual to a collective dimension of data protection. Computer Law and Security Review32(2): 238–255.
45.
OkolieC (2023) Artificial intelligence-altered videos (deepfakes), image-based sexual abuse, and data privacy concerns. Journal of International Women’s Studies25(2): 11.
46.
PrinsC (2018) Digital justice. Computer Law and Security Review34(4): 920–923.
47.
ReedMDCaraballoK (2022) Voice of the victims: Accounts of secondary victimization with the court system among homicide co-victims. Journal of Interpersonal Violence37(13–14): NP10832–NP10861.
SmithJGarciaM (2018) Implementing victim-centred approaches in the criminal justice system. Journal of Policy Analysis22(3): 205–220.
52.
SmithJJonesA (2020) Understanding secondary victimisation in the criminal justice system. Journal of Victimology10(2): 45–60.
53.
Spanish Ministry of the Interior (2020) VioGén system for integrated gender violence support.
54.
TavaresSMPimentelCEPaivaTT, et al. (2023) Development and validation of the secondary victimization scale. Psychological Reports126(5): 2594–2615.
55.
TurnerEMedinaJBrownG (2019) Dashing hopes? The predictive accuracy of domestic abuse risk assessment by police. The British Journal of Criminology59: 1013–1034.
