Secondary victimisation through data protection: Balancing victim privacy and support in the EU legal framework

The article explores the complex interplay between data protection regulations and the Victims’ Rights Directive (VRD) concerning victim support services in the European Union. It examines how the application of General Data Protection Regulation (GDPR) principles, particularly the use of consent as a primary legal basis for data processing, can lead to secondary victimisation by creating procedural barriers to effective victim care and support. The study identifies gaps in the existing frameworks and proposes GDPR-compliant practices to prioritise victim needs without compromising data privacy. It also analyses alternative legal grounds for processing victim data and offers recommendations to balance data protection with victim support needs, aiming to mitigate secondary victimisation.