Unlawful Processing, Unseen Harm: Cyberbullicide and the GDPR's Untapped Power

This paper explores the intersection of cyberbullying-induced suicide risk and European data protection law, particularly the General Data Protection Regulation (GDPR). Drawing from epidemiological studies, legal precedent, and survivor-led documentation, it argues that unregulated exposure of sensitive personal data, especially health information and unverified criminal accusations, can escalate suicidal ideation. Through analysis of the Swedish Authority for Privacy Protection’s (IMY) ruling against Google LLC (DI-2021-10584), the paper demonstrates how GDPR Articles 9, 10, and 17 offer a legal framework for emotional protection and digital dignity. It calls for stronger enforcement, ethical platform design, and survivor-conscious documentation as tools for suicide prevention.