"The Teenager's Library of Alexandria": The Skyblog Mass Shadow Archival, Informational Dispossession, and the Post-Quantum Accountability Gap in GDPR Rights Against Inalienable Public Archives

This paper study documents the exercise of data subject rights under Articles 14, 15, 17 and 21 GDPR against the Bibliothèque nationale de France (BnF), arising from the mass archival of approximately 12.6 million Skyblog personal internet sites following the platform's closure in August 2023. This case study introduces two concepts: shadow archival - the institutional collection of personal data under statutory authority that operates outside the practical reach of data subject rights - and informational dispossession - the compounded condition in which those rights are formally available but structurally inoperable through architectural foreclosure and temporal incapacity. The analysis maps nine compliance frictions (F1–F9) in the BnF's handling of the access request, and applies a legal analytics framework adapted from Restrepo & Charlotin to assess descriptive, diagnostic, predictive, and prescriptive dimensions of the case. The paper further identifies a quantum accountability gap: the legally unresolved convergence of archival inalienability under Article 17(3)(d) GDPR, pseudonymisation dependency, and post-quantum cryptographic vulnerability through the Harvest Now, Decrypt Later (HNDL) strategy. This dimension is advanced as a research proposition rather than a legal finding, drawing on Commission Recommendation C(2024) 1801 on post-quantum cryptography transition, CJEU Grimaldi (C-322/88), and NIST FIPS 203/204/205, and is identified as a priority question for subsequent research at the intersection of archival law, data protection, and post-quantum cryptographic governance. Note on scope. This paper originated as a graded assignment for the Data Law course at the Université Libre de Bruxelles (ULB) taught by Professor David Restrepo-Amariles and Professor Sébastien Meeùs. The post-quantum dimension was developed independently by the author after the course submission deadline and does not form part of the assessed coursework. No external funding was received.

Authors

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2026-05-21
DOI
https://doi.org/10.5281/zenodo.20325782
Primary Topic
Privacy, Security, and Data Protection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

"The Teenager's Library of Alexandria": The Skyblog Mass Shadow Archival, Informational Dispossession, and the Post-Quantum Accountability Gap in GDPR Rights Against Inalienable Public Archives

Alezia MUSIELAK
Zenodo (CERN European Organization for Nuclear Research)
Privacy, Security, and Data Protection
article

"The Teenager's Library of Alexandria": The Skyblog Mass Shadow Archival, Informational Dispossession, and the Post-Quantum Accountability Gap in GDPR Rights Against Inalienable Public Archives

Alezia MUSIELAK
article en

Abstract

This paper study documents the exercise of data subject rights under Articles 14, 15, 17 and 21 GDPR against the Bibliothèque nationale de France (BnF), arising from the mass archival of approximately 12.6 million Skyblog personal internet sites following the platform's closure in August 2023. This case study introduces two concepts: shadow archival - the institutional collection of personal data under statutory authority that operates outside the practical reach of data subject rights - and informational dispossession - the compounded condition in which those rights are formally available but structurally inoperable through architectural foreclosure and temporal incapacity. The analysis maps nine compliance frictions (F1–F9) in the BnF's handling of the access request, and applies a legal analytics framework adapted from Restrepo & Charlotin to assess descriptive, diagnostic, predictive, and prescriptive dimensions of the case. The paper further identifies a quantum accountability gap: the legally unresolved convergence of archival inalienability under Article 17(3)(d) GDPR, pseudonymisation dependency, and post-quantum cryptographic vulnerability through the Harvest Now, Decrypt Later (HNDL) strategy. This dimension is advanced as a research proposition rather than a legal finding, drawing on Commission Recommendation C(2024) 1801 on post-quantum cryptography transition, CJEU Grimaldi (C-322/88), and NIST FIPS 203/204/205, and is identified as a priority question for subsequent research at the intersection of archival law, data protection, and post-quantum cryptographic governance. Note on scope. This paper originated as a graded assignment for the Data Law course at the Université Libre de Bruxelles (ULB) taught by Professor David Restrepo-Amariles and Professor Sébastien Meeùs. The post-quantum dimension was developed independently by the author after the course submission deadline and does not form part of the assessed coursework. No external funding was received.

Zenodo (CERN European Organization for Nuclear Research)
Openalex Percentile: Top 4%
Privacy, Security, and Data Protection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.