1. European Data Protection Supervisor Freedom of Information Day, Budapest, 28 September 2010 Data Protection and Freedom of Information at EU level Peter Hustinx 28 September 2010

2. European Data Protection Supervisor Freedom of Information Day, Budapest, 28 September 2010 Transparency (FOI) Art 10 ECHR –CoE Convention 205 (2009) Art 255 EC Treaty –Regulation (EC) 1049/2001 Art 42 EU Charter Art 15 TFEU (Lisbon Treaty)

3. European Data Protection Supervisor Freedom of Information Day, Budapest, 28 September 2010 Data Protection Art 8 ECHR –CoE Convention 108 (1981) Art 286 EC Treaty –Regulation (EC) 45/2001 Art 7-8 EU Charter Art 16 TFEU (Lisbon Treaty)

4. European Data Protection Supervisor Freedom of Information Day, Budapest, 28 September 2010 DP & FOI Scope for conflict –Interface limited, but relevant »e.g. expenses of MEP, staff data »All documents with personal data? Dealing with conflicts –Balancing case-by-case –Need for a clear framework »Ensure proportionality & simplicity

5. European Data Protection Supervisor Freedom of Information Day, Budapest, 28 September 2010 EU legal framework Regulation (EC) 45/2001 –Grounds for lawful processing »Transfers to recipients (“necessity test”) Regulation (EC) 1049/2001 –Art 4.1 – “Shall refuse access where disclosure would undermine the protection of...” –Sub b – “privacy and integrity of the individual, in particular in accordance with Community legislation regarding the protection of personal data.”

6. European Data Protection Supervisor Freedom of Information Day, Budapest, 28 September 2010 EDPS approach Background Paper (July 2005) –“Public Access and Data Protection” – Analysis of interface, guidelines, checklist Cooperation with EU Ombudsman Interventions in Court cases –e.g. Bavarian Lager vs Commission Review of Regulation (EC) 1049/2001 –EDPS Opinion (June 2008) > draft EP report

7. European Data Protection Supervisor Freedom of Information Day, Budapest, 28 September 2010 Bavarian Lager Access to minutes of meeting (“UK beer market”) –COM refusal (also) based on “data protection” CFI (GC) 8 November 2007, Case T-194/04 –Very similar to EDPS approach ECJ 29 June 2010, Case C-28/08 P –Priority for Regulation (EC) 1049/2001 –Full scope of exception, including “reference” to Regulation (EC) 45/2001

8. European Data Protection Supervisor Freedom of Information Day, Budapest, 28 September 2010 Follow up of Bavarian Lager EDPS Press release, 30 June 2010 –“Review more urgent after Court ruling” Addendum to Background Paper –Analysis ECJ judgment and consequences “Proactive approach” more relevant –Public disclosure in Regulation (EC) 45/2001 Interventions in Court cases –Seeking refinement of ECJ judgment

9. European Data Protection Supervisor Freedom of Information Day, Budapest, 28 September 2010 More information: www.edps.europa.eu edps@edps.europa.eu Postal address: Rue Wiertz 60 - MO 63 B-1047 Brussels