1. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 1 Re-use and Privacy/Data Protection Cécile de TERWANGNE Professor at the Law Faculty CRID - University of Namur

2. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 2 Privacy/Data Protection Aim of Data Protection Legislation: informational self-determination = control over ones personal information Right to informational self-determination is derived from but not assimilated to right to privacy: - art. 8 ECHR - art. 7 and 8 European Charter Fund. R.

3. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 3 Privacy/Data Protection Data protection legislation is not a prohibition legislation

4. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 4 When does data protection apply? Which data? Personal data = any information related to a natural person not necessarily confidential data even professional data commercial data published data When data is processed by automatic means or is part of a filing system

5. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 5 Examples possibly concerned by re-use: –Commercial registers –Vehicles registration –Case law data bases –Institutional web sites presenting members, agenda, etc. –Socio-economic data –Land register –European Patent Office

6. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 6 Art. 1, § 4, PSI directive 2003/98 « This Directive leaves intact and in no way affects the level of protection of individuals with regard to the processing of personal data under the provisions of Community and national law, and in particular does not alter the obligations and rights set out in Directive 95/46/EC. » respect data prot. rules when re-using PSI Relations re-use & data protection

7. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 7 Data Protection Principles Data protection principles having particuliar impact on PSI re-use: Purpose principle Proportionality principle

8. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 8 Data Protection Principles Purpose principle: Data processed for specified, explicit and legitimate purposes… And data not processed in a way incompatible with the purposes of collection (compatible = within data subjects reasonable expectations)

9. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 9 Data Protection Principles Further processing of data for historical, statistical or scientific purposes not considered as incompatible appropriate safeguards in each Member State

10. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 10 Data Protection Principles Proportionality principle Grounds to legitimate data processing (re- use): –Data subjects consent (ex.: planning permissions) –Interest of re-use overriding data subjects rights and interests (ex.: re-use of data from official websites in the newspaper of a non- profit-making association)

11. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 11 Data Protection Principles Only relevant data in relation with the purposes of processing (re-use)

12. Prof. Cécile de Terwangne - LAPSI Workshop 7-8 October 2010 12 Data Protection Principles In conclusion : Re-use of personal data OK if -It is not incompatible (with the original aim) -It is not disproportionate Or you have informed data subjects and have their freely given consent