Presentation is loading. Please wait.

Presentation is loading. Please wait.

European CommissionDirectorate-General Justice, Freedom and Security Data Protection 1 Conference on Cross Border Data Flows & Privacy October 15-16, 2007.

Published byIsabella McCallum Modified over 10 years ago

Similar presentations

Presentation on theme: "European CommissionDirectorate-General Justice, Freedom and Security Data Protection 1 Conference on Cross Border Data Flows & Privacy October 15-16, 2007."— Presentation transcript:

1 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 1 Conference on Cross Border Data Flows & Privacy October 15-16, 2007 Washington, D.C. The European Unions Data Protection Framework 12 Years Later Giovanni Buttarelli Secretary General, Garante per la Protezione dei Dati Personali

2 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 2 Data protection is a fundamental right. Data protection / privacy protection Right to privacy: the right to be left alone Data protection: right of self- determination for information EU legislation

3 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 3 Everyone has the right to the protection of his/her personal data A new right for nowadays dimension of privacy

4 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 4 The sources of the law The main declarations: Article 8 European Convention of Human Rights Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108) EU Charter of Fundamental Rights: Art. 8 EU legislation

5 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 5 Article 8 - Protection of personal data 1.Everyone has the right to the protection of personal data concerning him or her. 2.Such data must be processed fairly for specified purposes and on the basis of the consent of the person concerned or some other legitimate basis laid down by law. Everyone has the right of access to data which has been collected concerning him or her, and the right to have it rectified. 3.Compliance with these rules shall be subject to control by an independent authority. EU Charter of fundamental rights

6 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 6 General data protection rules: EU Directive 95/46/EC Electronic communication: EU Directive 2002/58/EC Police and judicial co-operation in criminal matters EU Framework Decision COM (2005) 475 Other texts dealing with data protection: Schengen Convention Europol Eurojust Texts on the Internet: http://europa.eu.int/comm/justice_home/fsj/privacy/index_en.htm EU legislation

7 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 7 DIRECTIVE 95/46/EC EU legislation

8 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 8 Data Protection Directive 95/46/EC: high level of protection of personal data free movement of data within EU/EEA Personal data: identified or identifiable person Processing: broad definition Applies to public and private sectors Relation data subject - controller Basic principles

9 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 9 Article 2 'personal data' shall mean any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity; 'processing of personal data' ('processing') shall mean any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction; Processing means more than collection Definitions

10 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 10 (Unambiguous) Consent Necessary for performance of a contract Necessary for compliance with a legal obligation of the controller Necessary to protect the vital interest of the data subject Necessary for the performance of a task of public interest or official authority Legitimate interests of the controller (balance of interest) Legitimacy

11 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 11 Adequate, relevant and not excessive (in relation to purpose) Accurate and kept up to date Kept in a form which permits identification for no longer than necessary Quality of data

12 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 12 Personal data must be collected for a specified, explicit and legitimate purpose Not further processed in a way incompatible with those purposes Finality principle

13 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 13 Processing of sensitive data is in principle prohibited Data revealing race or ethnic origin, political opinions, religious or philosophical belief, trade-union membership, health or sexual life Exceptions: –explicit consent, –obligations of controller in employment field, –vital interests data subject or another person, –legitimate activities of non-profit organisation, –data manifestly made public or legal claims Sensitive data

14 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 14 Data protection rights Information for the data subject: –clear and understandable language –sufficient information Access to own data Rectification Objection Complaint to Data Protection Authority Rights of the individual

15 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 15 Controller obligations Responsible for exercise of data subjects rights Confidentiality of the processing Security of the processing Notification to the data protection authority Liability Obligations

16 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 16 Data Protection Supervision Authorities Fully independent bodies Responsible for enforcing national legislation Organization to be decided by Member States Criteria + powers: EC Directive 95/46/EC (Art. 28) cf. Council of Europe: Additional protocol to Convention 108 regarding supervisory authorities and transborder data flows (ETS No. 181) Full iIndependence means : no government control or supervision Supervisory Authority

17 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 17 European initiatives Over 30 national DPAs An independent Working Party including 27 Dpas plus observers (Article 29 of Directive 95/46/EC) http://ec.europa.eu/justice_home/fsj/privacy/workinggroup/index_en.htm Several primary objectives: To promote the uniform application of the general principles of the Directives in all Member States and the co-operation between Dpas To advise the European Commission on data protection on any Community measures affecting the rights and freedoms of natural persons with regard to the processing of personal data and privacy. To make recommendations to the public at large on matters relating to the protection of persons with regard to the processing of personal data and privacy in the EU

18 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 18 The transfer of personal data is authorised within the Member States of the EU and the EEA (25 EU + Island + Liechtenstein + Norway) (situation in 2005) Transfer of data

19 European CommissionDirectorate-General Justice, Freedom and Security Data Protection Transfer of personal data outside the EU/EEA under certain conditions : Exceptions: Adequate protection by third country Adequacy decision by COM Authorisation by Supervisory Authority Standard contractual clauses Transfer of data

20 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 20 Resolution on Development on International Standards (29^International Conference Montreal 26-28 September 2007 to support the development of effective and universally accepted nternational privacy standards

21 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 21 Communication from the European Commission to the European Parliament and to the Council 7 March 2007 (2007) 87

22 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 22 Resolution International Co-operation (29^International Conference Montreal 26-28 September 2007) Recognise that countries have adopted different approaches to protecting personal information and enhancing privacy rights Encourage Data Protection Commissioners to further develop their existing efforts to support international co- operation and to work with internationl organisations to strengthen data protection worldwide

23 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 23 Declaration of Civil Society Organizations on the Role of Data Protection and Privacy Commissioners (Montreal, September 25, 2007) The worlds Privacy Commissioners must increase their own collective efforts at protecting privacy to counterbalance the increasing cross-border efforts of the worlds security establishments Privacy Commissioners should be more proactive in addressing the privacy impacts of commercial purposes…

24 European CommissionDirectorate-General Justice, Freedom and Security Data Protection 24 Thank you for your attention

Download ppt "European CommissionDirectorate-General Justice, Freedom and Security Data Protection 1 Conference on Cross Border Data Flows & Privacy October 15-16, 2007."

Similar presentations

Re-use of PSI Data Protection Issues Cécile de Terwangne Professor at the Law Faculty, Research Director at CRIDS University of Namur (Belgium) 2 nd LAPSI.

Re-use of PSI Data Protection Issues Cécile de Terwangne Professor at the Law Faculty, Research Director at CRIDS University of Namur (Belgium) 2 nd LAPSI.
Public Sector Information & Data Protection: A plea for personal privacy settings for the re-use of PSI Bart van der Sloot Institute for Information Law.

Public Sector Information & Data Protection: A plea for personal privacy settings for the re-use of PSI Bart van der Sloot Institute for Information Law.
PRIVACY ASPECTS OF RE-USE OF PSI: BETWEEN PRIVATE AND PUBLIC SECTOR

PRIVACY ASPECTS OF RE-USE OF PSI: BETWEEN PRIVATE AND PUBLIC SECTOR
Www.fra.europa.eu EU-MIDIS European Union Minorities & Discrimination Survey Collecting reliable and comparable data on the Roma across the EU Eva Sobotka.

EU-MIDIS European Union Minorities & Discrimination Survey Collecting reliable and comparable data on the Roma across the EU Eva Sobotka.
1 Enforcement Powers of National Data Protection Authorities and Experience gained of the Data Protection Directive Safe Harbour Conference Washington.

1 Enforcement Powers of National Data Protection Authorities and Experience gained of the Data Protection Directive Safe Harbour Conference Washington.
Data Protection & Human Rights. Data Protection: a Human Right Part of Right to Personal Privacy Personal Privacy : necessary in a Democratic Society.

Data Protection & Human Rights. Data Protection: a Human Right Part of Right to Personal Privacy Personal Privacy : necessary in a Democratic Society.
Data Protection Billy Hawkes Data Protection Commissioner Irish Human Rights Commission 20 November 2010.

Data Protection Billy Hawkes Data Protection Commissioner Irish Human Rights Commission 20 November 2010.
Data Protection & Privacy in the Information Age COMNET – Legal Frameworks for ICTs Malta 2013 Dr Antonio Ghio Dr Jeanine Rizzo.

Data Protection & Privacy in the Information Age COMNET – Legal Frameworks for ICTs Malta 2013 Dr Antonio Ghio Dr Jeanine Rizzo.
DATA PROTECTION and Research University Research Ethics Committee – 30.05.2008 David Cauchi David Cauchi Office of the Commissioner for Data Protection.

DATA PROTECTION and Research University Research Ethics Committee – David Cauchi David Cauchi Office of the Commissioner for Data Protection.
The data retention directive: data protection aspects Frank Robben General manager Crossroads Bank for Social Security Sint-Pieterssteenweg 375 B-1040.

The data retention directive: data protection aspects Frank Robben General manager Crossroads Bank for Social Security Sint-Pieterssteenweg 375 B-1040.
Introduction to basic principles of Regulation (EC) 45/2001 Sophie Louveaux María Verónica Pérez Asinari.

Introduction to basic principles of Regulation (EC) 45/2001 Sophie Louveaux María Verónica Pérez Asinari.
Convention for the protection of individual with regard to automatic processing of personal data “The purpose of this convention is to secure in the territory.

Convention for the protection of individual with regard to automatic processing of personal data “The purpose of this convention is to secure in the territory.
Protection of Personal Data, 11.02.2011. Historical context In 1982, Iceland signed the Council of Europe Convention nr. 108 from 1981 for the Protection.

Protection of Personal Data, Historical context In 1982, Iceland signed the Council of Europe Convention nr. 108 from 1981 for the Protection.
Www.dataprotection.gov.je The Data Protection (Jersey) Law 2005.

The Data Protection (Jersey) Law 2005.
Signature (unit, name, etc.) Introduction to biometrics from a legal perspective Yue Liu Mar. 2007 NRCCL, UIO.

Signature (unit, name, etc.) Introduction to biometrics from a legal perspective Yue Liu Mar NRCCL, UIO.
DATA PROTECTION and Research University Research Ethics Committee – 08.05.2006 David Cauchi Office of the Data Protection Commissioner.

DATA PROTECTION and Research University Research Ethics Committee – David Cauchi Office of the Data Protection Commissioner.
What does the Data Protection Act do? It sets standards which must be satisfied when obtaining, recording, holding, using, disclosing or disposing of.

What does the Data Protection Act do? It sets standards which must be satisfied when obtaining, recording, holding, using, disclosing or disposing of.
ILONA GAVRONSKA GROUP IL-41 INTERNATIONAL LAW DEPARTMENT KYIV - 2011 NATIONAL ACADEMY OF SCIENCES OF UKRAINE KYIV UNIVERSITY OF LAW.

ILONA GAVRONSKA GROUP IL-41 INTERNATIONAL LAW DEPARTMENT KYIV NATIONAL ACADEMY OF SCIENCES OF UKRAINE KYIV UNIVERSITY OF LAW.
A European View of Privacy Protection John Woulds Director of Operations UK Data Protection Commissioner National Conference on Privacy, Technology & Criminal.

A European View of Privacy Protection John Woulds Director of Operations UK Data Protection Commissioner National Conference on Privacy, Technology & Criminal.
Data Protection: International. Data Protection: a Human Right Part of Right to Personal Privacy Personal Privacy : necessary in a Democratic Society.

Data Protection: International. Data Protection: a Human Right Part of Right to Personal Privacy Personal Privacy : necessary in a Democratic Society.

Similar presentations

Ads by Google