EU Ministers Agree in Principle to New Data Protection Oversight. Data protection case law of European Court of Human Rights, Jan. Euro-deputies weaken data protection law. BCR launched. P Hustinx opinion on DP. SaaS open letter. Omer Tene DPD innovative. DPD review to apply to FB. EU DP united but not UK. How will data protection and cloud computing develop in 2014? After Edward Snowden’s whistleblowing around Prism, how quickly will legislators respond to calls for increased data security? Photograph: The Guardian/AFP/Getty Images Data protection is coming of age. 2014 means it's 16 years since the Data Protection Act was enacted, but the technical environment has evolved almost beyond recognition in that time. In the wake of Edward Snowden's spectacular whistleblowing around Prism in 2013 the question is whether 2014 will be a year spent wondering how safe our personal data is, or one where legislators respond to industry and consumer calls for better data security.
US Consumer Bill of RightsThe US will have to work hard in 2014 to shrug off the Snowden revelations. In 2014, this US wide legislation might well make it into the statute books. European cloud securityI see a spring in the step of EU legislators, who are moving quickly (well, quickly for a bunch of lawyers) to pull together regulations for cloud security. Privacy? What privacy? EU's draft law on your data is useless, say digital rights orgs. Activists have leaked the latest draft of Europe’s planned data protection law – which is supposed to safeguard Europeans' personal information when in the hands of businesses and governments. The proposed rules have been agreed by the European Parliament. Now Euro nations' government ministers, who sit on the Council of the European Union, are tearing the text apart, and rewriting large chunks of it.
The 305-page document [PDF] – obtained and published by Privacy International, EDRi, Access and the Panoptykon Foundation – shows the changes put forward by the council. The four civil-liberties groups say ministers are effectively ruining any chance of real data protection in the EU. “Some of the council's proposals gut data protection of all meaning. This tampering is at odds with the European Commission's original draft, which required "explicit consent" for tracking online – opt-in rather than opt-out, in other words. Mangled This latest leaked text is not final. Technology and Privacy (II) | Amsterdam Privacy Conference.
The European Commission’s proposed new Data Protection Regulation would make data protection impact assessments (otherwise known as privacy impact assessments, PIAs) mandatory “where processing operations present specific risks to the rights and freedoms of data subjects”. In view of the hundreds of thousands of companies and government departments that process personal data across Europe1, Article 33 of the proposed Regulation could have far-reaching consequences – in the costs and benefits of conducting a PIA.
However, there is no agreed methodology for conducting a PIA. In fact, there are several differing methodologies – for example, in Australia, Canada, Ireland, New Zealand, the UK and the US. In addition, the ISO developed a voluntary standard for PIA for the financial services industry in 2008, and the Article 29 Data Protection Working Party endorsed a PIA Framework for RFID in February 2011. Justice - Data Protection - Documents adopted by the Data Protection Working Party - 2007. 52008PC0723. Amended proposal for a Directive of the European Parliament and of the Council Amending Directive 2002/22/EC on universal service and users’ rights relating to electronic communications networks, Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sectors and Regulation (EC) No 2006/2004 on consumer protection cooperation (Text with EEA relevance) /* COM/2008/0723 final - COD 2007/0248 */ [pic] | COMMISSION OF THE EUROPEAN COMMUNITIES | Brussels, 6.11.2008 COM(2008)723 final Amended proposal for a Amending Directive 2002/22/EC on universal service and users’ rights relating to electronic communications networks, Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sectors and Regulation (EC) No 2006/2004 on consumer protection cooperation (Text with EEA relevance) 2.
More specifically, the objectives of the present proposals are two-fold: 1. 2. For your information. For research to flourish in the 21st century it is essential that we retain the trust of respondents and maintain integrity in the way research is conducted and research techniques applied. But rapid technological and social changes mean that protecting these essential elements has become more challenging. Last year the European Commission published a consultation on the legal framework for the fundamental right to protect personal data. The consultation sought views on new challenges to protecting individuals’ data. For research, data protection legislation is vital to what we do. It is the responsibility of all research organisations to ensure that they understand the legislation and implement it correctly on a corporate level.
The last review of the data protection directive in 2002 resulted in no change. Since the consultation several developments have given an indication of likely changes ahead. The Efamro-Esomar submission was just the first step on this journey. Follow us on. Kuner-EU-regulation-article. Data Protection Directive Provides For Complete Harmonisation Says ECJ - Information Technology and Telecoms - European Union. Terms & Conditions and Privacy Statement Mondaq.com (the Website) is owned and managed by Mondaq Ltd and as a user you are granted a non-exclusive, revocable license to access the Website under its terms and conditions of use.
Your use of the Website constitutes your agreement to the following terms and conditions of use. Mondaq Ltd may terminate your use of the Website if you are in breach of these terms and conditions or if Mondaq Ltd decides to terminate your license of use for whatever reason. Use of www.mondaq.com You may use the Website but are required to register as a user if you wish to read the full text of the content and articles available (the Content). Disclaimer Mondaq Ltd and/or its respective suppliers make no representations about the suitability of the information contained in the documents and related graphics published on this server for any purpose. Registration To allow you to personalize the Mondaq websites you are visiting. Information Collection and Use Cookies Links. Viktor Mayer-Schönberger presents "Delete: The Virtue of Forgetting in the Digital Age"
Com_2012_11_en. Advertisement. Telecoms: Commission launches case against UK over privacy and personal data protection. Brussels, 14 April 2009 “Technologies like internet behavioural advertising can be useful for businesses and consumers but they must be used in a way that complies with EU rules. These rules are there to protect the privacy of citizens and must be rigorously enforced by all Member States," said EU Telecoms Commissioner Viviane Reding. “We have been following the Phorm case for some time and have concluded that there are problems in the way the UK has implemented parts of EU rules on the confidentiality of communications. I call on the UK authorities to change their national laws and ensure that national authorities are duly empowered and have proper sanctions at their disposal to enforce EU legislation on the confidentiality of communications.
This should allow the UK to respond more vigorously to new challenges to ePrivacy and personal data protection such as those that have arisen in the Phorm case. Background A detailed overview of telecoms infringement proceedings is available at: Print Page - EU Agency for Fundamental Rights: UK Fails to Implement Data Protection. "People across the EU are very concerned about their right to data protection, for example, but if data protection authorities do not have the power to take action against those who infringe that right, we run the risk that the right becomes meaningless. " - Morten Kjaerum, FRA Director It speaks of 'severe concerns as to the effective independence of the Data Protection Authority' in the UK.
Also comments on the funding for the ICO, and 'prima facie' deficiencies in the implementation of the Data Protection Directive. Apparently the EC is investigating a failure by the UK to implement 11 of 34 articles properly. 'Data protection authorities are empowered to levy economic sanctions in only in some Member States.... And independence of the ICO is a major problem; 'At a structural level, a major problem arises due to lack of independence of several supervisory authorities.
A fairly damning analysis of the UK's data protection measures, and the flaccid efforts of the ICO. and: inquiry.’ I do :). Data Protection: The Eight Data Protection Principles.