The Role of the EDPS

29e Confrence internationale des commissaires à la protection de la vie prive

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 2929e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29thth INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS



The Role of the EDPS

“Ensuring DP in Community policies”

Peter HustinxEuropean Data Protection Supervisor

27 September 2007



Role of the EDPS



EU Data Protection

• Article 8 ECHR• CoE Convention 108

– Basic principles, subject rights, independent supervision

• EC Directives 95/46 and 97/66 (2002/58)• Article 286 EC Treaty• Regulation (EC) 45/2001

– Community institutions and bodies, Community law

• ECJ Österreichischer Rundfunk• EU Charter > Reform Treaty



Monitoring Compliance

• Data Protection Officers– Position Paper on “Role of DPO in ensuring effective

compliance” (2005)

• Prior Checks– Processing operations with specific risks: medical data,

offences, staff evaluation, exclusion of rights, etc

• Complaints & Inquiries– MOU with Ombudsman, DG Competition, ECB-SWIFT

• “Spring 2007”– Taking stock of progress in implementation of Regulation

45/2001 by EC institutions and bodies, with appropriate feedback



Consultation

• Consultation Policy – Article 28.2 of Regulation 45/2001– Inventory for 2007: relevant initiatives (16 > 36)

• First Pillar– Better implementation of Directive 95/46/EC – Communications on RFID and PET– Revision of E-Privacy Directive 2002/58/EC

• Third Pillar– Data Protection Framework– Europol Decision– Implementation of Prüm Treaty



Monitoring Technologies

• Strategic analysis– RFID, Biometrics, Identity Management– Privacy by design – Best available techniques

• Seventh Research Framework (FP7)– IST 2006 Helsinki– Contribution to research projects– Evaluation of pilot projects



Cooperation

• Article 29 Working Party– National DPA, EDPS, Commission

• Joint authorities in Third Pillar– Schengen, Europol, Customs, Eurojust

• EU Information Systems– Eurodac, SIS II, VIS (“coordinated supervision”)– Internal Market, Consumer Protection

• International organisations– Workshops Geneva 2005, Munich 2007



Court Interventions

• PNR cases– Joint cases C-317/04 and C-318/04 before ECJ

• Public access to documents – Cases T-170/03 (British American Tobacco), T-161/04

(Valero Jordana) and T-194/04 (Bavarian Lager) at CFI

• Data retention directive 2006/24/EC– Case C-301/06 (Ireland vs Council and EP) at ECJ

» Scope of legal basis in first pillar?

• Freedom of expression (Art. 9 Directive 95/46/EC)

– Case C-73/07 (Tietosuojavaltuutettu vs Satakunnan Markkinapörssi Oy and Satamedia Oy) at ECJ



More information:

www.edps.europa.eu

[email protected]

Postal address:

Rue Wiertz 60 - MO 63

B-1047 Brussels

Documents

The Role of the EDPS