FutureTech Congress in Warsaw
Speech by Giovanni Buttarelli at the FutureTech Confress in Warsaw, Poland, for the panel "The impact of the GDPR on solutions based on Big Data processing"
In recent years, the EU has witnessed a proliferation of regulatory requirements stemming from the EU’s new ‘Digital Rulebook’ that came to complement the General Data Protection Regulation. It includes in particular the Digital Services Act, the Digital Markets Act, the Data Act, and the Artificial Intelligence Act. But while EU data protection law is often referred to as the ‘cornerstone’ upon which the EU Digital Rulebook is built, these interplay between these Regulations and the GDPR is complex and many of them display multiple overlaps that need to be addressed via consistent guidance and application by the various authorities competent to monitor their compliance.
Simultaneous actions by various regulators highlight the potential for conflicts and inconsistencies when data-related practices are scrutinized from different legal perspectives, and emphasize the critical need for enhanced dialogue, cooperation, and coordination among regulatory bodies to ensure a predictable and effective legal environment that places fundamental rights at the core.
More recently, several examples of multilateral cooperation initiatives between regulators from different legal fields applicable to the EU digital economy have emerged at national level. However, a forum where authorities competent to enforce the different parts of the EU Digital Rulebook and other laws applicable in the Digital Single Market can come together to discuss matters of coherent application does not yet exist at EU level.
This is why the EDPS has recently proposed to establish a Digital Clearinghouse 2.0 that would provide authorities and bodies competent to enforce EU laws in the digital economy with a forum to exchange and coordinate on issues of common interest, to align at the level of policies and legal interpretations.
In the long term, the Digital Clearinghouse 2.0 could become a forum where participating authorities can share information about ongoing enforcement actions so as to facilitate further (bilateral or multilateral) engagement with other authorities on those concrete cases where relevant. However, this is likely to require legislative intervention which is not yet on the cards.
Recent national experiences of fostering cross-regulatory dialogue indicate that there is added value in having a well-resourced central body providing a secretariat for the Digital Clearinghouse 2.0, in particular to ensure the timely delivery by participating authorities of concrete outcomes promoting cross-regulatory coherence.
The EDPS is committed to making this forum a reality and is open to discussing with relevant EU and national policymakers and competent authorities on how to get there.
Since 2014, the EDPS has been working on the interplay and synergies between EU rules on data protection with other fields of EU law. The Preliminary Opinion on Privacy and Competitiveness in the Age of Big Data of the EDPS observed a tendency for EU rules on data protection, consumer protection and competition law to be applied in silos, while they could (and should) be applied in a more coherent manner.
In 2016, the EDPS proposed the establishment of a Digital Clearinghouse to bring together competent authorities from the areas of competition, consumer and data protection willing to share information and discuss how best to enforce rules in the interests of individuals.
The Digital Clearinghouse met for the first time in Brussels on 29 May 2017. From 2019, the Digital Clearinghouse was jointly hosted by the Research Centre in Information, Law and Society (CRIDS) at the University of Namur, the Tilburg Institute for Law, Technology, and Society (TILT) at Tilburg University, and the European Policy Centre (EPC) in Brussels. The Digital Clearinghouse “1.0” met for the last time on 10 June 2020. The statements of all seven meetings of the Digital Clearinghouse can be found here.
The meetings of the Digital Clearinghouse between 2017 and 2020 dovetailed with a broader debate on the implications data-intensive business models for consistent application of EU law and the need for reflection by legislators and regulators.
Speech by Giovanni Buttarelli at the FutureTech Confress in Warsaw, Poland, for the panel "The impact of the GDPR on solutions based on Big Data processing"
Speech by Giovanni Buttarelli at the 19th Meeting of the Central and Eastern European Data Protection Authorities (CEEDPA) in Tbilisi, Georgia
The state of privacy 2017: mid-mandate report, Speech by Giovanni Buttarelli for the presentation of the 2016 EDPS Annual Report to the LIBE Committee, European Parliament
The new EU data protection framework consists of much more than just the GDPR. New rules for the EU institutions and ePrivacy are yet to be finalised, and remain a key focal point for EDPS work. As well as providing advice to the legislator on these new rules, the EDPS has started working with the EU institutions and bodies to prepare them for the changes to come. A particular focus of his efforts in 2016 was on promoting accountability, a central pillar of the GDPR which it is safe to assume will also be integrated into the new rules for EU institutions and bodies.
In 2016, the EDPS also made a considerable effort to help move the global debate on data protection and privacy forward and mainstream data protection into international policies. He advised the EU legislator on the Umbrella agreement and the Privacy Shield and engaged with data protection and privacy commissioners from every continent. He also continued to pursue new initiatives, such as the Ethics Advisory Group, through which he intends to stimulate global debate on the ethical dimension of data protection in the digital era.
The EDPS aims to make data protection as simple and effective as possible for all involved. This requires ensuring that EU policy both reflects the realities of data protection in the digital era and encourages compliance through accountability.
EDPS Opinion on the proposed common framework for European statistics relating to persons and households