Publication of personal data on the Internet
Letter concerning the publication of personal data on the Internet and the applicability or not of Article 9 of the Regulation
L'un des objectifs du règlement général sur la protection des données (RGPD) est de favoriser l’autonomisation des individus et de leur donner le contrôle sur leurs données à caractère personnel. Le RGPD comporte un chapitre sur les droits des personnes concernées (individus) qui inclut le droit d’accès, le droit de rectification, le droit d’effacement, le droit de limiter le traitement, le droit à la portabilité des données, le droit d’opposition et le droit de ne pas être soumis à une décision fondée exclusivement sur le traitement automatisé.
Letter concerning the publication of personal data on the Internet and the applicability or not of Article 9 of the Regulation
Deuxième avis sur la proposition de décision-cadre du Conseil relative à la protection des données à caractère personnel traitées dans le cadre de la coopération policière et judiciaire en matière pénale, JO C 91, 26.04.2007, p. 9
The main concern is that the proposal in its current state will lead to an artificial division in data files - between national data and data originating from another Member State. Not only will this lead to burdensome, complex and costly handling, but it will also lead to difficulties for citizens in exercising their rights. A number of other concerns are raised, relating to the lack of special safeguards on sensitive data; possibilities to exchange data with non-law enforcement authorities; the non-requirement of 'adequate protection' guarantees when exchanging data with third countries, etc.
Avis concernant la proposition modifiée de règlement relatif à l'assistance administrative mutuelle aux fins de la protection des intérêts financiers de la Communauté contre la fraude et toute autre activité illégale, JO C 94, 28.04.2007, p. 1
Nevertheless, the EDPS notes that whether such standards of data protection will indeed be maintained depend on the specific content of implementing legislation for which the proposal creates a legal basis. Since implementing legislation will be crucial for the protection of personal data in this context, the EDPS particularly welcomes the obligation to consult him on the drafting of such implementing legislation.
Avis concernant la proposition de règlement modifiant le règlement (CE) no 1073/1999 relatif aux enquêtes effectuées par l'Office européen de lutte antifraude (OLAF), JO C 91, 26.04.2007, p. 1
The proposal relates to OLAF's operational activities because it aims to amend the Regulation which lays down the rules and constitute the legal basis for investigations, etc. The aim is to:
The EDPS agrees with the significance of the goals and objectives pursued by the proposed amendments, especially regarding the procedural guarantees afforded to individuals. However, when it comes to personal data protection, the proposal could be further improved without jeopardising the objectives that it pursues. Concerns relate to the right of information, access and rectification as well as exchanges of personal information. The EDPS also proposes measures regarding the confidentiality of whistleblowers.