L'un des objectifs du règlement général sur la protection des données (RGPD) est de favoriser l’autonomisation des individus et de leur donner le contrôle sur leurs données à caractère personnel. Le RGPD comporte un chapitre sur les droits des personnes concernées (individus) qui inclut le droit d’accès, le droit de rectification, le droit d’effacement, le droit de limiter le traitement, le droit à la portabilité des données, le droit d’opposition et le droit de ne pas être soumis à une décision fondée exclusivement sur le traitement automatisé.
Deuxième avis sur la proposition de décision-cadre du Conseil relative à la protection des données à caractère personnel traitées dans le cadre de la coopération policière et judiciaire en matière pénale, JO C 91, 26.04.2007, p. 9
The second opinion on the proposal for a framework decision for data protection in the third pillar was issued for two reasons. Firstly, a framework decision on the protection of personal data in the third pillar is extremely important to the EDPS. Secondly, there are serious fears that the negotiations in Council will result in essential safeguards to the citizens being deleted or substantially weakened. Therefore, the EDPS recommends that Council allows for more time for the negotiations in order to achieve a result.that offers sufficient protection.
The main concern is that the proposal in its current state will lead to an artificial division in data files - between national data and data originating from another Member State. Not only will this lead to burdensome, complex and costly handling, but it will also lead to difficulties for citizens in exercising their rights. A number of other concerns are raised, relating to the lack of special safeguards on sensitive data; possibilities to exchange data with non-law enforcement authorities; the non-requirement of 'adequate protection' guarantees when exchanging data with third countries, etc.
Avis concernant la proposition modifiée de règlement relatif à l'assistance administrative mutuelle aux fins de la protection des intérêts financiers de la Communauté contre la fraude et toute autre activité illégale, JO C 94, 28.04.2007, p. 1
The amended proposal sets forth communication and assistance procedures between the Commission and Member States in order to protect the Community financial interests.
The EDPS considers that the proposal on the whole maintains the level of protection of personal data contained in the EU data protection framework; Directive 95/46/EC and Regulation 45/2001.
Nevertheless, the EDPS notes that whether such standards of data protection will indeed be maintained depend on the specific content of implementing legislation for which the proposal creates a legal basis. Since implementing legislation will be crucial for the protection of personal data in this context, the EDPS particularly welcomes the obligation to consult him on the drafting of such implementing legislation.
Avis concernant la proposition de règlement modifiant le règlement (CE) no 1073/1999 relatif aux enquêtes effectuées par l'Office européen de lutte antifraude (OLAF), JO C 91, 26.04.2007, p. 1
The proposal relates to OLAF's operational activities because it aims to amend the Regulation which lays down the rules and constitute the legal basis for investigations, etc. The aim is to:
Improve the effectiveness of investigations;
Facilitate the exchange between OLAF and the various institutions concerning information about suspected wrongdoings, at both EU and national level; and
Guarantee the rights of persons implicated in an investigation, including their right to data protection and privacy and make procedural guarantees stronger.
The EDPS agrees with the significance of the goals and objectives pursued by the proposed amendments, especially regarding the procedural guarantees afforded to individuals. However, when it comes to personal data protection, the proposal could be further improved without jeopardising the objectives that it pursues. Concerns relate to the right of information, access and rectification as well as exchanges of personal information. The EDPS also proposes measures regarding the confidentiality of whistleblowers.
Déclaration de Montreux "Dans un monde globalisé, un droit universel à la protection des données personnelles et à la vie privée dans le respect des diversités"
