Sunday

26th Mar 2017

EU bill gives web users 'right to be forgotten'

  • New Commission proposals would strengthen data protection rights of individuals (Photo: respres)

The EU commission has unveiled a single EU-wide law on internet privacy that could see overseas firms hit with multi-million-euro fines.

EU justice commissioner Viviane Reding told press at the launch event in Brussels on Wednesday (25 January) that "personal data is the currency of the digital market and it must be stable and trustworthy." She also called data protection "a fundamental right for all Europeans."

Dear EUobserver reader

Subscribe now for unrestricted access to EUobserver.

Sign up for 30 days' free trial, no obligation. Full subscription only 15 € / month or 150 € / year.

  1. Unlimited access on desktop and mobile
  2. All premium articles, analysis, commentary and investigations
  3. EUobserver archives

EUobserver is the only independent news media covering EU affairs in Brussels and all 28 member states.

♡ We value your support.

If you already have an account click here to login.

The draft regulation updates an old law from 1995 and comes at a time when 250 million EU citizens log on every day.

It gives people the 'right to be forgotten' by enabling them to force firms such as Facebook or Amazon to take their personal information off the internet or to delete it from their internal servers unless they can give a compelling reason to say No.

It also gives users the right to take their data away from one company and give it to another.

For their part, firms would have to seek explicit consent if they want to use someone's information for actions such as a marketing campaign. They would also have to notify people and national authorities within 24 hours if there is a security breach.

Member states and MEPs still need to comb through the proposal in a process that usually takes between 18 months to three years. The regulation will come into force two years after it is adopted.

If it goes through in its current form it will affect any company around the world which does business online in the Union and it will have bite.

Fines for non-compliance start at €250,000 or up to 0.5 percent of turnover if, for instance, a firm tries to charge a fee when someone seeks access to their own data. They go up to €500,000 or up to 1 percent if it flat-out refuses to supply the data. And they hit €1 million or 2 percent of turnover for the most serious violations, such as selling people's data without their consent.

The US-based Google's turnover last year was about €30 billion.

The fines are to be levied by new regulators set up in each EU country in charge of applying the law.

Reding on Wednesday said the bill will be good for companies because it creates a single set of rules across the bloc. She estimated that firms' compliance with the mixed bag of 27 national jurisdictions currently wastes €130 million a year.

Big business is taking a keen interest in the EU development.

For its part, Google pre-empted the commission press launch by announcing earlier on Wednesday its own set of privacy reforms. When questioned on the timing, the world's largest internet company told EUobserver it has been working on a new privacy policy since last year.

Ron Zink, a senior lawyer in Microsoft, said the EU bill is good because it will reduce costs. But he added it "may be too prescriptive and not advance the interests of consumers," without going into detail.

In signs of a lobbying battle to come, pro-civil-liberties campaigners, such as German Green MEP Jan Philipp Albrecht, like the Reding scheme. But some parts of industry do not.

"Today's proposals will ... hit advertising revenue and hinder long-term innovation, competitiveness and growth in Europe," the Brussels-based World Federation of Advertisers said.

EU backs down on 'right to be forgotten' online

After intense lobbying by online companies from Europe and the US, the European Commission has softened its stance on the 'right to be forgotten' in preparation of an overhaul of the bloc's data privacy rules due early next year.

Focus

Obama launches online bill of rights

US President Barack Obama on Thursday unveiled a Consumer Privacy Bill of Rights aimed at improving data privacy protection on the Internet - but it appears less radical that the recently published EU version.

Focus

EU institutions take on Google over privacy regime

Google is under fire for its new privacy policy, which came into force on Thursday, with the French Data Protection Authority and the EU commission indicating that it falls foul of EU law.

Stakeholders' Highlights

  1. European Gaming & Betting Association60 Years Rome Treaty – 60 Years Building an Internal Market
  2. Malta EU 2017New EU Rules to Prevent Terrorism and Give More Rights to Victims Approved
  3. European Jewish Congress"Extremists Still Have Ability and Motivation to Murder in Europe" Says EJC President
  4. European Gaming & Betting AssociationAudiovisual Media Services Directive to Exclude Minors from Gambling Ads
  5. ILGA-EuropeTime for a Reality Check on International Day for the Elimination of Racial Discrimination
  6. UNICEFHuman Cost to Refugee and Migrant Children Mounts Up One Year After EU-Turkey Deal
  7. Malta EU 2017Council Adopts New Rules to Improve Safety of Medical Devices
  8. Nordic Council of MinistersNordic Energy Research: How to Reach 100 Percent Renewable Energy
  9. Party of European SocialistsWe Must Renew Europe for All Europeans
  10. MEP Tomáš ZdechovskýThe European Commission Has Failed in Its Fight Against Food Waste
  11. ILGA-EuropeEP Recognises Discrimination Faced by Trans & Intersex People
  12. Nordic Council of Ministers25 Nordic Bioeconomy Cases for Sustainable Change