Wednesday

26th Jun 2019

EU parliament passes grand data protection law

  • New EU data protection rules will take two years to be transposed into national laws (Photo: Alessio Milan)

One of the most heavily lobbied bills in the history of the European Parliament, on data protection, was passed into law on Thursday (14 April).

First proposed four years ago, the reformed EU data protection regulation is designed to meld different legal approaches in EU states into one single rulebook and to give people more control over their personal information.

Read and decide

Join EUobserver today

Support quality EU news

Get instant access to all articles — and 18 year's of archives. 30 days free trial.

... or join as a group

"The legislation will create an EU-wide data protection regime for the first time, replacing the outdated patchwork of national data protection rules," said German Green MEP Jan Phillip Albrecht, who spearheaded the regulation.

The regulation was voted in alongside a weaker legal instrument, a directive, that aims to provide a similar framework on police probes.

But while both promise to create a new gold standard on data protection rights for Europeans, outstanding issues on how they fits into a new EU-US Privacy Shield data-sharing pact remain.

The data package was also voted through after MEPs backed a controversial airline passenger data sharing agreement, which risks being challenged in front of the European Court of Justice in Luxembourg.

Lobbying

The importance of the new regulation was not lost on lobbyists who managed to force through numerous amendments in the bill during its stint at the European parliament.

MEPs tabled around 4,000 amendments. Some copy-pasted amendments made by giant US-based IT companies directly into the bill.

Among the most prolific was Belgian liberal Louis Michel, the father of Belgium's prime minister Charles Michel.

Michel had issued over 220 amendments, most of which undermined privacy rights in the bill.

The former EU commissioner, whose portfolio at the assembly deals primarily with Africa, later claimed he was unaware of the data amendments, then blamed his assistant whom he fired.

Joe McNamee, executive director of the Brussels-based European Digital Rights, said the lobbying campaign had removed "much of the ambition of the original data protection package".

Step up

Despite the wranglings, the regulation is still viewed as step up on protection rights and rules when compared to the old 1995 law, which it replaces.

People will now have the right transfer data to another service provider and the right to know if their data has been hacked. Data breaches will have to reported within 72 hours.

A right-to-be-forgotten provision allows people to ask their names to be removed from links in on line searches.

Firms that violate the rules can be fined up to 4 percent of the total global annual turnover or up to €20 million.

Complaints or possible violations will be handled by the data protection authority where the company has its headquarters.

The rules cover all businesses that handle data of EU citizens, even those not based in Europe.

The regulation enters into force over the summer at which point EU states will have two years to transpose it.

Police and surveillance

Centre-left Estonian MEP Marju Lauristin, who headed the file on the police directive, said her new legislation will also prohibit mass surveillance and lengthy, unjustified retention periods of data.

But last year France adopted a wide sweeping surveillance bill that allows authorities to monitor phone calls and emails without judicial approval and to install so-called black boxes internet service providers to hoover up data.

The UK and Sweden are also being challenged for similar moves in front of the European Court of Justice.

And the EU-US Privacy Shield was panned by EU data protection regulators earlier this week because it still allows US authorities broad discretion to bulk collect personal details.

MEPs set to back air-passenger data sharing

EU lawmakers are likely to pass the Passenger Name Records bill into law on Thursday despite outstanding questions on its costs, effectiveness and impact on civil liberties.

Focus

New EU right to data portability to cause headaches

Next year, companies will be required to move personal data to competitors if consumers decide to switch. Yet one year before the new rules go into force, a lot is still unclear.

News in Brief

  1. EU warns Turkey as 'Gezi Park' trials begin
  2. EU universities to share students, curricula
  3. Migrant rescue ship loses Human Rights Court appeal
  4. Denmark completes social democrat sweep of Nordics
  5. Johnson offers 'do or die' pledge on Brexit
  6. Weber indirectly attacks Macron in newspaper op-ed
  7. EU to sign free trade deal with Vietnam
  8. EU funding of air traffic control 'largely unnecessary'

Stalling on VAT reform costing billions, says Commission

German media outlet Correctiv, along with other newsrooms, have revealed how criminals annually cheat EU states out of billions in VAT fraud. The EU Commission says solutions exist - but member states refuse to budge on tax unanimity.

Stakeholders' Highlights

  1. International Partnership for Human RightsEU-Uzbekistan Human Rights Dialogue: EU to raise key fundamental rights issues
  2. Nordic Council of MinistersNo evidence that social media are harmful to young people
  3. Nordic Council of MinistersCanada to host the joint Nordic cultural initiative 2021
  4. Vote for the EU Sutainable Energy AwardsCast your vote for your favourite EUSEW Award finalist. You choose the winner of 2019 Citizen’s Award.
  5. Nordic Council of MinistersEducation gets refugees into work
  6. Counter BalanceSign the petition to help reform the EU’s Bank
  7. UNICEFChild rights organisations encourage candidates for EU elections to become Child Rights Champions
  8. UNESDAUNESDA Outlines 2019-2024 Aspirations: Sustainability, Responsibility, Competitiveness
  9. Counter BalanceRecord citizens’ input to EU bank’s consultation calls on EIB to abandon fossil fuels
  10. International Partnership for Human RightsAnnual EU-Turkmenistan Human Rights Dialogue takes place in Ashgabat
  11. Nordic Council of MinistersNew campaign: spot, capture and share Traces of North
  12. Nordic Council of MinistersLeading Nordic candidates go head-to-head in EU election debate

Latest News

  1. EU moves to end car-testing 'confidentiality clause'
  2. EU parliament gives extra time for leaders on top jobs
  3. Europe's rights watchdog lifts Russia sanctions
  4. EU-Vietnam trade deal a bad day for workers' rights
  5. EU 'special envoy' going to US plan for Palestine
  6. Polish judicial reforms broke EU law, court says
  7. EU study: no evidence of 'East vs West' food discrimination
  8. Russia tried to stir up Irish troubles, US think tank says

Stakeholders' Highlights

  1. Nordic Council of MinistersNew Secretary General: Nordic co-operation must benefit everybody
  2. Platform for Peace and JusticeMEP Kati Piri: “Our red line on Turkey has been crossed”
  3. UNICEF2018 deadliest year yet for children in Syria as war enters 9th year
  4. Nordic Council of MinistersNordic commitment to driving global gender equality
  5. International Partnership for Human RightsMeet your defender: Rasul Jafarov leading human rights defender from Azerbaijan
  6. UNICEFUNICEF Hosts MEPs in Jordan Ahead of Brussels Conference on the Future of Syria
  7. Nordic Council of MinistersNordic talks on parental leave at the UN
  8. International Partnership for Human RightsTrial of Chechen prisoner of conscience and human rights activist Oyub Titiev continues.
  9. Nordic Council of MinistersNordic food policy inspires India to be a sustainable superpower
  10. Nordic Council of MinistersMilestone for Nordic-Baltic e-ID
  11. Counter BalanceEU bank urged to free itself from fossil fuels and take climate leadership
  12. Intercultural Dialogue PlatformRoundtable: Muslim Heresy and the Politics of Human Rights, Dr. Matthew J. Nelson

Join EUobserver

Support quality EU news

Join us