Monday

19th Nov 2018

New GDPR enforcer says complaints imminent

  • Companies around the world risk massive fines if they violate European data protection rules (Photo: Markus Spiske)

Andrea Jelinek, a former Austrian police chief, will be in charge of coordinating enforcement of the EU's general data protection rules as of Friday (25 May) - in a move that has rattled companies worldwide.

Jelinek chairs a new EU body known as the European data protection board or EDPB which coordinates all the national data protection authorities in a bid to ensure European rights to privacy are uniformly respected throughout member states.

Read and decide

Join EUobserver today

Support quality EU news

Get instant access to all articles — and 18 year's of archives. 30 days free trial.

... or join as a group

It comes with the power to slap huge fines on companies that refuse or fail to comply with the regulation.

It also follows fresh revelations that social media giant Facebook, whose European headquarters is based in Ireland, has allegedly swept up data of people without their consent or knowledge.

Earlier this week in Brussels, Jelinek told reporters she expects complaints against firms like Facebook to be rolling in on day one but has no plans as of Friday to start launching fines.

"I am sure you won't have to wait for a couple of months. I am sure there will be complaints on Friday," she said. Those complaints will first be fielded by respective national data protection authorities and then sent to the EDPB in cross-border cases.

She also noted the EU's data protection regulation was launched two years ago to give businesses the time to prepare for its enforcement.

Any additional leeway will not be granted, she warned, but noted they will only investigate new violations committed as of Friday. One-off violations committed before Friday will not be probed unless they continue.

With a staff of 13 people, set to expand to 25 late next year, the EDPB will have its work cut out. The board is also supported by European data protection supervisor (EDPS), Giovanni Butterali.

Both are in the same building in Brussels near the European Parliament - with an entrance recently staffed with extra security features.

Broader questions remain on how prepared the respective national data protection authorities are to fulfil their role, given some have yet to be fully staffed and equipped.

Last week, the European commission noted eight EU states had yet to pass the national laws required to ensure the data authorities are ready.

"If we combine the army of all DPAs [data protection authorities] altogether including the EDPS, so 28 plus us, we have no more 2,500 people for the time being, which is less than the lobbyist army in Brussels," Butterali told EUobserver.

Jelinek appeared to brush off these concerns, noting that if necessary, the national authorities could possibly shuffle around staff to plug any gaps and in extreme cases, get the European Commission "to act" against state laggards.

"I know that in some countries there are difficulties regarding the staffing, regarding the money and we are going to stress also on the governments to get them to be staffed enough," she said.

It is also not entirely clear how committed some national authorities will be in pursuing cases given Ireland's past history of complicating Austrian privacy campaigner Max Schrem's case against Facebook.

But Jelinek maintained that all data authorities are committed.

"Max Schrems won't have to run to Ireland again, we are going to negotiate and talk to the future lead supervisor authority - if it regards Facebook, this will be Ireland," she said.

Ireland's data regulator Helen Dixon had also told the Financial Times newspaper she is ready to use "the full toolkit" against non-compliant companies, if needed.

Any disputes among data authorities at EDPB will be overrided by a two-third majority vote and if split, the chair's vote will count.

The targets

Their resolve and determination will be put to the test with immediate affect.

Schrems, who has since launched a European enforcement platform known as noyb, has already filed a first round of GDPR complaints against Google, Facebook, Instagram and WhatsApp over issues related to forced consent.

Those complaints were sent to data authorities in France, Belgium, Germany and Austria and could later involve Irish data protection commissioner, given three of the companies are headquarted in Ireland.

All the companies risks well over a billion euros in fines, if found guilty.

Facebook's chief Mark Zuckerberg earlier this week in Brussels brushed off tough questions by MEPs on shadow profiles, a process were data is collected on people who are not signed up to the network. He also skirted questions on whether Facebook gleans personal data off WhatsApp.

Buttarelli, who also sits on the EDPB board, told EUobserver earlier this week that both shadow profiles and WhatsApp data sharing are now are among their priority issues.

"These are the two points which are on our agenda. We need to talk with the other colleagues and see what their perceptions are but they are part of let's say our priorities," he said.

Eight countries to miss EU data protection deadline

The EU starts enforcing its general data protection regulation on 25 May - but Belgium, Bulgaria, Cyprus, Czech Republic, Greece, Hungary, Lithuania and Slovenia won't be ready. The delay will cause legal uncertainty.

Analysis

GDPR does not (yet) give right to global oblivion

The 'right to be forgotten' will become enshrined in EU law on Friday, but it is not yet clear to what extent it will apply. Will the EU's law determine how the internet looks globally?

GDPR - a global 'gold standard'?

The new EU privacy rules are touted as a global 'gold standard' - but Mexico's former data commissioner warns some nations are far from ready.

News in Brief

  1. Germany and France agree eurozone budget framework
  2. Austrian foreign minister: EU's Israel policy 'too strict'
  3. Soros and Kurz discuss Central European University move
  4. EU set to tighten rules on foreign strategic investment
  5. Macron repeats call for unified Europe in Bundestag speech
  6. US warns EU banks and firms against trading with Iran
  7. Merkel urged Romania not to move embassy to Jerusalem
  8. Protesters call for Czech leader to step down

Opinion

Interpol, China and the EU

China joins a long list of countries - including Russia - accused of abusing Interpol's 'Red Notice' system to harras activists and dissidents.

Stakeholders' Highlights

  1. NORDIC COUNCIL OF MINISTERSTheresa May: “We will not be turning our backs on the Nordic region”
  2. International Partnership for Human RightsOpen letter to Emmanuel Macron ahead of Uzbek president's visit
  3. International Partnership for Human RightsRaising key human rights concerns during visit of Turkmenistan's foreign minister
  4. NORDIC COUNCIL OF MINISTERSState of the Nordic Region presented in Brussels
  5. NORDIC COUNCIL OF MINISTERSThe vital bioeconomy. New issue of “Sustainable Growth the Nordic Way” out now
  6. NORDIC COUNCIL OF MINISTERSThe Nordic gender effect goes international
  7. NORDIC COUNCIL OF MINISTERSPaula Lehtomaki from Finland elected as the Council's first female Secretary General
  8. NORDIC COUNCIL OF MINISTERSNordic design sets the stage at COP24, running a competition for sustainable chairs.
  9. Counter BalanceIn Kenya, a motorway funded by the European Investment Bank runs over roadside dwellers
  10. ACCACompany Law Package: Making the Best of Digital and Cross Border Mobility,
  11. International Partnership for Human RightsCivil Society Worried About Shortcomings in EU-Kyrgyzstan Human Rights Dialogue
  12. UNESDAThe European Soft Drinks Industry Supports over 1.7 Million Jobs

Latest News

  1. Dutch flesh out proposal for EU human rights sanctions
  2. EU cheerleaders go to Russia-occupied Ukraine
  3. EU must recognise new force for Balkans destabilisation
  4. Brexit dominates EU affairs This WEEK
  5. How the EU commission got tunnel vision on self-driving cars
  6. No-confidence calls against May put Brexit deal in doubt
  7. Key points of the Brexit deal (if it ever comes into effect)
  8. Romania heaps scorn on 'revolting' EU criticism

Stakeholders' Highlights

  1. Mission of China to the EUJointly Building Belt and Road Initiative Leads to a Better Future for All
  2. International Partnership for Human RightsCivil society asks PACE to appoint Rapporteur to probe issue of political prisoners in Azerbaijan
  3. ACCASocial Mobility – How Can We Increase Opportunities Through Training and Education?
  4. Nordic Council of MinistersEnergy Solutions for a Greener Tomorrow
  5. UNICEFWhat Kind of Europe Do Children Want? Unicef & Eurochild Launch Survey on the Europe Kids Want
  6. Nordic Council of MinistersNordic Countries Take a Stand for Climate-Smart Energy Solutions
  7. Mission of China to the EUChina: Work Together for a Better Globalisation
  8. Nordic Council of MinistersNordics Could Be First Carbon-Negative Region in World
  9. European Federation of Allergy and AirwaysLife Is Possible for Patients with Severe Asthma
  10. PKEE - Polish Energy AssociationCommon-Sense Approach Needed for EU Energy Reform
  11. Nordic Council of MinistersNordic Region to Lead in Developing and Rolling Out 5G Network
  12. Mission of China to the EUChina-EU Economic and Trade Relations Enjoy a Bright Future

Join EUobserver

Support quality EU news

Join us