Activities of Virginie ROZIÈRE related to 2017/0228(COD)
Plenary speeches (1)
Free flow of non-personal data in the European Union (debate) FR
Amendments (18)
Amendment 41 #
Proposal for a regulation
Recital 1
Recital 1
(1) The digitisation of the economy is accelerating. Information and Communications Technology (ICT) is no longer a specific sector but the foundation of all modern innovative economic systems and societies. Electronic data is at the centre of those systems and can generate great value when analysed or combined with services and products. At the same time, cybersecurity represents one of the major threats to our societies. Securing network and information systems in the European Union is essential for the further development of the online economy, as well as for ensuring that there is trust in the digital economy as a whole. Consequently, this Regulation and the ENISA Regulation [2017/0225(COD)] need to be fully consistent with one another.
Amendment 63 #
Proposal for a regulation
Recital 8 a (new)
Recital 8 a (new)
(8a) The organisation and preservation of archives is carried out in the public interest and constitute a non-market service. It falls therefore within the scope of Protocol No 26 on services of general interest annexed to the Treaties. This regulation should therefore not apply to the storage or processing of non-personal data which are related to an activity which is necessary to the fulfilment of a task carried out in the public interest or in the exercise of official authority and which fall within the scope of public archives activity pursuant to the Union or national law.
Amendment 72 #
Proposal for a regulation
Recital 10
Recital 10
(10) Under Regulation (EU) 2016/679, Member States may neither restrict nor prohibit the free movement of personal data within the Union for reasons connected with the protection of natural persons with regard to the processing of personal data. This Regulation establishes the same principle of free movement within the Union for non-personal data except when a restriction or a prohibition would be justified for security reasons. Regulation (EU) 2016/679 and this Regulation provide a coherent set of rules that cater for free movement of different types of data. In the case of mixed data sets, Regulation (EU) 2016/679 should apply to the personal data part of the set, and this Regulation should apply to the non-personal data part of the set. Where non-personal and personal data are inextricably linked, this Regulation should not prejudice the application of Regulation (EU) 2016/679. The protection of the privacy of natural and legal persons as well as the protection of the processing of personal data, in particular Regulation (EU) 2016/679, Directive (EU) 2016/680 and Directive 2002/58/EC shall not be affected by this. Furthermore, this Regulation does not impose an obligation to store the different types of data separately.
Amendment 78 #
Proposal for a regulation
Recital 10 a (new)
Recital 10 a (new)
(10a) Whereas data that is neither personal nor non-personal does not exist by definition, new technological advancements in big data analytics have opened up for the possibility to turn anonymised non-personal data into personal data by comparing and aggregating large quantities of non- personal data. In this case, the line between personal data and non-personal data is not fixed but rather depends upon technological developments and new uses of technologies. In these instances, where non-personal data has become personalised, the data should be treated as such and the provisions laid down in Regulation (EU) 2016/679 should apply accordingly.
Amendment 82 #
Proposal for a regulation
Recital 10 b (new)
Recital 10 b (new)
(10b) The growing availability of Internet of Things (IoT) and the development of machine learning and Artificial Intelligence (AI) goes hand in hand with the proliferation of devices that collect non-personal data. These new technologies are already used in farm productivity, translation, manufacturing robots and navigation systems among others. However, data collected within certain industries could contain both personal and non-personal data and should be treated under the Regulation (EU) 2016/679 and this regulation respectively.
Amendment 83 #
Proposal for a regulation
Recital 10 c (new)
Recital 10 c (new)
(10c) The Commission should provide clear and easily accessible guidelines on the legal treatment of mixed data sets in order for especially SMEs to handle the interaction between this Regulation and Regulation (EU) 2016/679.
Amendment 116 #
Proposal for a regulation
Recital 21
Recital 21
(21) In order to take full advantage of the competitive environment, professional users should be able to make informed choices and easily compare the individual components of various data storage or other processing services offered in the internal market, including as to the contractual conditions of porting data upon the termination of a contract. In order to align with the innovation potential of the market and to take into account the experience and expertise of the providers and professional users of data storage or other processing services, the detailed information and operational requirements for data porting should be defined by market players through self-regulation, encouraged and facilitated by the Commission, in the form of Union codes of conductimplementing acts which may entail model contract terms. Nonetheless, if such codes of conduct are not put in place and effectively implemented within a reasonable period of time, the Commission should review the situation.
Amendment 128 #
Proposal for a regulation
Recital 28
Recital 28
(28) The Commission should periodically review this Regulation, in particular with a view to determining the need for modifications in the light of technological or market developments, especially with regards to the development of artificial intelligence, machine learning, Internet of Things, big data analysis among others.
Amendment 142 #
Proposal for a regulation
Article 2 – paragraph 1 a (new)
Article 2 – paragraph 1 a (new)
1a. In the case of mixed data sets, this Regulation shall apply to the non- personal data part of the set. Where personal and non-personal data are inextricably linked, this Regulation shall apply without prejudice to Regulation (EU) 2016/679.
Amendment 145 #
Proposal for a regulation
Article 2 – paragraph 2
Article 2 – paragraph 2
2. This Regulation shall not apply: a) to an activity which falls outside the scope of Union law or b) to an activity which is necessary to the fulfilment of a task carried out in the public interest or in the exercise of official authority and which fall within the scope of public archives activity pursuant to the Union or national law.
Amendment 150 #
Proposal for a regulation
Article 3 – paragraph 1 – point 1 a (new)
Article 3 – paragraph 1 – point 1 a (new)
1a. ‘mixed data set’ means a data set composed of both personal and non- personal data.
Amendment 178 #
Proposal for a regulation
Article 5 – paragraph 2
Article 5 – paragraph 2
2. Where a competent authority has exhausted all applicable means to obtain access to the datadoes not receive access to the data after having contacted the provider of the data storage or processing service, it may request the assistance of a competent authority in another Member State in accordance with the procedure laid down in Article 7, and the requested competent authority shall provide assistance in accordance with the procedure laid down in Article 7, unless it would be contrary to the public order of the requested Member State.
Amendment 192 #
Proposal for a regulation
Article 6 – paragraph 1 – introductory part
Article 6 – paragraph 1 – introductory part
1. The Commission shall encourage and facilitate the development of self- regulatory codes of conduct at Union level, in order to define guidelines on best practices inmay adopt implementing acts in order to specify requirements to facilitatinge the switching of providers and to ensure that they provide professional users with sufficiently detailed, clear and transparent information before a contract for data storage and processing is concluded, as regards the following issues:
Amendment 212 #
Proposal for a regulation
Article 6 – paragraph 3
Article 6 – paragraph 3
3. The Commission shall reviewsubmit a report to the European Parliament and to the Council on the development and effective implementation of such codes of conduct and the effective provision of information by providers no later than two years after the start of application of this Regulation. The report shall be accompanied, if appropriate, by legislative proposals.
Amendment 218 #
Proposal for a regulation
Article 9 – paragraph 1
Article 9 – paragraph 1
1. No later than [53 years after the date mentioned in Article 10(2)], the Commission shall carry out a review of this Regulation and present a report on the main findings to the European Parliament, the Council and the European Economic and Social Committee. The Commission shall review the implementation of this Regulation in particular in respect of:
Amendment 223 #
Proposal for a regulation
Article 9 – paragraph 1 – point a (new)
Article 9 – paragraph 1 – point a (new)
(a) The application of this Regulation to mixed data sets especially taking into account the development of new technologies such as Internet of Things, artificial intelligence, big data analysis and the process of deanonymising data.
Amendment 226 #
Proposal for a regulation
Article 9 – paragraph 1 – point b (new)
Article 9 – paragraph 1 – point b (new)
(b) The use of the public security exception by Member States as defined in Article 4(1).
Amendment 229 #
Proposal for a regulation
Article 9 – paragraph 2 a (new)
Article 9 – paragraph 2 a (new)
2a. By 6 months after the date of publication of this Regulation the Commission shall provide guidelines on the legal treatment of mixed data sets and the interaction between this Regulation and Regulation (EU) 2016/679.