Activities of Marju LAURISTIN related to 2017/0002(COD)
Shadow reports (1)
REPORT on the proposal for a regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC PDF (1 MB) DOC (184 KB)
Amendments (28)
Amendment 60 #
Proposal for a regulation
Recital 7 a (new)
Recital 7 a (new)
(7a) The data protection legal framework for processing in the course of activities of Union institutions and bodies which fall outside the scope of Community law remains fragmented and creates legal uncertainty. This Regulation should therefore provide for harmonised rules for the protection and the free movement of personal data processed by the Union institutions and bodies carrying out activities which fall within the scope of Chapters 4 and 5 of Title V of Part Three of the TFEU and Chapter 2 of Title V of the TEU.
Amendment 62 #
Proposal for a regulation
Recital 8
Recital 8
(8) In Declaration No 21 on the protection of personal data in the fields of judicial cooperation in criminal matters and police cooperation, annexed to the final act of the intergovernmental conference which adopted the Treaty of Lisbon, the conference acknowledged that specific rules on the protection of personal data and the free movement of personal data in the fields of judicial cooperation in criminal matters and police cooperation based on Article 16 TFEU could prove necessary because of the specific nature of those fields. This Regulation should therefore apply to Union agencies carrying out activities in the fields of judicial cooperation in criminal matters and police cooperation only to the extent that Union law applicable to such agencies does not contain specific rules on the processing of personal dataFurthermore, the field of common foreign and security policy also has a specific nature and specific rules on the protection of personal data and the free movement of personal data could prove necessary as well. It is therefore appropriate to regulate the processing of operational personal data by Union agencies established on the basis of Chapters 4 and 5 of Title V of Part Three of the TFEU and by missions referred to in Article 42(1), 43 and 44 of the TEU by specific rules, derogating from a number of general rules of this Regulation. Those specific rules are aligned with the provisions of the Directive (EU) 2016/680 and should be interpreted homogenously.
Amendment 76 #
Proposal for a regulation
Recital 18
Recital 18
(18) The Union law including the internal rules referred to in this Regulation should be clear and precise and its application should be foreseeable to persons subject to it, in accordance with the case-law of the Court of Justice ofrequirements set out in the Charter and the European UnConvention andfor the European CourtProtection of Human Rights and Fundamental Freedoms.
Amendment 79 #
Proposal for a regulation
Recital 18 a (new)
Recital 18 a (new)
(18a) The internal rules referred to in this Regulation should be clear and precise acts of general application intended to produce legal effects vis-à-vis data subjects, adopted at the highest level of management of the Union institutions and bodies within their competencies and in matters relating to their operation and should be published in the Official Journal of the European Union. The application of these rules should be foreseeable to persons subject to them in accordance with the requirements set out in the Charter and the European Convention for the Protection of Human Rights and Freedoms. Internal rules may take the form of decisions, in particular when adopted by Union institutions.
Amendment 85 #
Proposal for a regulation
Recital 26
Recital 26
(26) The processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes should be subject to appropriate safeguards for the rights and freedoms of the data subject pursuant to this Regulation. Those safeguards should ensure that technical and organisational measures are in place in order to ensure, in particular, the principle of data minimisation. The further processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes is to be carried out when the controller has assessed the feasibility to fulfil those purposes by processing data which do not permit or no longer permit the identification of data subjects, provided that appropriate safeguards exist (such as, for instance, pseudonymisation of the data). Union institutions and bodies should provide for appropriate safeguards for the processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in Union law, which may include internal rules adopted by Union institutions and bodies in matters relating to their operation.
Amendment 89 #
Proposal for a regulation
Recital 37 – paragraph 1
Recital 37 – paragraph 1
Legal acts adopted on the basis of the Treaties or internal rules ofadopted by Union institutions and bodies, in matters relating to their operation, may impose restrictions concerning specific principles and the rights of information, access to and rectification or erasure of personal data, the right to data portability, confidentiality of electronic communications as well as the communication of a personal data breach to a data subject and certain related obligations of the controllers, as far as necessary and proportionate in a democratic society to safeguard public security, the prevention, investigation and prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security, including the protection of human life especially in response to natural or manmade disasters, internal security of Union institutions and bodies, other important objectives of general public interest of the Union or of a Member State, in particular an important economic or financial interest of the Union or of a Member State, the keeping of public registers kept for reasons of general public interest or the protection of the data subject or the rights and freedoms of others, including social protection, public health and humanitarian purposes.
Amendment 93 #
Proposal for a regulation
Recital 49
Recital 49
(49) The European Data Protection Supervisor should be informed about administrative measures and consulted on internal rules ofadopted by Union institutions and bodies, in matters relating to their operation, which provide for the processing of personal data, lay down conditions for restrictions of data subject rights or provide appropriate safeguards for data subject rights, in order to ensure compliance of the intended processing with this Regulation and in particular to mitigate the risk involved for the data subject.
Amendment 95 #
Proposal for a regulation
Recital 65
Recital 65
(65) In certain instances, Union law provides for a model of coordinated supervision, shared between the European Data Protection Supervisor and the national supervisory authorities. Moreover, the European Data Protection Supervisor is the supervisory authority of Europol and a specific model of cooperation with the national supervisory authorities is established through a cooperation board with an advisory function. In order to improve the effective supervision and enforcement of substantive data protection rules, a single, coherent model of coordinated supervisthis Regulation should be introduced in the Union. The Commission should therefor a single, wcohere appropriate, submit legislative proposals with a view to amending Union legal acts providing for a model of coordinated supervision, in order to align them with the coordinated supervision model of this Regulatnt model of coordinated supervision. The European Data Protection Board should serve as a single forum for ensuring the effective coordinated supervision across the board.
Amendment 107 #
Proposal for a regulation
Article 3 – paragraph 2 – point d a (new)
Article 3 – paragraph 2 – point d a (new)
(da) 'operational personal data' means personal data processed by the Union agencies established on the basis of Chapters 4 and 5 of Title V of Part Three of the TFEU and by the missions referred to in Article 42(1), 43 and 44 of the TEU, for the purposes of meeting the objectives laid down in acts establishing those agencies or missions.
Amendment 147 #
Proposal for a regulation
Article 25 – paragraph 3
Article 25 – paragraph 3
3. Where personal data are processed for scientific or historical research purposes or statistical purposes, Union law, which may include internal rules, adopted by Union institutions and bodies in matters relating to their operation, may provide for derogations from the rights referred to in Articles 17, 18, 20 and 23 subject to the conditions and safeguards referred to in Article 13 in so far as such rights are likely to render impossible or seriously impair the achievement of the specific purposes, and such derogations are necessary for the fulfilment of those purposes.
Amendment 148 #
Proposal for a regulation
Article 25 – paragraph 4
Article 25 – paragraph 4
4. Where personal data are processed for archiving purposes in the public interest, Union law, which may include internal rules adopted by Union institutions and bodies in matters relating to their operation, may provide for derogations from the rights referred to in Articles 17, 18, 20, 21, 22 and 23 subject to the conditions and safeguards referred to in Article 13 in so far as such rights are likely to render impossible or seriously impair the achievement of the specific purposes, and such derogations are necessary for the fulfilment of those purposes.
Amendment 152 #
Proposal for a regulation
Article 25 – paragraph 5
Article 25 – paragraph 5
5. Internal rules referred to in paragraphs 1, 3 and 4 shall be sufficiently clear and precise and subject to appropriate publicatclear and precise acts of general application, intended to produce legal effects vis-a-vis data subjects, adopted at the highest level of management of the Union institutions and bodies and subject to publication in the Official Journal of the European Union.
Amendment 167 #
Proposal for a regulation
Article 41 – paragraph 1
Article 41 – paragraph 1
The Union institutions and bodies shall inform the European Data Protection Supervisor when drawing up administrative measures and internal rules relating to the processing of personal data involving a Union institution or body alone or jointly with others.
Amendment 168 #
Proposal for a regulation
Article 41 – paragraph 1 a (new)
Article 41 – paragraph 1 a (new)
The Union institutions and bodies shall consult the European Data Protection Supervisor when drawing up the internal rules referred to in Article 25(5).
Amendment 183 #
Proposal for a regulation
Article 48 – paragraph 1
Article 48 – paragraph 1
1. A transfer of personal data to a third country or international organisation may take place where the Commission has decided pursuant to Article 45(3) of Regulation (EU) 2016/679 or to Article 36 of Directive (EU) 2016/680 that an adequate level of protection is ensured in the third country, a territory or one or more specified sectors within that third country, or within the international organisation and the personal data are transferred solely to allow tasks covered by the competence of the controller to be carried out.
Amendment 205 #
Proposal for a regulation
Chapter 5 a (new)
Chapter 5 a (new)
Amendment 222 #
Proposal for a regulation
Article 61 – title
Article 61 – title
Cooperation withbetween the European Data Protection Supervisor and national supervisory authorities
Amendment 224 #
Proposal for a regulation
Article 61 – paragraph 1
Article 61 – paragraph 1
The European Data Protection Supervisor shall cooperate with supervisory authorities established under Article 41 of Regulation (EU) 2016/679 and Article 51 of Directive (EU) 2016/680 (hereinafter “national supervisory authorities”) and with the joint supervisory authority established under Article 25 of Council Decision 2009/917/JHA21 to the extent necessary for the performance of their respective duties, in particular by providing each other with relevant information, requesting national supervisory authoritieseach other to exercise their powers or responding to a request from such authorities. _________________ 21 Council Decision 2009/917/JHA of 30 November 2009 on the use of information technology for customs purposes, OJ L 323, 10.12.2009, p. 20–30each other's requests.
Amendment 227 #
Proposal for a regulation
Article 62 – paragraph 1
Article 62 – paragraph 1
1. Where a Union act refers to this Article,envisages that the European Data Protection Supervisor shall cooperupervises the processing of personal datea actively with thet the Union level and national supervisory authorities, supervise the processing order to ensure effective supervision of large IT systems or Union agenciesf personal data at national level in a large IT system or a Union body, office or agency, the European Data Protection Supervisor and the national supervisory authorities, each acting within the scope of their respective competencies, shall cooperate actively in the framework of their responsibilities and shall ensure coordinated supervision.
Amendment 230 #
Proposal for a regulation
Article 62 – paragraph 2
Article 62 – paragraph 2
2. The European Data Protection Supervisory shall, each acting within the scope of its respective competences and in the framework of itstheir responsibilities, exchange relevant information, assist each other in carrying out audits and inspections, examine difficulties of interpretation or application of this Regulation and other applicable Union acts, study problems with the exercise of independent supervision or in the exercise of the rights of data subjects, draw up harmonised proposals for solutions to any problems and promote awareness of data protection rights, as necessary, jointly with the national supervisory authorities.
Amendment 232 #
Proposal for a regulation
Article 62 – paragraph 3
Article 62 – paragraph 3
3. For the purposes laid down in paragraph 2, the European Data Protection Supervisor shall meet withand the national supervisory authorities shall meet at least twice a year within the framework of the European Data Protection Board. The costs and servicing of those meetings shall be borne by the European Data Protection Board. Rules of procedure shall be adopted at the first meeting. Further working methods shall be developed jointlyFor these purposes, the European Data Protection Board may develop further working methods as necessary.
Amendment 245 #
Proposal for a regulation
Article 71 a (new)
Article 71 a (new)
Article 71 a Amendments to SIS II Regulation (EC) No 1987/2006 and SIS II Council Decision 2007/533/JHA Article 46 of Regulation (EC) No 1987/2006 of the European Parliament and of the Council of 20 December 2006 on the establishment, operation and use of the second generation Schengen Information System (SIS II) and Article 62 of Council Decision 2007/533/JHA of 12 June 2007 on the establishment, operation and use of the second generation Schengen Information System (SIS II) are hereby deleted.
Amendment 247 #
Proposal for a regulation
Article 71 b (new)
Article 71 b (new)
Article 71 b Amendments to VIS Regulation (EC) No 767/2008 Article 43 of Regulation (C) No 767/2008 of the European Parliament and the Council of 9 July 2008 concerning the Visa Information System (VIS) and the exchange of data between Member States on short-stay visas (VIS Regulation) is hereby deleted.
Amendment 249 #
Proposal for a regulation
Article 71 d (new)
Article 71 d (new)
Amendment 250 #
Proposal for a regulation
Article 71 c (new)
Article 71 c (new)
Article 71 c Amendments to Internal Market Information System Regulation (EU) No 1024/2012 Paragraphs (3) and (4) of Article 21 of Regulation (EU) No 1024/2012 of the European Parliament and of the Council of 25 October 2012 on administrative cooperation through the Internal Market Information System and repealing Commission Decision 2008/49/EC (the IMI Regulation) are hereby deleted.
Amendment 252 #
Proposal for a regulation
Article 71 f (new)
Article 71 f (new)
Article 71 f Amendments to Europol Regulation (EU) 2016/794 Articles 28, 32, 33, 34, 35, 36, 37, 39, 40, 41, 44, 45, and 46 of Regulation (EU) 2016/794 of the European Parliament and of the Council of 11 May 2016 on the European Union Agency for Law Enforcement Cooperation (Europol) and replacing the repealing Council Decisions 2009/371/JHA, 2009/934/JHA, 2009/935/JHA, 2009/936/JHA and 2009/968/JHA are hereby deleted.
Amendment 254 #
Proposal for a regulation
Article 71 g (new)
Article 71 g (new)
Article 71 g Amendments to Council Regulation (EU) 2017/XX on EPPO Articles 47, 48(1) and 51 to 89 of Council Regulation (EU) 2017/... of implementing enhanced cooperation on the establishment of the European Public Prosecutor's Office ("the EPPO") are hereby deleted.
Amendment 255 #
Proposal for a regulation
Article 71 e (new)
Article 71 e (new)
Article 71 e Amendments to Commission Implementing Regulation (EU) 2015/428 Paragraph 8 of Article 69c of Commission Implementing Regulation (EU) 2015/428 of 10 March 2015 amending Regulation (EEC) No 2454/93 and Regulation (EU) No 1063/2010 a regards the rules of origin relating to the scheme of generalised tariff preferences and preferential tariff measures for certain countries or territories is hereby deleted.