BETA


2018/0238(NLE) Council of Europe Convention for the protection of individuals: automatic processing of personal data. Protocol: ratification by Member States

Progress: Procedure completed

RoleCommitteeRapporteurShadows
Lead LIBE NAGY József (icon: PPE PPE) REVAULT D'ALLONNES BONNEFOY Christine (icon: S&D S&D), PETERSEN Morten (icon: ALDE ALDE), FRANZ Romeo (icon: Verts/ALE Verts/ALE)
Committee Opinion EMPL
Committee Opinion ITRE
Committee Opinion IMCO
Committee Opinion JURI
Lead committee dossier:
Legal Basis:
TFEU 016-p2, TFEU 218-p6

Events

2019/05/02
   EP/CSL - Act adopted by Council after consultation of Parliament
2019/05/02
   EP - End of procedure in Parliament
2019/05/02
   Final act published in Official Journal
Details

PURPOSE: to authorise Member States to ratify the Protocol of Amendment to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108).

NON-LEGISLATIVE ACT: Council Decision (EU) 2019/682 authorising Member States to ratify, in the interest of the European Union, the Protocol of Amendment to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data.

CONTENT: this Council Decision authorises the Member States to ratify, in the interest of the Union, the Protocol of Amendment to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108), insofar as its provisions fall within the exclusive competence of the Union.

The Protocol of Amendment to Convention 108 was adopted on 18 May 2018 by the Committee of Ministers of the Council of Europe. It aims to broaden the scope, increase the level and improve the effectiveness of data protection offered by Convention 108 in order to better address privacy issues.

The provisions of the amended Convention 108 cover both activities falling within the scope of Union law and activities outside its scope, such as in national security and defence.

The amended Convention 108 shall contain safeguards based on the same principles as those set out in Regulation (EU) 2016/679 (General Data Protection Regulation) and Directive (EU) 2016/680 on the protection of individuals with regard to the processing of personal data by competent authorities for the purpose of the prevention, investigation, detection, prosecution or enforcement of criminal offences and on the free movement of such data.

Consequently, the entry into force of the amended Convention shall:

- contribute to the promotion of Union data protection standards at global level,

- facilitate data flows between the Union and the non-Union Parties to Convention 108,

- ensure compliance by Member States with their international obligations under Convention 108,

- enable future accession of the Union to Convention 108.

ENTRY INTO FORCE: 9.4.2019.

2019/03/12
   EP - Results of vote in Parliament
2019/03/12
   EP - Decision by Parliament
Details

The European Parliament adopted by 624 votes to 12 with 27 abstentions, a legislative resolution on the draft Council decision authorising Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data.

The European Parliament gave its consent to the draft Council decision.

The purpose of the Amending Protocol is to broaden the scope, increase the level and improve the effectiveness of the data protection provided by Convention 108 in order to better address the issues relating to protection of privacy arising in the digital age.

The modernised convention (i.e. Convention 108 as amended by the Amending Protocol) will cover all types of data processing within the jurisdiction of the parties in both the public and private sectors.

Documents
2019/02/07
   EP - Committee report tabled for plenary, 1st reading/single reading
Details

The Committee on Civil Liberties, Justice and Home Affairs adopted the report by József NAGY (EPP, SK) on the draft Council decision authorising Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data.

The committee recommended that the European Parliament give its consent to the draft Council decision.

The aim of the amending protocol is the modernisation and harmonisation of Convention 108 to better address emerging privacy challenges and to strengthen its application.

As stated in the explanatory memorandum accompanying the recommendation, Convention 108 plays a crucial role in spreading the ‘European data protection model’ globally. A higher level of protection will facilitate the exchange of personal data based on appropriate safeguards.

Moreover, increasing the data protection standards of the Convention will facilitate data flows between the EU and the non-EU Parties to the Convention.

This is also recognised by the General Data Protection Regulation (GDPR) which defines the accession to and implementation of Convention 108 and its additional protocol as an important criterion in the assessment of whether a third country meets the necessary conditions for international transfers stipulated in EU law with a view to declaring the adequacy of that third country’s data protection legal framework.

Documents
2019/02/04
   EP - Vote in committee
2019/01/17
   EP - Committee draft report
Documents
2018/10/25
   EP - Committee referral announced in Parliament
2018/09/11
   CSL - Legislative proposal
Details

PURPOSE: to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (ETS No 108).

PROPOSED ACT: Council Decision.

ROLE OF THE EUROPEAN PARLIAMENT: the Council can adopt the act only if the European Parliament has approved it.

BACKGROUND: on 6 June 2013, the Council authorised the Commission to participate on behalf of the Union in the negotiations on the modernisation of the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (ETS No 108) (‘Convention 108’) and the conditions and modalities of accession of the Union to the amended Convention 108.

The Protocol amending Convention 108 was adopted by the Committee of Ministers of the Council of Europe on 18 May 2018.

The provisions of the amended Convention 108, to the extent they apply to the processing of personal data in the context of activities falling within the scope of Union law, may affect common rules or alter their scope within the meaning of Article 3(2) of the Treaty, as these provisions are based on the same principles as those set out in Regulation (EU) 2016/679 (General Data Protection Regulation) and in Directive (EU) 2016/680 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data.

The Union cannot sign or ratify the amending Protocol, as under Convention 108 only States are Parties. Member States should therefore be authorised to ratify the amending Protocol, acting jointly in the interests of the Union, insofar as its provisions fall within the exclusive competence of the Union.

CONTENT: the draft Council decision aims to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (ETS No 108), insofar as its provisions fall within the exclusive competence of the Union.

The amending Protocol aims to widen the scope, increase the level and improve the effectiveness of data protection afforded under Convention 108.

The modernised Convention (i.e. Convention 108 modified by the amending Protocol) will cover all types of data processing under the jurisdiction of the Parties, in both the public and private sectors.

More specifically, the modernised Convention:

further specifies the principle of lawful processing (in particular with respect to the requirements for consent) and further strengthen the protection of special categories of data (while also expanding the categories to those recognised as special categories of personal data in Union law); provides for additional safeguards for individuals when their personal data are processed (in particular, obligations to examine the likely impact of an intended data processing operation and to implement relevant technical and organisational measures, and the obligation to report serious data breaches); strengthen data subjects’ rights (especially with regard to transparency and access to data); introduces new rights , such as the right not to be subject to a decision significantly affecting the data subject based solely on automated processing, the right to object to the processing and the right to have a remedy in case of violation of an individual's rights; includes revised provisions requiring the Parties to establish one or more independent authorities responsible for ensuring compliance with the provisions of Convention 108.

Overall, the modernised Convention ensures a high level of protection, while leaving a margin of flexibility to the Parties as regards the implementation of its provisions in domestic law, which would make accession to the modernised Convention 108 attractive to those countries, including those outside Europe, which are contemplating establishing or strengthening their data protection systems.

Documents
2018/09/10
   EC - Legislative proposal published
Details

PURPOSE: to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (ETS No 108).

PROPOSED ACT: Council Decision.

ROLE OF THE EUROPEAN PARLIAMENT: the Council can adopt the act only if the European Parliament has approved it.

BACKGROUND: on 6 June 2013, the Council authorised the Commission to participate on behalf of the Union in the negotiations on the modernisation of the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (ETS No 108) (‘Convention 108’) and the conditions and modalities of accession of the Union to the amended Convention 108.

The Protocol amending Convention 108 was adopted by the Committee of Ministers of the Council of Europe on 18 May 2018.

The provisions of the amended Convention 108, to the extent they apply to the processing of personal data in the context of activities falling within the scope of Union law, may affect common rules or alter their scope within the meaning of Article 3(2) of the Treaty, as these provisions are based on the same principles as those set out in Regulation (EU) 2016/679 (General Data Protection Regulation) and in Directive (EU) 2016/680 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data.

The Union cannot sign or ratify the amending Protocol, as under Convention 108 only States are Parties. Member States should therefore be authorised to ratify the amending Protocol, acting jointly in the interests of the Union, insofar as its provisions fall within the exclusive competence of the Union.

CONTENT: the draft Council decision aims to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (ETS No 108), insofar as its provisions fall within the exclusive competence of the Union.

The amending Protocol aims to widen the scope, increase the level and improve the effectiveness of data protection afforded under Convention 108.

The modernised Convention (i.e. Convention 108 modified by the amending Protocol) will cover all types of data processing under the jurisdiction of the Parties, in both the public and private sectors.

More specifically, the modernised Convention:

further specifies the principle of lawful processing (in particular with respect to the requirements for consent) and further strengthen the protection of special categories of data (while also expanding the categories to those recognised as special categories of personal data in Union law); provides for additional safeguards for individuals when their personal data are processed (in particular, obligations to examine the likely impact of an intended data processing operation and to implement relevant technical and organisational measures, and the obligation to report serious data breaches); strengthen data subjects’ rights (especially with regard to transparency and access to data); introduces new rights , such as the right not to be subject to a decision significantly affecting the data subject based solely on automated processing, the right to object to the processing and the right to have a remedy in case of violation of an individual's rights; includes revised provisions requiring the Parties to establish one or more independent authorities responsible for ensuring compliance with the provisions of Convention 108.

Overall, the modernised Convention ensures a high level of protection, while leaving a margin of flexibility to the Parties as regards the implementation of its provisions in domestic law, which would make accession to the modernised Convention 108 attractive to those countries, including those outside Europe, which are contemplating establishing or strengthening their data protection systems.

Documents
2018/06/05
   EC - Document attached to the procedure
2018/06/05
   EP - Preparatory document
Details

PURPOSE: to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108).

PROPOSED ACT: Council Decision.

ROLE OF THE EUROPEAN PARLIAMENT: Council may adopt the act only if Parliament has given its consent to the act.

BACKGROUND: the Council of Europe Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data (Convention 108) is the only legally binding multilateral agreement in the field of personal data protection. Convention 108 requires the Parties to incorporate into their respective national laws the necessary measures to ensure respect for the human right of all individuals with regard to the processing of personal data.

At present, 51 States have ratified Convention 108, including all 28 EU Member States.

Convention 108 was opened for signature in 1981, long before the era of the internet and electronic communications. The development of technology and globalisation of information poses new challenges in the field of protection of personal information.

On 31 May 2013, the Council authorised the Commission to participate on behalf of the Union in the negotiations on the modernisation of the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (EST 108) and the conditions and modalities of accession of the Union to the modernised Convention.

The Protocol amending Convention 108 (the amending Protocol) was adopted by the Council of Europe Committee of Ministers on 18 May 2018 and will be open for signature as of 25 June 2018.

The amending Protocol aims to widen the scope, increase the level and improve the effectiveness of data protection afforded under Convention 108.

Given that the Union cannot sign or ratify the amending Protocol, as under the current Convention 108 only States are Parties, Member States should therefore be authorised to ratify the amending Protocol, acting jointly in the interests of the Union.

CONTENT: the present proposal calls on the Council to adopt the decision to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No 108) (the amending Protocol) insofar as its provisions fall within Union competence.

2017/05/03
   EP - NAGY József (PPE) appointed as rapporteur in LIBE

Documents

Votes

A8-0070/2019 - József Nagy - Procédure d'approbation 12/03/2019 12:39:30.000 #

2019/03/12 Outcome: +: 624, 0: 27, -: 12
DE FR IT ES GB PL RO SE NL CZ BE BG PT AT FI DK HU SK HR LT LV IE SI LU EE CY MT EL
Total
86
65
60
47
64
45
26
19
26
19
18
17
20
17
13
13
13
12
11
9
8
8
8
6
6
6
6
13
icon: PPE PPE
187

United Kingdom PPE

2

Belgium PPE

3

Denmark PPE

For (1)

1
3

Luxembourg PPE

3

Estonia PPE

For (1)

1

Cyprus PPE

1

Greece PPE

1
icon: S&D S&D
167

Netherlands S&D

3
3

Croatia S&D

2

Latvia S&D

1

Ireland S&D

For (1)

1

Slovenia S&D

For (1)

1

Luxembourg S&D

For (1)

1

Estonia S&D

For (1)

1

Cyprus S&D

2

Malta S&D

3
icon: ECR ECR
67

Romania ECR

For (1)

1

Sweden ECR

2

Netherlands ECR

2

Czechia ECR

2

Bulgaria ECR

2
2

Croatia ECR

For (1)

1

Lithuania ECR

1

Latvia ECR

For (1)

1

Cyprus ECR

1

Greece ECR

For (1)

1
icon: ALDE ALDE
64

United Kingdom ALDE

1

Romania ALDE

3

Portugal ALDE

1

Austria ALDE

For (1)

1

Croatia ALDE

2

Lithuania ALDE

1

Latvia ALDE

1

Ireland ALDE

For (1)

1

Slovenia ALDE

For (1)

1

Luxembourg ALDE

For (1)

1

Estonia ALDE

3
icon: Verts/ALE Verts/ALE
49

Italy Verts/ALE

For (1)

1

Sweden Verts/ALE

3

Netherlands Verts/ALE

2

Belgium Verts/ALE

2

Austria Verts/ALE

3

Finland Verts/ALE

For (1)

1

Denmark Verts/ALE

For (1)

1

Hungary Verts/ALE

For (1)

1

Croatia Verts/ALE

For (1)

1

Lithuania Verts/ALE

For (1)

1

Latvia Verts/ALE

1

Slovenia Verts/ALE

For (1)

1

Luxembourg Verts/ALE

For (1)

1

Estonia Verts/ALE

For (1)

1
icon: GUE/NGL GUE/NGL
43

Italy GUE/NGL

2

United Kingdom GUE/NGL

1

Sweden GUE/NGL

For (1)

1

Netherlands GUE/NGL

3

Czechia GUE/NGL

2

Portugal GUE/NGL

For (1)

4

Finland GUE/NGL

For (1)

1

Denmark GUE/NGL

For (1)

1

Ireland GUE/NGL

3

Cyprus GUE/NGL

2
icon: ENF ENF
33

Germany ENF

For (1)

1

United Kingdom ENF

4

Poland ENF

Against (1)

1

Netherlands ENF

4

Belgium ENF

For (1)

1
icon: EFDD EFDD
37

Germany EFDD

Abstain (1)

1

Poland EFDD

1

Czechia EFDD

Abstain (1)

1

Lithuania EFDD

For (1)

1
icon: NI NI
14

Germany NI

1

France NI

For (1)

1

Italy NI

For (1)

1

United Kingdom NI

For (1)

Against (1)

2

Poland NI

Against (1)

2

Denmark NI

1

Hungary NI

2

History

(these mark the time of scraping, not the official date of the change)

committees/0/shadows/2
name
ERNST Cornelia
group
European United Left - Nordic Green Left
abbr
GUE/NGL
docs/1
date
2019-01-17T00:00:00
docs
title: PE632.901
type
Committee draft report
body
EP
docs/1
date
2018-09-11T00:00:00
docs
url: http://register.consilium.europa.eu/content/out?lang=EN&typ=SET&i=ADV&RESULTSET=1&DOC_ID=10923%2F18&DOC_LANCD=EN&ROWSPP=25&NRROWS=500&ORDERBY=DOC_DATE+DESC title: 10923/2018
summary
type
Legislative proposal
body
CSL
docs/2
date
2019-01-17T00:00:00
docs
title: PE632.901
type
Committee draft report
body
EP
docs/2/docs/0/url
https://www.europarl.europa.eu/doceo/document/LIBE-PR-632901_EN.html
events/1/date
Old
2018-09-11T00:00:00
New
2018-09-10T00:00:00
docs/1/docs/0/url
http://www.europarl.europa.eu/sides/getDoc.do?type=COMPARL&mode=XML&language=EN&reference=PE632.901
events/2/type
Old
Committee referral announced in Parliament, 1st reading/single reading
New
Committee referral announced in Parliament
events/3/type
Old
Vote in committee, 1st reading/single reading
New
Vote in committee
events/4/docs/0/url
Old
http://www.europarl.europa.eu/doceo/document/A-8-2019-0070_EN.html
New
https://www.europarl.europa.eu/doceo/document/A-8-2019-0070_EN.html
events/5
date
2019-03-12T00:00:00
type
Results of vote in Parliament
body
EP
docs
url: https://oeil.secure.europarl.europa.eu/oeil/popups/sda.do?id=32177&l=en title: Results of vote in Parliament
events/5
date
2019-03-12T00:00:00
type
Decision by Parliament, 1st reading/single reading
body
EP
docs
url: http://www.europarl.europa.eu/doceo/document/TA-8-2019-0142_EN.html title: T8-0142/2019
summary
events/6
date
2019-03-12T00:00:00
type
Decision by Parliament
body
EP
docs
url: https://www.europarl.europa.eu/doceo/document/TA-8-2019-0142_EN.html title: T8-0142/2019
summary
procedure/Modified legal basis
Rules of Procedure EP 159
procedure/Other legal basis
Rules of Procedure EP 159
events/0
date
2018-06-05T00:00:00
type
Preparatory document
body
EP
docs
summary
events/0
date
2018-06-05T00:00:00
type
Initial legislative proposal published
body
EC
docs
summary
events/4/docs/0/url
Old
http://www.europarl.europa.eu/sides/getDoc.do?type=REPORT&mode=XML&reference=A8-2019-0070&language=EN
New
http://www.europarl.europa.eu/doceo/document/A-8-2019-0070_EN.html
events/5/docs/0/url
Old
http://www.europarl.europa.eu/sides/getDoc.do?type=TA&language=EN&reference=P8-TA-2019-0142
New
http://www.europarl.europa.eu/doceo/document/TA-8-2019-0142_EN.html
committees/0
type
Responsible Committee
body
EP
associated
False
committee_full
Civil Liberties, Justice and Home Affairs
committee
LIBE
rapporteur
name: NAGY József date: 2017-05-03T00:00:00 group: European People's Party (Christian Democrats) abbr: PPE
shadows
committees/0
type
Responsible Committee
body
EP
associated
False
committee_full
Civil Liberties, Justice and Home Affairs
committee
LIBE
date
2017-05-03T00:00:00
rapporteur
name: NAGY József group: European People's Party (Christian Democrats) abbr: PPE
shadows
committees/0
type
Responsible Committee
body
EP
associated
False
committee_full
Civil Liberties, Justice and Home Affairs
committee
LIBE
date
2017-05-03T00:00:00
rapporteur
name: NAGY József group: European People's Party (Christian Democrats) abbr: PPE
shadows
committees/0
type
Responsible Committee
body
EP
associated
False
committee_full
Civil Liberties, Justice and Home Affairs
committee
LIBE
date
2017-05-03T00:00:00
rapporteur
name: NAGY József group: Group of European People's Party abbr: EPP
shadows
activities
  • date: 2018-06-05T00:00:00 docs: url: http://www.europarl.europa.eu/RegData/docs_autres_institutions/commission_europeenne/com/2018/0451/COM_COM(2018)0451_EN.pdf title: COM(2018)0451 type: Legislative proposal published celexid: CELEX:52018PC0451:EN body: EC commission: DG: url: http://ec.europa.eu/info/departments/justice-and-consumers_en title: Justice and Consumers Commissioner: JOUROVÁ Věra type: Legislative proposal published
commission
  • body: EC dg: Justice and Consumers commissioner: JOUROVÁ Věra
committees/0
type
Responsible Committee
body
EP
associated
False
committee_full
Civil Liberties, Justice and Home Affairs
committee
LIBE
date
2017-05-03T00:00:00
rapporteur
name: NAGY József group: Group of European People's Party abbr: EPP
shadows
committees/0
body
EP
responsible
False
committee_full
Employment and Social Affairs
committee
EMPL
committees/1
type
Committee Opinion
body
EP
associated
False
committee_full
Employment and Social Affairs
committee
EMPL
opinion
False
committees/1
body
EP
responsible
False
committee_full
Internal Market and Consumer Protection
committee
IMCO
committees/2
type
Committee Opinion
body
EP
associated
False
committee_full
Industry, Research and Energy
committee
ITRE
opinion
False
committees/2
body
EP
responsible
False
committee_full
Industry, Research and Energy
committee
ITRE
committees/3
type
Committee Opinion
body
EP
associated
False
committee_full
Internal Market and Consumer Protection
committee
IMCO
opinion
False
committees/3
body
EP
responsible
False
committee_full
Legal Affairs
committee
JURI
committees/4
type
Committee Opinion
body
EP
associated
False
committee_full
Legal Affairs
committee
JURI
opinion
False
committees/4
body
EP
responsible
True
committee
LIBE
date
2017-05-03T00:00:00
committee_full
Civil Liberties, Justice and Home Affairs
rapporteur
group: EPP name: NAGY József
docs
  • date: 2018-06-05T00:00:00 docs: url: http://www.europarl.europa.eu/RegData/docs_autres_institutions/commission_europeenne/com/2018/0449/COM_COM(2018)0449_EN.pdf title: COM(2018)0449 url: https://eur-lex.europa.eu/smartapi/cgi/sga_doc?smartapi!celexplus!prod!DocNumber&lg=EN&type_doc=COMfinal&an_doc=2018&nu_doc=0449 title: EUR-Lex type: Document attached to the procedure body: EC
  • date: 2019-01-17T00:00:00 docs: url: http://www.europarl.europa.eu/sides/getDoc.do?type=COMPARL&mode=XML&language=EN&reference=PE632.901 title: PE632.901 type: Committee draft report body: EP
events
  • date: 2018-06-05T00:00:00 type: Initial legislative proposal published body: EC docs: url: http://www.europarl.europa.eu/RegData/docs_autres_institutions/commission_europeenne/com/2018/0451/COM_COM(2018)0451_EN.pdf title: COM(2018)0451 url: https://eur-lex.europa.eu/smartapi/cgi/sga_doc?smartapi!celexplus!prod!DocNumber&lg=EN&type_doc=COMfinal&an_doc=2018&nu_doc=0451 title: EUR-Lex summary: PURPOSE: to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108). PROPOSED ACT: Council Decision. ROLE OF THE EUROPEAN PARLIAMENT: Council may adopt the act only if Parliament has given its consent to the act. BACKGROUND: the Council of Europe Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data (Convention 108) is the only legally binding multilateral agreement in the field of personal data protection. Convention 108 requires the Parties to incorporate into their respective national laws the necessary measures to ensure respect for the human right of all individuals with regard to the processing of personal data. At present, 51 States have ratified Convention 108, including all 28 EU Member States. Convention 108 was opened for signature in 1981, long before the era of the internet and electronic communications. The development of technology and globalisation of information poses new challenges in the field of protection of personal information. On 31 May 2013, the Council authorised the Commission to participate on behalf of the Union in the negotiations on the modernisation of the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (EST 108) and the conditions and modalities of accession of the Union to the modernised Convention. The Protocol amending Convention 108 (the amending Protocol) was adopted by the Council of Europe Committee of Ministers on 18 May 2018 and will be open for signature as of 25 June 2018. The amending Protocol aims to widen the scope, increase the level and improve the effectiveness of data protection afforded under Convention 108. Given that the Union cannot sign or ratify the amending Protocol, as under the current Convention 108 only States are Parties, Member States should therefore be authorised to ratify the amending Protocol, acting jointly in the interests of the Union. CONTENT: the present proposal calls on the Council to adopt the decision to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No 108) (the amending Protocol) insofar as its provisions fall within Union competence.
  • date: 2018-09-11T00:00:00 type: Legislative proposal published body: EC docs: url: http://register.consilium.europa.eu/content/out?lang=EN&typ=SET&i=ADV&RESULTSET=1&DOC_ID=10923%2F18&DOC_LANCD=EN&ROWSPP=25&NRROWS=500&ORDERBY=DOC_DATE+DESC title: 10923/2018 summary: PURPOSE: to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (ETS No 108). PROPOSED ACT: Council Decision. ROLE OF THE EUROPEAN PARLIAMENT: the Council can adopt the act only if the European Parliament has approved it. BACKGROUND: on 6 June 2013, the Council authorised the Commission to participate on behalf of the Union in the negotiations on the modernisation of the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (ETS No 108) (‘Convention 108’) and the conditions and modalities of accession of the Union to the amended Convention 108. The Protocol amending Convention 108 was adopted by the Committee of Ministers of the Council of Europe on 18 May 2018. The provisions of the amended Convention 108, to the extent they apply to the processing of personal data in the context of activities falling within the scope of Union law, may affect common rules or alter their scope within the meaning of Article 3(2) of the Treaty, as these provisions are based on the same principles as those set out in Regulation (EU) 2016/679 (General Data Protection Regulation) and in Directive (EU) 2016/680 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data. The Union cannot sign or ratify the amending Protocol, as under Convention 108 only States are Parties. Member States should therefore be authorised to ratify the amending Protocol, acting jointly in the interests of the Union, insofar as its provisions fall within the exclusive competence of the Union. CONTENT: the draft Council decision aims to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (ETS No 108), insofar as its provisions fall within the exclusive competence of the Union. The amending Protocol aims to widen the scope, increase the level and improve the effectiveness of data protection afforded under Convention 108. The modernised Convention (i.e. Convention 108 modified by the amending Protocol) will cover all types of data processing under the jurisdiction of the Parties, in both the public and private sectors. More specifically, the modernised Convention: further specifies the principle of lawful processing (in particular with respect to the requirements for consent) and further strengthen the protection of special categories of data (while also expanding the categories to those recognised as special categories of personal data in Union law); provides for additional safeguards for individuals when their personal data are processed (in particular, obligations to examine the likely impact of an intended data processing operation and to implement relevant technical and organisational measures, and the obligation to report serious data breaches); strengthen data subjects’ rights (especially with regard to transparency and access to data); introduces new rights , such as the right not to be subject to a decision significantly affecting the data subject based solely on automated processing, the right to object to the processing and the right to have a remedy in case of violation of an individual's rights; includes revised provisions requiring the Parties to establish one or more independent authorities responsible for ensuring compliance with the provisions of Convention 108. Overall, the modernised Convention ensures a high level of protection, while leaving a margin of flexibility to the Parties as regards the implementation of its provisions in domestic law, which would make accession to the modernised Convention 108 attractive to those countries, including those outside Europe, which are contemplating establishing or strengthening their data protection systems.
  • date: 2018-10-25T00:00:00 type: Committee referral announced in Parliament, 1st reading/single reading body: EP
  • date: 2019-02-04T00:00:00 type: Vote in committee, 1st reading/single reading body: EP
  • date: 2019-02-07T00:00:00 type: Committee report tabled for plenary, 1st reading/single reading body: EP docs: url: http://www.europarl.europa.eu/sides/getDoc.do?type=REPORT&mode=XML&reference=A8-2019-0070&language=EN title: A8-0070/2019 summary: The Committee on Civil Liberties, Justice and Home Affairs adopted the report by József NAGY (EPP, SK) on the draft Council decision authorising Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data. The committee recommended that the European Parliament give its consent to the draft Council decision. The aim of the amending protocol is the modernisation and harmonisation of Convention 108 to better address emerging privacy challenges and to strengthen its application. As stated in the explanatory memorandum accompanying the recommendation, Convention 108 plays a crucial role in spreading the ‘European data protection model’ globally. A higher level of protection will facilitate the exchange of personal data based on appropriate safeguards. Moreover, increasing the data protection standards of the Convention will facilitate data flows between the EU and the non-EU Parties to the Convention. This is also recognised by the General Data Protection Regulation (GDPR) which defines the accession to and implementation of Convention 108 and its additional protocol as an important criterion in the assessment of whether a third country meets the necessary conditions for international transfers stipulated in EU law with a view to declaring the adequacy of that third country’s data protection legal framework.
  • date: 2019-03-12T00:00:00 type: Decision by Parliament, 1st reading/single reading body: EP docs: url: http://www.europarl.europa.eu/sides/getDoc.do?type=TA&language=EN&reference=P8-TA-2019-0142 title: T8-0142/2019 summary: The European Parliament adopted by 624 votes to 12 with 27 abstentions, a legislative resolution on the draft Council decision authorising Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data. The European Parliament gave its consent to the draft Council decision. The purpose of the Amending Protocol is to broaden the scope, increase the level and improve the effectiveness of the data protection provided by Convention 108 in order to better address the issues relating to protection of privacy arising in the digital age. The modernised convention (i.e. Convention 108 as amended by the Amending Protocol) will cover all types of data processing within the jurisdiction of the parties in both the public and private sectors.
  • date: 2019-05-02T00:00:00 type: Act adopted by Council after consultation of Parliament body: EP/CSL
  • date: 2019-05-02T00:00:00 type: End of procedure in Parliament body: EP
  • date: 2019-05-02T00:00:00 type: Final act published in Official Journal summary: PURPOSE: to authorise Member States to ratify the Protocol of Amendment to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108). NON-LEGISLATIVE ACT: Council Decision (EU) 2019/682 authorising Member States to ratify, in the interest of the European Union, the Protocol of Amendment to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data. CONTENT: this Council Decision authorises the Member States to ratify, in the interest of the Union, the Protocol of Amendment to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108), insofar as its provisions fall within the exclusive competence of the Union. The Protocol of Amendment to Convention 108 was adopted on 18 May 2018 by the Committee of Ministers of the Council of Europe. It aims to broaden the scope, increase the level and improve the effectiveness of data protection offered by Convention 108 in order to better address privacy issues. The provisions of the amended Convention 108 cover both activities falling within the scope of Union law and activities outside its scope, such as in national security and defence. The amended Convention 108 shall contain safeguards based on the same principles as those set out in Regulation (EU) 2016/679 (General Data Protection Regulation) and Directive (EU) 2016/680 on the protection of individuals with regard to the processing of personal data by competent authorities for the purpose of the prevention, investigation, detection, prosecution or enforcement of criminal offences and on the free movement of such data. Consequently, the entry into force of the amended Convention shall: - contribute to the promotion of Union data protection standards at global level, - facilitate data flows between the Union and the non-Union Parties to Convention 108, - ensure compliance by Member States with their international obligations under Convention 108, - enable future accession of the Union to Convention 108. ENTRY INTO FORCE: 9.4.2019. docs: title: Decision 2019/682 url: https://eur-lex.europa.eu/smartapi/cgi/sga_doc?smartapi!celexplus!prod!CELEXnumdoc&lg=EN&numdoc=32019D0682 title: OJ L 115 02.05.2019, p. 0007 url: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L:2019:115:TOC
links
other
  • body: EC dg: url: http://ec.europa.eu/info/departments/justice-and-consumers_en title: Justice and Consumers commissioner: JOUROVÁ Věra
procedure/Modified legal basis
Rules of Procedure EP 159
procedure/dossier_of_the_committee
  • LIBE/8/13543
procedure/final
title
Decision 2019/682
url
https://eur-lex.europa.eu/smartapi/cgi/sga_doc?smartapi!celexplus!prod!CELEXnumdoc&lg=EN&numdoc=32019D0682
procedure/instrument
Decision
procedure/stage_reached
Old
Preparatory phase in Parliament
New
Procedure completed
procedure/subject
Old
  • 1.20.09 Protection of privacy and data protection
  • 6.40.13 Relations with/in the context of international organisations: UN, OSCE, OECD, Council of Europe, EBRD
New
1.20.09
Protection of privacy and data protection
6.40.13
Relations with/in the context of international organisations: UN, OSCE, OECD, Council of Europe, EBRD
activities/0/docs/0/text
  • PURPOSE: to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108).

    PROPOSED ACT: Council Decision.

    ROLE OF THE EUROPEAN PARLIAMENT: Council may adopt the act only if Parliament has given its consent to the act. 

    BACKGROUND: the Council of Europe Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data (Convention 108) is the only legally binding multilateral agreement in the field of personal data protection. Convention 108 requires the Parties to incorporate into their respective national laws the necessary measures to ensure respect for the human right of all individuals with regard to the processing of personal data.

    At present, 51 States have ratified Convention 108, including all 28 EU Member States.

    Convention 108 was opened for signature in 1981, long before the era of the internet and electronic communications. The development of technology and globalisation of information poses new challenges in the field of protection of personal information.

    On 31 May 2013, the Council authorised the Commission to participate on behalf of the Union in the negotiations on the modernisation of the Council of Europe Convention for the protection of individuals with regard to automatic processing of personal data (EST 108) and the conditions and modalities of accession of the Union to the modernised Convention.

    The Protocol amending Convention 108 (the amending Protocol) was adopted by the Council of Europe Committee of Ministers on 18 May 2018 and will be open for signature as of 25 June 2018. 

    The amending Protocol aims to widen the scope, increase the level and improve the effectiveness of data protection afforded under Convention 108.

    Given that the Union cannot sign or ratify the amending Protocol, as under the current Convention 108 only States are Parties, Member States should therefore be authorised to ratify the amending Protocol, acting jointly in the interests of the Union.

    CONTENT: the present proposal calls on the Council to adopt the decision to authorise Member States to ratify, in the interest of the European Union, the Protocol amending the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108) (the amending Protocol) insofar as its provisions fall within Union competence.

activities/0/commission/0
DG
Commissioner
JOUROVÁ Věra
other/0
body
EC
dg
commissioner
JOUROVÁ Věra
activities
  • date: 2018-06-05T00:00:00 docs: url: http://www.europarl.europa.eu/RegData/docs_autres_institutions/commission_europeenne/com/2018/0451/COM_COM(2018)0451_EN.pdf title: COM(2018)0451 type: Legislative proposal published celexid: CELEX:52018PC0451:EN body: EC type: Legislative proposal published commission:
committees
  • body: EP responsible: False committee_full: Employment and Social Affairs committee: EMPL
  • body: EP responsible: False committee_full: Internal Market and Consumer Protection committee: IMCO
  • body: EP responsible: False committee_full: Industry, Research and Energy committee: ITRE
  • body: EP responsible: False committee_full: Legal Affairs committee: JURI
  • body: EP responsible: True committee: LIBE date: 2017-05-03T00:00:00 committee_full: Civil Liberties, Justice and Home Affairs rapporteur: group: EPP name: NAGY József
links
other
    procedure
    reference
    2018/0238(NLE)
    title
    Council of Europe Convention for the protection of individuals: automatic processing of personal data. Protocol: ratification by Member States
    legal_basis
    stage_reached
    Preparatory phase in Parliament
    subtype
    Consent by Parliament
    type
    NLE - Non-legislative enactments
    subject