Next event: Indicative plenary sitting date 2024/02/05
Progress: Awaiting Parliament's position in 1st reading
Role | Committee | Rapporteur | Shadows |
---|---|---|---|
Lead | LIBE | ERNST Cornelia ( GUE/NGL) | DÜPONT Lena ( EPP), KALJURAND Marina ( S&D), IN 'T VELD Sophia ( Renew), STRIK Tineke ( Verts/ALE), MILAZZO Giuseppe ( ECR) |
Lead committee dossier:
Legal Basis:
TFEU 016-p2
Legal Basis:
TFEU 016-p2Events
The Committee on Civil Liberties, Justice and Home Affairs adopted the report by Cornelia ERNST (The Left, DE) on the proposal for a regulation of the European Parliament and of the Council amending Council Decision 2009/917/JHA, as regards its alignment with Union rules on the protection of personal data.
The committee responsible recommended that the European Parliament's position adopted at first reading under the ordinary legislative procedure should amend the proposal as follows:
Role of the European Data Protection Supervisor
The amended text clarifies the role of the European Data Protection Supervisor. It should:
- be responsible for monitoring the processing of personal data under this Regulation by the Commission and for ensuring that it is carried out in accordance with this Regulation;
- carry out an audit of the processing of personal data by the Commission under this Regulation in accordance with international auditing standards at least every three years. A report on that audit should be sent to the European Parliament, to the Council, to the Commission and to the national supervisory authorities.
The European Data Protection Supervisor and the national supervisory authorities, each acting within the scope of their respective competences, should cooperate actively within the framework of their responsibilities to ensure coordinated supervision.
Retention of data
To ensure the optimal preservation of the data while reducing the administrative burden for the competent authorities, the procedure governing the retention of personal data in the Customs Information System should be simplified by removing the obligation to review data annually and by setting as a general rule a maximum retention period of three years which can be increased, subject to justification, by an additional period of two years. That retention period is necessary and proportionate in view of the typical length of criminal proceedings and the need for the data for the conduct of joint customs operations and of investigations.
PURPOSE: to bring the rules governing data protection in Council Decision 2009/917/JHA into line with the principles and rules laid down by the Data Protection Law Enforcement Directive (LED).
PROPOSED ACT: Regulation of the European Parliament and of the Council.
ROLE OF THE EUROPEAN PARLIAMENT: the European Parliament decides in accordance with the ordinary legislative procedure and on an equal footing with the Council.
BACKGROUND: Council Decision 2009/917/JHA on the use of information technology for customs purposes establishes the Customs Information to assist in preventing, investigating and prosecuting serious contraventions of national laws by making information available more rapidly and increase the effectiveness of the customs administrations. In order to ensure a consistent approach to the protection of personal data in the Union, that Decision should be amended to align it with Directive (EU) 2016/680 on data protection in law enforcement.
Under Directive (EU) 2016/680, the Commission was required to review, by 6 May 2019 at the latest, other EU legal acts that regulate competent authorities’ personal data processing for law enforcement purposes, in order to assess the need to align them with the LED and, where appropriate, to make proposals for amending them to ensure consistency in the protection of personal data within the scope of the LED.
The proposal follows the results of the review carried out by the Commission under the Data Protection Law Enforcement Directive, as presented in the 2020 Communication entitled ‘The way forward on aligning the former third pillar acquis with data protection rules’.
CONTENT: the proposal aims to bring the rules governing data protection in Council Decision 2009/917/JHA into line with the principles and rules laid down in the Directive on data protection in the field of law enforcement in order to establish a solid and coherent framework for the protection of personal data in the Union.
The proposed amendments aim to:
- replace the concept of ‘serious contraventions of national laws’ by the reference to ‘criminal offences under national laws’, so as to increase clarity whilst aligning with the LED;
- clarify the respective roles of the Commission and of the Member States with regard to the personal data;
- replace the reference to the list of certain categories of personal data that cannot be entered into the system under Framework Decision 2008/977/JHA by a reference to the corresponding list under the LED;
- clarify the conditions for collecting and recording the personal data and require that the personal data may be entered into the CIS only if there are reasonable grounds, in particular on the basis of prior illegal activities, to suggest that the person concerned has committed, is in the act of committing or will commit one of the criminal offences under national laws covered;
- clarify the conditions in which access to the CIS by international or regional organisations may be permitted under the LED;
- restrict the subsequent processing of personal data recorded in the CIS, in line with the principle of purpose limitation as regulated under the LED;
- clarify the conditions in which non-personal data can be processed for other purposes and the clarify the conditions in which the transmissions and international transfers of personal data and non-personal data can take place;
- introduce a maximum retention period for personal data of five years, in line with the Directive on data protection in law enforcement, and simplify the previous procedure;
- update the general reference to Framework Decision 2008/977/JHA with the reference to the Directive on data protection in the field of law enforcement.
Documents
- Committee report tabled for plenary, 1st reading: A9-0361/2023
- Amendments tabled in committee: PE755.989
- Committee draft report: PE753.732
- Legislative proposal published: COM(2023)0244
- Legislative proposal published: EUR-Lex
- Committee draft report: PE753.732
- Amendments tabled in committee: PE755.989
Amendments | Dossier |
17 |
2023/0143(COD)
2023/11/06
LIBE
17 amendments...
Amendment 14 #
Proposal for a regulation Recital 2 (2) Council Decision 2009/917/JHA10 on the use of information technology for customs purposes establishes the Customs Information System (CIS) to assist in preventing, investigating and prosecuting serious contraventions of national laws by making information available more rapidly and increase the effectiveness of the customs administrations. In order to ensure a consistent approach to the protection of personal data in the Union, that Decision should be amended to align it with Directive (EU) 2016/680. In particular, the personal data protection rules should respect the principle of purpose
Amendment 15 #
Proposal for a regulation Recital 5 (5) To ensure the optimal preservation of the data while reducing the administrative burden for the competent authorities, the procedure governing the retention of personal data in the CIS should be simplified by removing the obligation to review data annually and by setting as a general rule a maximum retention period of five years which can be increased, subject to justification, by an additional period of two years. That retention period is necessary and proportionate in view of the typical length of criminal proceedings and the need for the data for the conduct of joint customs operations and of investigations.
Amendment 16 #
Proposal for a regulation Recital 5 (5) To ensure the optimal preservation of the data while reducing the administrative burden for the competent authorities, the procedure governing the retention of personal data in the CIS should be simplified by removing the obligation to review data annually and by setting a maximum retention period of
Amendment 17 #
Proposal for a regulation Recital 5 (5) To ensure the optimal preservation of the data while reducing the administrative burden for the competent authorities, the procedure governing the retention of personal data in the CIS should be simplified by removing the obligation to review data annually and by setting a maximum retention period of
Amendment 18 #
Proposal for a regulation Article 1 – paragraph 1 – point 2 Council Decision 2009/917/JHA Article 2 – paragraph 1 – point 2 (2) Point 2 of Article 2 is
Amendment 19 #
Proposal for a regulation Article 1 – paragraph 1 – point 3 Council Decision 2009/917/JHA Article 3 – paragraph 2 In relation to the processing of personal data in the Customs Information System, the Commission shall be considered the processor, within the meaning of point (12) of Article 3 of Regulation (EU) 2018/1725, acting, in accordance with Article 29 of that Regulation, on behalf of the national authorities designated by each Member State, which shall be considered the controllers of the personal data.
Amendment 20 #
Proposal for a regulation Article 1 – paragraph 1 – point 5 Council Decision 2009/917/JHA Article 5 – paragraph 2 2. For the purpose of the actions referred to in paragraph 1, personal data in any of the categories referred to in Article 3(1) may be entered into the Customs Information System only if there are
Amendment 21 #
Proposal for a regulation Article 1 – paragraph 1 – point 6 – introductory part (6) Paragraph 3 of Article 7 is
Amendment 22 #
Proposal for a regulation Article 1 – paragraph 1 – point 6 Council Decision 2009/917/JHA Article 7 – paragraph 3 Amendment 23 #
Proposal for a regulation Article 1 – paragraph 1 – point 6 Article 7 – paragraph 3 2009/917/JHA 3. Notwithstanding paragraphs 1 and 2, the Council may
Amendment 24 #
Proposal for a regulation Article 1 – paragraph 1 – point 7 Council Decision 2009/917/JHA Article 8 – paragraph 1 – subparagraph 1 Member States, Europol and Eurojust may process personal data obtained from the Customs Information System only in order to achieve the aim stated in Article 1(2), in accordance with the applicable rules of Union law on the pro
Amendment 25 #
Proposal for a regulation Article 1 – paragraph 1 – point 8 Council Decision 2009/917/JHA Article 8 – paragraph 4 – subparagraph 1 – point a (a) transmitted to, and further processed by, national authorities other than those designated under paragraph 2, in accordance with the applicable rules of Union law on the pro
Amendment 26 #
Proposal for a regulation Article 1 – paragraph 1 – point 8 Council Decision 2009/917/JHA Article 8 – paragraph 4 – subparagraph 1 – point b (b) transferred to, and further processed by, the competent authorities of third countries and international or regional organisations, in accordance with Chapter V of Directive (EU) 2016/680 and, where relevant, with Chapters V and IX of Regulation (EU) 2018/1725.
Amendment 27 #
Proposal for a regulation Article 1 – paragraph 1 – point 9 Article 14 2009/917/JHA Personal data entered into the Customs Information System shall be kept only for the time necessary to achieve the aim stated in Article 1(2) and may as a general rule not be retained for more than five years. However, exceptionally, that data may be kept for an additional period of at most two years, where and insofar as a strict need to do so in order to achieve that aim is established in an individual case.
Amendment 28 #
Proposal for a regulation Article 1 – paragraph 1 – point 9 Council Decision 2009/917/JHA Article 14 Personal data entered into the Customs Information System shall be kept only for the time necessary to achieve the aim stated in Article 1(2)
Amendment 29 #
Proposal for a regulation Article 1 – paragraph 1 – point 9 Council Decision 2009/917/JHA Article 1 – paragraph 1 – point 9 Personal data entered into the Customs Information System shall be kept only for the time necessary to achieve the aim stated in Article 1(2) and may not be retained for more than
Amendment 30 #
Proposal for a regulation Article 1 – paragraph 1 – point 11 Council Decision 2009/917/JHA Article 20 Directive (EU) 2016/680 and Regulation (EU) 2018/1725 shall apply to the processing of personal data under this Decision.
source: 755.989
|
History
(these mark the time of scraping, not the official date of the change)
docs/2 |
|
forecasts |
|
docs/2 |
|
events/4/summary |
|
events/6 |
|
events/5 |
|
docs/2 |
|
events/4 |
|
procedure/stage_reached |
Old
Awaiting committee decisionNew
Awaiting Parliament's position in 1st reading |
events/2 |
|
events/3 |
|
procedure/Other legal basis |
Rules of Procedure EP 159
|
docs/1 |
|
docs/0 |
|
docs/0 |
|
committees/0/shadows/4 |
|
committees/0/shadows |
|
committees/0/rapporteur |
|
events/0/summary |
|
commission |
|
events/1 |
|
procedure/dossier_of_the_committee |
|
procedure/stage_reached |
Old
Preparatory phase in ParliamentNew
Awaiting committee decision |
docs/0/docs/1 |
|
events/0/docs/1 |
|