Listina základních práv EU

Article 34

Risk assessment

1. Providers of very large online platforms and of very large online search engines shall diligently identify, analyse and assess any systemic risks in the Union stemming from the design or functioning of their service and its related systems, including algorithmic systems, or from the use made of their services.

They shall carry out the risk assessments by the date of application referred to in Article 33(6), second subparagraph, and at least once every year thereafter, and in any event prior to deploying functionalities that are likely to have a critical impact on the risks identified pursuant to this Article. This risk assessment shall be specific to their services and proportionate to the systemic risks, taking into consideration their severity and probability, and shall include the following systemic risks:

[...]

(b) any actual or foreseeable negative effects for the exercise of fundamental rights, in particular the fundamental rights to human dignity enshrined in Article 1 of the Charter, to respect for private and family life enshrined in Article 7 of the Charter, to the protection of personal data enshrined in Article 8 of the Charter, to freedom of expression and information, including the freedom and pluralism of the media, enshrined in Article 11 of the Charter, to non-discrimination enshrined in Article 21 of the Charter, to respect for the rights of the child enshrined in Article 24 of the Charter and to a high-level of consumer protection enshrined in Article 38 of the Charter;

Article 39

In accordance with Article 16 of the Treaty on the Functioning of the European Union and by way of derogation from paragraph 2 thereof, the Council shall adopt a decision laying down the rules relating to the protection of individuals with regard to the processing of personal data by the Member States when carrying out activities which fall within the scope of this Chapter, and the rules relating to the free movement of such data. Compliance with these rules shall be subject to the control of independent authorities.

Article 16 (ex Article 286 TEC)

1. Everyone has the right to the protection of personal data concerning them.

2. The European Parliament and the Council, acting in accordance with the ordinary legislative procedure, shall lay down the rules relating to the protection of individuals with regard to the processing of personal data by Union institutions, bodies, offices and agencies, and by the Member States when carrying out activities which fall within the scope of Union law, and the rules relating to the free movement of such data. Compliance with these rules shall be subject to the control of independent authorities. The rules adopted on the basis of this Article shall be without prejudice to the specific rules laid down in Article 39 of the Treaty on European Union.

Article 1 Subject matter and objectives

1. This Regulation lays down rules relating to the protection of natural persons with regard to the processing of personal data by the Union institutions and bodies and rules relating to the free movement of personal data between them or to other recipients established in the Union.

2. This Regulation protects fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data.

3. The European Data Protection Supervisor shall monitor the application of the provisions of this Regulation to all processing operations carried out by a Union institution or body.

...

Article 1 Subject matter

1. This Directive lays down measures to facilitate access to and the use of financial information and bank account information by competent authorities for the prevention, detection, investigation or prosecution of serious criminal offences. It also lays down measures to facilitate access to law enforcement information by Financial Intelligence Units (‘FIUs’) for the prevention and combating of money laundering, associate predicate offences and terrorist financing and measures to facilitate cooperation between FIUs.

2. This Directive is without prejudice to:

(a) Directive (EU) 2015/849 and the related provisions of national law, including the organisational status conferred on FIUs under national law as well as their operational independence and autonomy;

(b) channels for the exchange of information between competent authorities or the powers of competent authorities under Union or national law to obtain information from obliged entities;

(c) Regulation (EU) 2016/794; (d) the obligations resulting from Union instruments on mutual legal assistance or on mutual recognition of decisions regarding criminal matters and from Framework Decision 2006/960/JHA.

...

Article 1 Subject matter and scope

1. In order to promote the use of open data and stimulate innovation in products and services, this Directive establishes a set of minimum rules governing the re-use and the practical arrangements for facilitating the re-use of:

(a) existing documents held by public sector bodies of the Member States;

(b) existing documents held by public undertakings that are:

(i) active in the areas defined in Directive 2014/25/EU;

(ii) acting as public service operators pursuant to Article 2 of Regulation (EC) No 1370/2007;

(iii) acting as air carriers fulfilling public service obligations pursuant to Article 16 of Regulation (EC) No 1008/2008; or

(iv) acting as Community shipowners fulfilling public service obligations pursuant to Article 4 of Regulation (EEC) No 3577/92;

(c) research data pursuant to the conditions set out in Article 10.

2. This Directive does not apply to:

(a) documents the supply of which is an activity falling outside the scope of the public task of the public sector bodies concerned as defined by law or by other binding rules in the Member State, or, in the absence of such rules, as defined in accordance with common administrative practice in the Member State in question, provided that the scope of the public tasks is transparent and subject to review;

(b) documents held by public undertakings:

(i) produced outside the scope of the provision of services in the general interest as defined by law or other binding rules in the Member State;

(ii) related to activities directly exposed to competition and therefore, pursuant to Article 34 of Directive 2014/25/EU, not subject to procurement rules;

(c) documents for which third parties hold intellectual property rights;

(d) documents, such as sensitive data, which are excluded from access by virtue of the access regimes in the Member State, including on grounds of:

(i) the protection of national security (namely, State security), defence, or public security;

(ii) statistical confidentiality;

(iii) commercial confidentiality (including business, professional or company secrets);

(e) documents access to which is excluded or restricted on grounds of sensitive critical infrastructure protection related information as defined in point (d) of Article 2 of Directive 2008/114/EC;

(f) documents access to which is restricted by virtue of the access regimes in the Member States, including cases whereby citizens or legal entities have to prove a particular interest to obtain access to documents;

(g) logos, crests and insignia;

(h) documents, access to which is excluded or restricted by virtue of the access regimes on grounds of protection of personal data, and parts of documents accessible by virtue of those regimes which contain personal data the re-use of which has been defined by law as being incompatible with the law concerning the protection of individuals with regard to the processing of personal data or as undermining the protection of privacy and the integrity of the individual, in particular in accordance with Union or national law regarding the protection of personal data;

(i) documents held by public service broadcasters and their subsidiaries, and by other bodies or their subsidiaries for the fulfilment of a public service broadcasting remit;

(j) documents held by cultural establishments other than libraries, including university libraries, museums and archives;

(k) documents held by educational establishments of secondary level and below, and, in the case of all other educational establishments, documents other than those referred to in point (c) of paragraph 1;

(l) documents other than those referred to in point (c) of paragraph 1 held by research performing organisations and research funding organisations, including organisations established for the transfer of research results.

3. This Directive builds on, and is without prejudice to, Union and national access regimes.

4. This Directive is without prejudice to Union and national law on the protection of personal data, in particular Regulation (EU) 2016/679 and Directive 2002/58/EC and the corresponding provisions of national law.

5. The obligations imposed in accordance with this Directive shall apply only insofar as they are compatible with the provisions of international agreements on the protection of intellectual property rights, in particular the Berne Convention, the TRIPS Agreement and the WCT.

6. The right for the maker of a database provided for in Article 7(1) of Directive 96/9/EC shall not be exercised by public sector bodies in order to prevent the re-use of documents or to restrict re-use beyond the limits set by this Directive.

7. This Directive governs the re-use of existing documents held by public sector bodies and public undertakings of the Member States, including documents to which Directive 2007/2/EC applies.

...

Article 1 Subject matter and scope

1. In order to promote the use of open data and stimulate innovation in products and services, this Directive establishes a set of minimum rules governing the re-use and the practical arrangements for facilitating the re-use of:

(a) existing documents held by public sector bodies of the Member States;

(b) existing documents held by public undertakings that are:

(i) active in the areas defined in Directive 2014/25/EU;

(ii) acting as public service operators pursuant to Article 2 of Regulation (EC) No 1370/2007;

(iii) acting as air carriers fulfilling public service obligations pursuant to Article 16 of Regulation (EC) No 1008/2008; or

(iv) acting as Community shipowners fulfilling public service obligations pursuant to Article 4 of Regulation (EEC) No 3577/92; (c) research data pursuant to the conditions set out in Article 10.

2. This Directive does not apply to:

(a) documents the supply of which is an activity falling outside the scope of the public task of the public sector bodies concerned as defined by law or by other binding rules in the Member State, or, in the absence of such rules, as defined in accordance with common administrative practice in the Member State in question, provided that the scope of the public tasks is transparent and subject to review;

(b) documents held by public undertakings:

(i) produced outside the scope of the provision of services in the general interest as defined by law or other binding rules in the Member State;

(ii) related to activities directly exposed to competition and therefore, pursuant to Article 34 of Directive 2014/25/EU, not subject to procurement rules;

(c) documents for which third parties hold intellectual property rights;

(d) documents, such as sensitive data, which are excluded from access by virtue of the access regimes in the Member State, including on grounds of:

(i) the protection of national security (namely, State security), defence, or public security;

(ii) statistical confidentiality;

(iii) commercial confidentiality (including business, professional or company secrets);

(e) documents access to which is excluded or restricted on grounds of sensitive critical infrastructure protection related information as defined in point (d) of Article 2 of Directive 2008/114/EC;

(f) documents access to which is restricted by virtue of the access regimes in the Member States, including cases whereby citizens or legal entities have to prove a particular interest to obtain access to documents;

(g) logos, crests and insignia;

(h) documents, access to which is excluded or restricted by virtue of the access regimes on grounds of protection of personal data, and parts of documents accessible by virtue of those regimes which contain personal data the re-use of which has been defined by law as being incompatible with the law concerning the protection of individuals with regard to the processing of personal data or as undermining the protection of privacy and the integrity of the individual, in particular in accordance with Union or national law regarding the protection of personal data;

(i) documents held by public service broadcasters and their subsidiaries, and by other bodies or their subsidiaries for the fulfilment of a public service broadcasting remit;

(j) documents held by cultural establishments other than libraries, including university libraries, museums and archives;

(k) documents held by educational establishments of secondary level and below, and, in the case of all other educational establishments, documents other than those referred to in point (c) of paragraph 1;

(l) documents other than those referred to in point (c) of paragraph 1 held by research performing organisations and research funding organisations, including organisations established for the transfer of research results.

3. This Directive builds on, and is without prejudice to, Union and national access regimes.

4. This Directive is without prejudice to Union and national law on the protection of personal data, in particular Regulation (EU) 2016/679 and Directive 2002/58/EC and the corresponding provisions of national law.

5. The obligations imposed in accordance with this Directive shall apply only insofar as they are compatible with the provisions of international agreements on the protection of intellectual property rights, in particular the Berne Convention, the TRIPS Agreement and the WCT.

6. The right for the maker of a database provided for in Article 7(1) of Directive 96/9/EC shall not be exercised by public sector bodies in order to prevent the re-use of documents or to restrict re-use beyond the limits set by this Directive.

7. This Directive governs the re-use of existing documents held by public sector bodies and public undertakings of the Member States, including documents to which Directive 2007/2/EC applies.

...

Article 1 Subject matter

This Regulation establishes: (a) a system to identify the Member States holding information on previous convictions of third-country nationals (‘ECRIS-TCN’); (b) the conditions under which ECRIS-TCN shall be used by the central authorities in order to obtain information on such previous convictions through the European Criminal Records Information System (ECRIS) established by Decision 2009/316/JHA, as well as the conditions under which Eurojust, Europol and the EPPO shall use ECRIS-TCN.

...

Article 2 - Processing of personal data
‘1. Processing of personal data pursuant to this Directive shall be carried out in accordance with Directive 95/46/EC.
2. Processing of personal data by Union institutions and bodies pursuant to this Directive shall be carried out in accordance with Regulation (EC) No 45/2001.‘

Article 1 - Subject-matter and objectives
‘1. This Directive lays down the rules relating to the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security.
2. In accordance with this Directive, Member States shall:
(a) protect the fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data‘
Article 4
‘Principles relating to processing of personal data
1. Member States shall provide for personal data to be:
(a) processed lawfully and fairly;
(b) collected for specified, explicit and legitimate purposes and not processed in a manner that is incompatible with those purposes;
(c) adequate, relevant and not excessive in relation to the purposes for which they are processed;
(d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
(e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed;
(f) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
2. Processing by the same or another controller for any of the purposes set out in Article 1(1) other than that for which the personal data are collected shall be permitted in so far as:
(a) the controller is authorised to process such personal data for such a purpose in accordance with Union or Member State law; and
(b) processing is necessary and proportionate to that other purpose in accordance with Union or Member State law.
3. Processing by the same or another controller may include archiving in the public interest, scientific, statistical or historical use, for the purposes set out in Article 1(1), subject to appropriate safeguards for the rights and freedoms of data subjects.
4. The controller shall be responsible for, and be able to demonstrate compliance with, paragraphs 1, 2 and 3.‘