Examples of this shift in attention are renewed calls for an EU directive on passenger name records (PNR) and the discussion of whether there is a need to collect and store considerable data on all air passengers. At the same time, privacy remained top of the agenda; the Court of Justice of the European Union annulled the Data Retention Directive, and, in the Google case, clarified important aspects of EU data protection law.
The EU institutions and Member States have been negotiating the data protection package since January 2012.
Following the Snowden revelations concerning mass surveillance, the role of intelligence services and the implications of surveillance activities were discussed in the political arena, as well as in courts and by the public.
Data protection authorities play an important role in safeguarding general data protection legislation.
In 2014, various revelations concerning mass surveillance highlighted the occurrence of data security breaches.
The CJEU’s judgment on the Data Retention Directive spelled out crucial fundamental rights principles and suggested specific safeguards.
Discussions on creating an EU framework for acquiring and processing passenger name records played a significant part in the internal security debate in 2014.