eu-charter

Handvest van de grondrechten van de Europese Unie

Artikel 8 - De bescherming van persoonsgegevens

Artikel 8 - De bescherming van persoonsgegevens

1. Eenieder heeft recht op bescherming van zijn persoonsgegevens.

2. Deze gegevens moeten eerlijk worden verwerkt, voor bepaalde doeleinden en met toestemming van de betrokkene of op basis van een andere gerechtvaardigde grondslag waarin de wet voorziet. Eenieder heeft recht van inzage in de over hem verzamelde gegevens en op rectificatie daarvan.

3. Een onafhankelijke autoriteit ziet erop toe dat deze regels worden nageleefd.

    • Text:

      Dit artikel was gebaseerd op artikel 286 van het Verdrag tot oprichting van de Europese Gemeenschap en op Richtlijn 95/46/EG van het Europees Parlement en de Raad betreffende de bescherming van natuurlijke personen in verband met de verwerking van persoonsgegevens en betreffende het vrije verkeer van die gegevens (PB L 281 van 23.11.1995, blz. 31), alsmede op artikel 8 van het EVRM en op het Verdrag van de Raad van Europa van 28 januari 1981 tot bescherming van personen met betrekking tot de geautomatiseerde verwerking van persoonsgegevens, dat door alle lidstaten is bekrachtigd. Artikel 286 van het EG-Verdrag is nu vervangen door artikel 16 van het Verdrag betreffende de werking van de Europese Unie en artikel 39 van het Verdrag betreffende de Europese Unie. Voorts wordt verwezen naar Verordening (EG) nr. 45/2001 van het Europees Parlement en de Raad betreffende de bescherming van natuurlijke personen in verband met de verwerking van persoonsgegevens door de communautaire instellingen en organen en betreffende het vrije verkeer van die gegevens (PB L 8 van 12.1.2001, blz. 1). Bovengenoemde richtlijn en verordening bevatten voorwaarden en beperkingen voor de uitoefening van het recht op bescherming van persoonsgegevens.

      Source:
      Publicatieblad van de Europese Unie C 303/17 - 14.12.2007
      Preamble - Explanations relating to the Charter of Fundamental Rights:
      Deze toelichtingen werden oorspronkelijk opgesteld onder de verantwoordelijkheid van het praesidium van de Conventie die het Handvest van de grondrechten van de Europese Unie heeft opgesteld. Zij zijn bijgewerkt onder de verantwoordelijkheid van het praesidium van de Europese Conventie, in het licht van de wijzigingen die door laatstgenoemde Conventie in het Handvest zijn aangebracht (met name in artikel 51 en 52) en van verdere ontwikkelingen in het recht van de Unie. Hoewel zij op zich geen juridische waarde hebben, vormen zij een waardevol hulpmiddel voor de interpretatie, bedoeld om de bepalingen van het Handvest te verduidelijken.
    • Private person vs. operator of the internet search engine “Google.de”
      Decision date:
      Deciding body type:
      National Court/Tribunal
      Deciding body:
      Federal Court of Justice
      Type:
      Decision
      Policy area:
      ECLI (European case law identifier):
      ECLI:DE:BGH:2022:030522UVIZR832.20.0
    • Ombudsman
      Decision date:
      Deciding body type:
      National Court/Tribunal
      Deciding body:
      Constitutional Court
      Type:
      Decision
      Policy area:
      ECLI (European case law identifier):
    • VZW Kinderrechtencoalitie Vlaanderen (Children’s rights coalition Flanders) and VZW Liga voor Mensenrechten (League for Human Rights) v. the Kingdom of Belgium
      Decision date:
      Deciding body type:
      National Court/Tribunal
      Deciding body:
      Council of State
      Type:
      Decision
      Policy area:
      ECLI (European case law identifier):
    • Unidentified publishing company as first applicant, unidentified individuals as second, third and fourth applicants v. Unidentified authority as respondent
      Decision date:
      Deciding body type:
      National Court/Tribunal
      Deciding body:
      Supreme Court
      Type:
      Decision
      Policy area:
      ECLI (European case law identifier):
    • Re. the application of XXX Memic for permit to file a certiorari order
      Decision date:
      Deciding body type:
      National Court/Tribunal
      Deciding body:
      Supreme Court of Cyprus, Primary Jurisdiction
      Type:
      Decision
      Policy area:
      ECLI (European case law identifier):
      ECLI:CY:AD:2022:D26
    • B vs. Parliament of the Republic of Latvia
      Decision date:
      Deciding body type:
      National Court/Tribunal
      Deciding body:
      Constitutional Court
      Type:
      Decision
      Policy area:
      ECLI (European case law identifier):
    • Re the application of XXX Hadjioannou et al for the issue of a Certiorary Order regarding the order for recovery of telephone data dated 29.09.2019 isused by the District Court of Limassol based on application No, 70/19 and the affidavit of police officer 3xx7 xxx Akourastos for the lifting of telecommunication data of the applicant on the basis of the law on data retention of 2007 N. 183(1)/07.
      Decision date:
      Deciding body type:
      National Court/Tribunal
      Deciding body:
      Cyprus Supreme Court
      Type:
      Decision
      Policy area:
      ECLI (European case law identifier):
      CY:AD:2021:D487
    • President of the Republic
      Decision date:
      Deciding body type:
      National Court/Tribunal
      Deciding body:
      Constitutional Court
      Type:
      Decision
      Policy area:
      Justice, freedom and security
      ECLI (European case law identifier):
    • Proceedings brought by B.
      Decision date:
      Deciding body type:
      Court of Justice of the European Union
      Deciding body:
      Court (Grand Chamber)
      Type:
      Decision
      Policy area:
      Justice, freedom and security
      ECLI (European case law identifier):
      ECLI:EU:C:2021:504
    • Defendant H.K. v. Prosecutor's Office
      Decision date:
      Deciding body type:
      National Court/Tribunal
      Deciding body:
      Supreme Court
      Type:
      Decision
      Policy area:
      Justice, freedom and security
      ECLI (European case law identifier):

    75 results found

    • Eesti Vabariigi Põhiseadus
      Land:
      Estonia

      § 42. Riigiasutused, kohalikud omavalitsused ja nende ametiisikud ei tohi Eesti kodaniku vaba tahte vastaselt koguda ega talletada andmeid tema veendumuste kohta.
      § 44. (...) Eesti kodanikul on õigus seaduses sätestatud korras tutvuda tema kohta riigiasutustes ja kohalikes omavalitsustes ning riigi ja kohalike omavalitsuste arhiivides hoitavate andmetega. Seaduse alusel võib seda õigust piirata teiste inimeste õiguste ja vabaduste ning lapse põlvnemise saladuse kaitseks, samuti kuriteo tõkestamise, kurjategija tabamise või kriminaalmenetluses tõe väljaselgitamise huvides. (...)

    • Personal Data Protection Act 
      Land:
      Estonia

      § 1. Scope of application and purpose of Act.
      (1) The aim of this Act is to protect the fundamental rights and freedoms of natural persons upon processing of personal data, above all the right to inviolability of private life. (…)

    • Sammenskrevet udgave af persondataloven
      Land:
      Denmark

      Lovens område § 1. Loven gælder for behandling af personoplysninger, som helt eller delvis foretages ved hjælp af elektronisk databehandling, og for ikke-elektronisk behandling af personoplysninger, der er eller vil blive indeholdt i et register. Stk. 2. Loven gælder tillige for anden ikke-elektronisk systematisk behandling, som udføres for private, og som omfatter oplysninger om personers private eller økonomiske forhold eller i øvrigt oplysninger om personlige forhold, som med rimelighed kan forlanges unddraget offentligheden. Dette gælder dog ikke reglerne i lovens kapitel 8 og 9. Stk. 3. Lovens § 5, stk. 1-3, §§ 6-8, § 10, § 11, stk. 1, § 38 og § 40 gælder også for manuel videregivelse af personoplysninger til en anden forvaltningsmyndighed. Datatilsynet fører i overensstemmelse med lovens kapitel 16 tilsyn med videregivelse som nævnt i 1. pkt. Stk. 4. Loven gælder endvidere for behandling af oplysninger om virksomheder m.v., jf. stk. 1 og 2, hvis denne behandling udføres for kreditoplysningsbureauer. Tilsvarende gælder for så vidt angår behandlinger, som er omfattet af § 50, stk. 1, nr. 2. Stk. 5. Kapitel 5 gælder også for behandling af oplysninger om virksomheder m.v. , jf. stk. 1. Stk. 6. Uden for de i stk. 4 nævnte tilfælde kan justitsministeren bestemme, at lovens regler helt eller delvis skal finde anvendelse på behandling af oplysninger om virksomheder m.v., som udføres for private. Stk. 7. Uden for de i stk. 5 nævnte tilfælde kan vedkommende minister bestemme, at lovens regler helt eller delvis skal finde anvendelse på behandling af oplysninger om virksomheder m.v., som udføres for den offentlige forvaltning.

    • The Act on Processing of Personal
      Land:
      Denmark

      Scope of the Act 1. - (1) This Act shall apply to the processing of personal data wholly or partly by automatic means, and to the processing otherwise than by automatic means of personal data which form part of a filing system or are intended to form part of a filing system. (2) This Act shall further apply to other non-automatic systematic processing of data which is performed for private persons or bodies and which includes data on individual persons' private or financial matters or other data on personal matters which can reasonably be claimed to be withheld from the public. However, this shall not apply to Chapters 8 and 9 of this Act. (3) This Act shall further apply to the processing of data concerning companies, etc., cf. subsections (1) and (2), if the processing is carried out for credit information agencies. The same shall apply in the case of processing of data covered by section 50 (1) 2. (4) Chapter 5 of the Act shall also apply to the processing of data concerning companies, etc., cf. subsection (1). (5) In other cases than those mentioned in subsection (3), the Minister of Justice may decide that the provisions of this Act shall apply, in full or in part, to the processing of data concerning companies, etc. which is performed for private persons or bodies. (6) In other cases than those mentioned in subsection(4), the competent Minister may decide that the provisions of this Act shall apply, in full or in part, to the processing of data concerning companies, etc., which is performed on behalf of public administrations. (7) This Act shall apply to any processing of personal data in connection with video surveillance. (...)

    • The Processing of Personal Data (Protection of the Individual) Law
      Land:
      Cyprus

      Scope of the law 3.(1) The provisions of this Law shall apply to the processing of personal data wholly or partly by automatic means, and to the processing otherwise than by automatic means of personal data which form part of a filing system or are intended to form part of a filing system.(…)

    • Νόμοι 138(Ι) του 2001 και 37(Ι) του 2003
      Land:
      Cyprus

      Πεδίο εφαρμογής.3.-(1) Οι διατάξεις του παρόντος Νόμου εφαρμόζονται στην αυτοματοποιημένη εν όλω ή εν μέρει επεξεργασία, καθώς και στη μη αυτοματοποιημένη επεξεργασία δεδομένων προσωπικού χαρακτήρα, τα οποία περιλαμβάνονται (...).

    • Personal Data Protection Act 2001
      Land:
      Bulgaria

      Art. 1. (1) This Law shall govern the protection of rights of individuals with regard to the processing of their personal data.(2) The purpose of this law is to guarantee the inviolability of personality and privacy by ensuring protection of individuals in case of unauthorised personal data processing referred to them, in the process of free movement of data. (3) (new - SG 91/06) This Law shall apply to personal data processing:1. by automatic means; 2. by non-automatic means, where such data are, or are designed to become, part of a register.(...)

    • Закон за защита на личните данни
      Land:
      Bulgaria

      Чл. 1. (Изм. - ДВ, бр. 103 от 2005 г.) (1) Този закон урежда защитата на правата на физическите лица при обработването на личните им данни. (2) Целта на закона е гарантиране на неприкосновеността на личността и личния живот чрез осигуряване на защита на физическите лица при неправомерно обработване на свързаните с тях лични данни в процеса на свободното движение на данните. (3) (Нова - ДВ, бр. 91 от 2006 г.) Този закон се прилага за обработването на лични данни със: 1. автоматични средства; 2. неавтоматични средства, когато тези данни съставляват или са предназначени да съставляват част от регистър. (...)

    • Act of 8 December 1992 on the protection of privacy in relation to the processing of personal data
      URL:
      Land:
      Belgium

       

       

       

    • Loi du 8 décembre 1992 relative à la protection de la vie privée à l'égard des traitements de données à caractère personnel
      Land:
      Belgium

       

       

       

    • Wet van 8 december 1992 voor de bescherming van de persoonlijke levenssfeer ten opzichte van de verwerking van persoonsgegevens
      Land:
      Belgium

       

       

       

    • Datenschutzgesetz 2000 - DSG 2000
      Land:
      Austria

      § 1. (1) Jedermann hat, insbesondere auch im Hinblick auf die Achtung seines Privat- und Familienlebens, Anspruch auf Geheimhaltung der ihn betreffenden personenbezogenen Daten, soweit ein schutzwürdiges Interesse daran besteht. Das Bestehen eines solchen Interesses ist ausgeschlossen, wenn Daten infolge ihrer allgemeinen Verfügbarkeit oder wegen ihrer mangelnden Rückführbarkeit auf den Betroffenen einem Geheimhaltungsanspruch nicht zugänglich sind. (2) Soweit die Verwendung von personenbezogenen Daten nicht im lebenswichtigen Interesse des Betroffenen oder mit seiner Zustimmung erfolgt, sind Beschränkungen des Anspruchs auf Geheimhaltung nur zur Wahrung überwiegender berechtigter Interessen eines anderen zulässig, und zwar bei Eingriffen einer staatlichen Behörde nur auf Grund von Gesetzen, die aus den in Art. 8 Abs. 2 der Europäischen Konvention zum Schutze der Menschenrechte und Grundfreiheiten (EMRK), BGBl. Nr. 210/1958, genannten Gründen notwendig sind. Derartige Gesetze dürfen die Verwendung von Daten, die ihrer Art nach besonders schutzwürdig sind, nur zur Wahrung wichtiger öffentlicher Interessen vorsehen und müssen gleichzeitig angemessene Garantien für den Schutz der Geheimhaltungsinteressen der Betroffenen festlegen. Auch im Falle zulässiger Beschränkungen darf der Eingriff in das Grundrecht jeweils nur in der gelindesten, zum Ziel führenden Art vorgenommen werden. (3) Jedermann hat, soweit ihn betreffende personenbezogene Daten zur automationsunterstützten Verarbeitung oder zur Verarbeitung in manuell, dh. ohne Automationsunterstützung geführten Dateien bestimmt sind, nach Maßgabe gesetzlicher Bestimmungen 1. das Recht auf Auskunft darüber, wer welche Daten über ihn verarbeitet, woher die Daten stammen, und wozu sie verwendet werden, insbesondere auch, an wen sie übermittelt werden; 2. das Recht auf Richtigstellung unrichtiger Daten und das Recht auf Löschung unzulässigerweise verarbeiteter Daten. (4) Beschränkungen der Rechte nach Abs. 3 sind nur unter den in Abs. 2 genannten Voraussetzungen zulässig. (5) Gegen Rechtsträger, die in Formen des Privatrechts eingerichtet sind, ist, soweit sie nicht in Vollziehung der Gesetze tätig werden, das Grundrecht auf Datenschutz mit Ausnahme des Rechtes auf Auskunft auf dem Zivilrechtsweg geltend zu machen. In allen übrigen Fällen ist die Datenschutzkommission zur Entscheidung zuständig, es sei denn, daß Akte der Gesetzgebung oder der Gerichtsbarkeit betroffen sind.

    • European Convention on Human Rights - Article 8
      Land:
      Austria

      Article 8

      1 Everyone has the right to respect for his private and family life, his home and his correspondence.

      2 There shall be no interference by a public authority with the exercise of this right except such as is in accordance with the law and is necessary in a democratic society in the interests of national security, public safety or the economic well-being of the country, for the prevention of disorder or crime, for the protection of health or morals, or for the protection of the rights and freedoms of others.

    • Konvention zum Schutze der Menschenrechte und Grundfreiheiten
      Land:
      Austria

      Artikel 8 (1) Jedermann hat Anspruch auf Achtung seines Privat- und Familienlebens, seiner Wohnung und seines Briefverkehrs.

    • The Federal Act Concerning the Protection of Personal Data
      Land:
      Austria

      Sect. 1.(1) Everybody shall have the right to secrecy for the personal data concerning him, especially with regard to his private and family life, insofar as he has an interest deserving such protection. Such an interest is precluded when data cannot be subject to the right to secrecy due to their general availability or because they cannot be traced back to the data subject [Betroffener]. (2) Insofar personal data is not used in the vital interest of the data subject or with his consent, restrictions to the right to secrecy are only permitted to safeguard overriding legitimate interests of another, namely in case of an intervention by a public authority the restriction shall only be permitted based on laws [footnote 1] necessary for the reasons stated in Art. 8, para. 2 of the European Convention on Human Rights (Federal Law Gazette No. 210/1958). Such laws may provide for the use of data [Verwendung von Daten] that deserve special protection only in order to safeguard substantial public interests and shall provide suitable safeguards for the protection of the data subjects' interest in secrecy. Even in the case of permitted restrictions the intervention with the fundamental right shall be carried out using only the least intrusive of all effective methods. (3) Everybody shall have, insofar as personal data concerning him are destined for automated processing or manual processing, i.e. in filing systems [Dateien] without automated processing, as provided for by law, 1.the right to obtain information as to who processes what data concerning him, where the data originated, for which purpose they are used, as well as to whom the data are transmitted; 2.the right to rectification of incorrect data and the right to erasure of illegally processed data. (4) Restrictions of the rights according to para. 3 are only permitted under the conditions laid out in para. 2. (5) The fundamental right to data protection, except the right to information [Auskunftsrecht], shall be asserted before the civil courts against organisations that are established according to private law, as long as they do not act in execution of laws. In all other cases the Data Protection Commission [Datenschutzkommission] shall be competent to render the decision, unless an act of Parliament or a judicial decision is concerned.

    37 results found

    • Regulation (EU) No 524/2013 of the European Parliament and of the Council of 21 May 2013 on online dispute resolution for consumer disputes and amending Regulation (EC) No 2006/2004 and Directive 2009/22/EC

      Preamble:

      (1) Article 169(1) and point (a) of Article 169(2) of the Treaty on the Functioning of the European Union (TFEU) provide that the Union is to contribute to the attainment of a high level of consumer protection through measures adopted pursuant to Article 114 TFEU. Article 38 of the Charter of Fundamental Rights of the European Union provides that Union policies are to ensure a high level of consumer protection.

      (2) In accordance with Article 26(2) TFEU, the internal market is to comprise an area without internal frontiers in which the free movement of goods and services is ensured. In order for consumers to have confidence in and benefit from the digital dimension of the internal market, it is necessary that they have access to simple, efficient, fast and low-cost ways of resolving disputes which arise from the sale of goods or the supply of services online. This is particularly important when consumers shop cross-border.‘

      (4) Fragmentation of the internal market impedes efforts to boost competitiveness and growth. Furthermore, the uneven availability, quality and awareness of simple, efficient, fast and low-cost means of resolving disputes arising from the sale of goods or provision of services across the Union constitutes a barrier within the internal market which undermines consumers’ and traders’ confidence in shopping and selling across borders.‘

      (13) The definition of ‘consumer’ should cover natural persons who are acting outside their trade, business, craft or profession. However, if the contract is concluded for purposes partly within and partly outside the person’s trade (dual purpose contracts) and the trade purpose is so limited as not to be predominant in the overall context of the supply, that person should also be considered as a consumer.‘

      (14) The definition of ‘online sales or service contract’ should cover a sales or service contract where the trader, or the trader’s intermediary, has offered goods or services through a website or by other electronic means and the consumer has ordered those goods or services on that website or by other electronic means. This should also cover cases where the consumer has accessed the website or other information society service through a mobile electronic device such as a mobile telephone.

      (26) The right to an effective remedy and the right to a fair trial are fundamental rights laid down in Article 47 of the Charter of Fundamental Rights of the European Union. ODR is not intended to and cannot be designed to replace court procedures, nor should it deprive consumers or traders of their rights to seek redress before the courts. This Regulation should not, therefore, prevent parties from exercising their right of access to the judicial system.

      (35) This Regulation respects fundamental rights and observes the principles recognised in particular by the Charter of Fundamental Rights of the European Union and specifically Articles 7, 8, 38 and 47 thereof.

      Article 1: Subject matter
      The purpose of this Regulation is, through the achievement of a high level of consumer protection, to contribute to the proper functioning of the internal market, and in particular of its digital dimension by providing a European ODR platform (‘ODR platform’) facilitating the independent, impartial, transparent, effective, fast and fair out-of-court resolution of disputes between consumers and traders online.

      Article 12: Processing of personal data

      1. Access to information, including personal data, related to a dispute and stored in the database referred to in Article 11 shall be granted, for the purposes referred to in Article 10, only to the ADR entity to which the dispute was transmitted in accordance with Article 9. Access to the same information shall be granted also to ODR contact points, in so far as it is necessary, for the purposes referred to in Article 7(2) and (4).

      2. The Commission shall have access to information processed in accordance with Article 10 for the purposes of monitoring the use and functioning of the ODR platform and drawing up the reports referred to in Article 21. It shall process personal data of the users of the ODR platform in so far as it is necessary for the operation and maintenance of the ODR platform, including for the purposes of monitoring the use of the ODR platform by ADR entities and ODR contact points.

      3. Personal data related to a dispute shall be kept in the database referred to in paragraph 1 of this Article only for the time necessary to achieve the purposes for which they were collected and to ensure that data subjects are able to access their personal data in order to exercise their rights, and shall be automatically deleted, at the latest, six months after the date of conclusion of the dispute which has been transmitted to the ODR platform in accordance with point (iii) of point (c) of Article 10. That retention period shall also apply to personal data kept in national files by the ADR entity or the ODR contact point which dealt with the dispute concerned, except if the procedural rules applied by the ADR entity or any specific provisions of national law provide for a longer retention period.

      4. Each ODR advisor shall be regarded as a controller with respect to its data processing activities under this Regulation, in accordance with point (d) of Article 2 of Directive 95/46/EC, and shall ensure that those activities comply with national legislation adopted pursuant to Directive 95/46/EC in the Member State of the ODR contact point hosting the ODR advisor.

      5. Each ADR entity shall be regarded as a controller with respect to its data processing activities under this Regulation, in accordance with point (d) of Article 2 of Directive 95/46/EC, and shall ensure that those activities comply with national legislation adopted pursuant to Directive 95/46/EC in the Member State where the ADR entity is established.

      6. In relation to its responsibilities under this Regulation and the processing of personal data involved therein, the Commission shall be regarded as a controller in accordance with point (d) of Article 2 of Regulation (EC) No 45/2001.

      Article 13: Data confidentiality and security

      1. ODR contact points shall be subject to rules of professional secrecy or other equivalent duties of confidentiality laid down in the legislation of the Member State concerned.

      2. The Commission shall take the appropriate technical and organisational measures to ensure the security of information processed under this Regulation, including appropriate data access control, a security plan and a security incident management, in accordance with Article 22 of Regulation (EC) No 45/2001.

      Article 14: Consumer information

      1. Traders established within the Union engaging in online sales or service contracts, and online marketplaces established within the Union, shall provide on their websites an electronic link to the ODR platform. That link shall be easily accessible for consumers. Traders established within the Union engaging in online sales or service contracts shall also state their e-mail addresses.

      2. Traders established within the Union engaging in online sales or service contracts, which are committed or obliged to use one or more ADR entities to resolve disputes with consumers, shall inform consumers about the existence of the ODR platform and the possibility of using the ODR platform for resolving their disputes. They shall provide an electronic link to the ODR platform on their websites and, if the offer is made by e-mail, in that e-mail. The information shall also be provided, where applicable, in the general terms and conditions applicable to online sales and service contracts.

      3. Paragraphs 1 and 2 of this Article shall be without prejudice to Article 13 of Directive 2013/11/EU and the provisions on consumer information on out-of-court redress procedures contained in other Union legal acts, which shall apply in addition to this Article.

      4. The list of ADR entities referred to in Article 20(4) of Directive 2013/11/EU and its updates shall be published in the ODR platform.

      5. Member States shall ensure that ADR entities, the centres of the European Consumer Centres Network, the competent authorities defined in Article 18(1) of Directive 2013/11/EU, and, where appropriate, the bodies designated in accordance with Article 14(2) of Directive 2013/11/EU provide an electronic link to the ODR platform.

      6. Member States shall encourage consumer associations and business associations to provide an electronic link to the ODR platform.

      7. When traders are obliged to provide information in accordance with paragraphs 1 and 2 and with the provisions referred to in paragraph 3, they shall, where possible, provide that information together.

    • Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union

      Article 2 - Processing of personal data
      ‘1. Processing of personal data pursuant to this Directive shall be carried out in accordance with Directive 95/46/EC.
      2. Processing of personal data by Union institutions and bodies pursuant to this Directive shall be carried out in accordance with Regulation (EC) No 45/2001.‘

    • Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detec...

      Article 1 - Subject-matter and objectives
      ‘1. This Directive lays down the rules relating to the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security.
      2. In accordance with this Directive, Member States shall:
      (a) protect the fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data‘
      Article 4
      ‘Principles relating to processing of personal data
      1. Member States shall provide for personal data to be:
      (a) processed lawfully and fairly;
      (b) collected for specified, explicit and legitimate purposes and not processed in a manner that is incompatible with those purposes;
      (c) adequate, relevant and not excessive in relation to the purposes for which they are processed;
      (d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
      (e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed;
      (f) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
      2. Processing by the same or another controller for any of the purposes set out in Article 1(1) other than that for which the personal data are collected shall be permitted in so far as:
      (a) the controller is authorised to process such personal data for such a purpose in accordance with Union or Member State law; and
      (b) processing is necessary and proportionate to that other purpose in accordance with Union or Member State law.
      3. Processing by the same or another controller may include archiving in the public interest, scientific, statistical or historical use, for the purposes set out in Article 1(1), subject to appropriate safeguards for the rights and freedoms of data subjects.
      4. The controller shall be responsible for, and be able to demonstrate compliance with, paragraphs 1, 2 and 3.‘

      Article 57. Penalties:
      Member States shall lay down the rules on penalties applicable to infringements of the provisions adopted pursuant to this Directive and shall take all measures necessary to ensure that they are implemented. The penalties provided for shall be effective, proportionate and dissuasive.

    • Directive (EU) 2016/681 of the European Parliament and of the Council of 27 April 2016 on the use of passenger name record (PNR) data for the prevention, detection, investigation and prosecution of terrorist offences and serious crime

      Article 13 - Protection of personal data
      ‘1. Each Member State shall provide that, in respect of all processing of personal data pursuant to this Directive, every passenger shall have the same right to protection of their personal data, rights of access, rectification, erasure and restriction and rights to compensation and judicial redress as laid down in Union and national law and in implementation of Articles 17, 18, 19 and 20 of Framework Decision 2008/977/JHA. Those Articles shall therefore apply.‘

    • Directive 2013/40/EU of the European Parliament and of the Council of 12 August 2013 on attacks against information systems and replacing Council Framework Decision 2005/222/JHA

      Preamble
      (30) The protection of personal data is a fundamental right in accordance with Article 16(1) TFEU and Article 8 of the Charter on Fundamental Rights of the European Union. Therefore, any processing of personal data in the context of the implementation of this Directive should fully comply with the relevant Union law on data protection

      Article 5 - Illegal data interference
      ‘Member States shall take the necessary measures to ensure that deleting, damaging, deteriorating, altering or suppressing computer data on an information system, or rendering such data inaccessible, intentionally and without right, is punishable as a criminal offence, at least for cases which are not minor.‘

      Article 6 - Illegal interception
      ‘Member States shall take the necessary measures to ensure that intercepting, by technical means, non-public transmissions of computer data to, from or within an information system, including electromagnetic emissions from an information system carrying such computer data, intentionally and without right, is punishable as a criminal offence, at least for cases which are not minor.‘

    • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General...

      Article 1 - Subject-matter and objectives
      ‘1. This Regulation lays down rules relating to the protection of natural persons with regard to the processing of personal data and rules relating to the free movement of personal data.
      2. This Regulation protects fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data.
      3. The free movement of personal data within the Union shall be neither restricted nor prohibited for reasons connected with the protection of natural persons with regard to the processing of personal data.‘

    • Regulation (EU) 2016/794 of the European Parliament and of the Council of 11 May 2016 on the European Union Agency for Law Enforcement Cooperation (Europol) and replacing and repealing Council Decisions 2009/371/JHA, 2009/934/JHA, 2009/935/JHA, 2009/93...

      Article 28 - General data protection principles
      ‘1. Personal data shall be:
      (a) processed fairly and lawfully;
      (b) collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes. Further processing of personal data for historical, statistical or scientific research purposes shall not be considered incompatible provided that Europol provides appropriate safeguards, in particular to ensure that data are not processed for any other purposes;
      (c) adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;
      (d) accurate and kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
      (e) kept in a form which permits identification of data subjects for no longer than necessary for the purposes for which the personal data are processed; and
      (f) processed in a manner that ensures appropriate security of personal data.‘
      Article 31 - Time-limits for the storage and erasure of personal data
      ‘1. Personal data processed by Europol shall be stored by Europol only for as long as is necessary and proportionate for the purposes for which the data are processed.‘
      Article 36 - Right of access for the data subject
      ‘1. Any data subject shall have the right, at reasonable intervals, to obtain information on whether personal data relating to him or her are processed by Europol.‘

    0 results found