Reforming Telecom Data Protection

7/31/2019 Reforming Telecom Data Protection

http://slidepdf.com/reader/full/reforming-telecom-data-protection 1/11

Study on Reforming the DataProtection Package

Brussels 28 June 2012

Prof. Dr. Hans Schulte-Nölke

European Legal Studies Institute Osnabrück



Prof. Dr. Hans Schulte-Nölke, European Legal Studies Institute Osnabrück

Mission• Mapping new technologies and services with impact

on data protection regulation

• Internal market dimension of data protection• Rights of consumers in the area of data protection

and enforcement of data protection rules

• International data transfers, in particular cloud

computing




Authors• Xawery Konarski (Advocate Partner, Traple Konarski Podrecki and

Partners , Cracow) – involved in many legislative works on data protection, e-commerce and telecommunication acts – lecturer at many Polish and international congresses, conferences and seminars on IT law and data

protection

– author (or co-author) of numerous publications in the field of data protection, e-commerce, intellectualproperty and telecommunications laws, including "Internet and law in practice " (2002), "Commentary on e-commerce law " (2004), "Data Protection Law. Current Problems and New Challenges " (2007)and "Direct Marketing Law " (2009)

– arbiter with the Polish Arbitration Court for domain names disputes

• Prof. Dr. Hans Schulte-Nölke (Director European Legal Studies

Institute, Osnabrück) – involved in legislative works on data protection and e-commerce – author (or co-author) of numerous publications in the field of e-commerce law including data protection – member of the European Commission Expert Group on a Common European Sales Law

• Colleagues and members of staff of both participating institutions




New technologies and services with impact

on data protection

• Geo-location services

• Face recognition

• Profiling, in particular unifying data protection

policies for different services in order to compile

overarching profiles for each user




Challenges for data protection legislation

• Concept of “personal data”

• Anonymisation and pseudonymisation ofdata

• Purpose limitation principle• Profiling




Internal market dimension

• Extra-territorial application

• EU-wide level playing field• One-stop-shop for enforcement

• Accountability instead of notification




Rights of consumers and enforcement

• Right to be forgotten and to erasure

• Right to data portability

• Rights against “profiling”, in particular theexclusion for children

• Duty of controllers not established in the Union todesignate representatives

• Joined operations of supervisory authorities




International data transfers - cloud computing

General aim:

• EU based data controllers using cloud computing services

should not be relieved from data protection duties

• Cloud providers outside of the EU should be encouraged

to protect data adequate to the EU-level




Tools

• Decisions on the adequacy of data

protection legal systems of non-EUcountries

• Model Contractual Clauses• Binding Corporate Rules




Proposals for improvement

• Model Contractual Clauses: processor-to-sub-

processors model clauses

• Binding Corporate Rules: lessen the burden,

especially for the benefit of SMEs

• Accreditation systems for non-EU cloud providers whovoluntarily agree to adhere to EU data protection

requirements




Prof. Dr. Hans Schulte-Nölke

European Legal Studies Institute Osnabrück

[email protected]

Reforming Telecom Data Protection

Documents

Transcript of Reforming Telecom Data Protection