European Commission's Proposed Change to the EU Data Protection Laws: Detailed Analysis



In advance of formal publication, the European Commission sent the proposed Data Protection Framework for the EU for inter-service consultation with the Directorates-General, which consists of a Data Protection Regulation and a new Police and Criminal Justice Data Protection Directive. Following this period of consultation, the European Commission's final draft will be submitted to the European Parliament, with the timing estimated during the latter part of January 2012. These documents were first leaked to the press, and highlighted in our recent blog. Originals can be obtained at Statewatch.


The European Commission has sought to fulfil its long-stated ambitions of harmonising the data protection regime across Europe, and of enhancing individual's rights. While one of the stated objectives is also "cutting red tape for businesses", it is difficult to see how this objective has been met in the draft documents, given the increased burdens on industry. Another stated objective of the Commission was to give individuals more control over their data, to address issues related to children's use of the Internet. The Commission will seek to have European Parliamentary approval of the Framework by the end of 2012, which, if met, means a new Data Protection Framework may be in force sometime in 2013.


If there was ever any doubt as to whether European data protection law applied outside the EU, then this draft regulation should remove it. Article 2 explicitly extends the scope of the regulation to any controller, established inside or outside of the EU, who processes personal data of EU citizens. Where an organisation is outside the EU, it must appoint an EU representative.

More surprising is that the Regulation will apply to individual persons who make the "personal data of other natural persons [sic] accessible to an indefinite number of individuals"; in other words, the regulation applies to individuals who post others' personal data on the Internet.

Please see full Alert below for further information.

LOADING PDF: If there are any problems, click here to download the file.

Written by:


Reed Smith on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.