European Data Protection Supervisor - AbsoluteAstronomy.com


Location:	Brussels Brussels Brussels , officially the Brussels Region or Brussels-Capital Region , is the capital of Belgium and the de facto capital of the European Union... , Belgium Belgium Belgium , officially the Kingdom of Belgium, is a federal state in Western Europe. It is a founding member of the European Union and hosts the EU's headquarters, and those of several other major international organisations such as NATO.Belgium is also a member of, or affiliated to, many...
Established:	January 2004
Legal basis:	Article 286, Treaty establishing the European Communities Regulation (EC) 45/2001 of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data. Directive 95/46/EC of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data
Supervisor:	Peter Hustinx
Assistant Supervisor:	Giovanni Buttarelli
Website:	www.edps.europa.eu

The European Data Protection Supervisor (EDPS) is an independent supervisory authority whose primary objective is to ensure that European institutions and bodies respect the right to privacy and data protection when they process personal data and develop new policies.

Peter Hustinx and Giovanni Buttarelli have been appointed European Data Protection Supervisor (EDPS) and Assistant Supervisor respectively by a joint decision of the European Parliament and the Council. Assigned for a five-year term, they took office in January 2009.

The duties and powers of the EDPS and the Assistant Supervisor, as well as the institutional independence of the supervisory authority, are set out in the "Data Protection Regulation" (Regulation (EC) No 45/2001, OJ L 8, 12.1.2001 ).

In practice the EDPS' activities can be divided into three main roles: supervision, consultation and cooperation.
Supervision
In the "supervisory" role the EDPS' core task is to monitor the processing of personal data in European institutions and bodies. The EDPS does so in cooperation with the data protection officers (DPO) present in each European institution and body. The DPO has to notify the EDPS about any processing operations involving sensitive personal data or likely to pose other specific risks. The EDPS then analyses this processing in relation to the Data Protection Regulation and issues a "prior check" opinion. In most cases, this exercise leads to a set of recommendations that the institution or body needs to implement so as to ensure compliance with data protection rules.

In 2009 for instance the EDPS adopted more than 100 prior check opinions, mainly covering issues such as health data, staff evaluation, recruitment, time management, telephone recording performance tools and security investigations. These opinions are published on the
EDPS website and their implementation is followed up systematically.

The implementation of the Data Protection Regulation in the EU administration is also closely monitored by regular stock taking of performance indicators, involving all EU institutions and bodies. In addition to this general monitoring exercise, the EDPS also carries out on-site inspections to measure compliance in practice.

The supervisory role of the EDPS also involves investigating complaints lodged by EU staff members or any other individual who feels that their personal data have been mishandled by a European institution or body. Examples of complaints include alleged violations of confidentiality, access to data, right of rectification, erasure of data, and excessive collection or illegal use of data by the controller.

The EDPS has also developed other forms of supervision, such as advice on administrative measures and the drafting of
thematic guidelines.
Consultation
In the "consultative" role the EDPS advises the European Commission

European Commission

The European Commission is the executive body of the European Union. The body is responsible for proposing legislation, implementing decisions, upholding the Union's treaties and the general day-to-day running of the Union....

, the European Parliament

European Parliament

The European Parliament is the directly elected parliamentary institution of the European Union . Together with the Council of the European Union and the Commission, it exercises the legislative function of the EU and it has been described as one of the most powerful legislatures in the world...

and the Council of the European Union

Council of the European Union

The Council of the European Union is the institution in the legislature of the European Union representing the executives of member states, the other legislative body being the European Parliament. The Council is composed of twenty-seven national ministers...

on data protection issues in a range of policy areas. This consultative role relates to proposals for new legislation as well as other initiatives that may affect personal data protection in the EU. It usually results in a formal opinion, but the EDPS may also provide guidance in the form of comments or policy papers. Technological developments having an impact on data protection are also monitored as part of this activity.

Some recent significant issues to which the EDPS gave special attention include the "TFTP-SWIFT" agreement on access to financial information, the revision of the e-Privacy Directive on electronic communications

Directive on Privacy and Electronic Communications

Directive 2002/58 on Privacy and Electronic Communications, otherwise known as E-Privacy Directive, is an EU directive on data protection and privacy in the digital age. It presents a continuation of earlier efforts, most directly the Data Protection Directive...

, the developments concerning the Stockholm Programme

Stockholm Programme

The Stockholm Programme is a five-year plan with guidelines for justice and home affairs of the member states of the European Union for the years 2010 through 2015.- Contents :...

on Justice and Home Affairs policies, the review of the Eurodac and Dublin Regulations on asylum policy, and public access to documents.

The EDPS is also following closely the ongoing review of the legal framework for data protection aimed at modernising the
Data Protection Directive (95/46/EC) in response to new globalisation and technological challenges. Realising this critical objective will be the dominant item on the EDPS' agenda over the coming years.

As part of his consultative role, the EDPS also intervenes in cases before the European Court of Justice

European Court of Justice

The Court can sit in plenary session, as a Grand Chamber of 13 judges, or in chambers of three or five judges. Plenary sitting are now very rare, and the court mostly sits in chambers of three or five judges...

that are relevant to his tasks. In June 2009 for instance, he intervened in a case concerning the relationship between transparency and data protection
(the so-called "Bavarian Lager" case).
Cooperation
The EDPS cooperates with other data protection authorities in order to promote a consistent approach to data protection throughout Europe.

The main platform for cooperation between data protection authorities in Europe is the Article 29 Data Protection Working Party. The EDPS takes part in the activities of the Working Party, which plays an important role in the uniform application of the Data Protection Directive. The EDPS and the Working Party have cooperated effectively on a range of subjects, but particularly on the implementation of the Data Protection Directive and on the challenges raised by new technologies. The EDPS also strongly supported initiatives taken to ensure that international data flows respect European data protection principles

One of the most important cooperative tasks of the EDPS involves Eurodac
Eurodac
EURODAC, which stands for European Dactyloscopy, is the European fingerprint database for identifying asylum seekers and irregular border-crossers. Asylum applicants and irregular border-crossers over the age of 14 have their fingerprints taken as a matter of European Community law...

where the responsibilities for supervision are shared with national data protection authorities.

The EDPS cooperates with data protection authorities in the former “third pillar” – the area of police and judicial cooperation – and with the Working Party on Police and Justice.

Cooperation also takes place through participation in two major annual data protection conferences: a European Conference that gathers data protection authorities from the EU Member States and the Council of Europe, and an International conference attended by a wide range of data protection experts, both from the public and private sectors.

Legal texts

EDPS materials

Other relevant materials

The source of this article is wikipedia, the free encyclopedia. The text of this article is licensed under the GFDL.