40 likes | 158 Vues
On January 28, 2011, key stakeholders, including the Council of Europe and the European Commission, convened a Joint High-Level Meeting in Brussels to address the evolution of data protection standards from European to international frameworks. The ICC Data Protection Task Force emphasized the importance of harmonizing regulations to facilitate global data flows while balancing individual privacy rights. Discussions focused on potential legally binding instruments, the need for transparency, and the importance of adapting to rapid technological changes. The gathering aimed to strengthen cooperation in achieving effective data protection practices worldwide.
E N D
Data Protection Day 2011 JOINT HIGH LEVEL MEETING THE COUNCIL OF EUROPE & THE EUROPEAN COMMISSION Domenico Romanazzi Brussels, January 28, 2011
From European to international standards on data protection (1/2) • ICC • ICC Data Protection Task Force has been working for more than 20 years to improve the international legal framework for data protection: • 1990s to present: participation as sole business organization as an observer in the Council of Europe T-PD group • 1992: Joint adoption (by ICC, CoE, and European Commission) of standard contractual clauses for international data transfers • 2002-present: Participation by ICC in drafting of APEC Privacy Working Group • 2004 and 2010: Adoption by European Commission of standard contractual clauses for data processors originally proposed by ICC • Rationale for International Standards on Data Protection • Bridging divergences in data protection • Facilitation of global data flows 2010 DB Blue template
From European to international standards on data protection (2/2) Various Options • Legally binding instrument or framework / model law • Convention • Guideline • Potential timeline • Current Environment • Substantial differences in data protection culture • Evolving regional treaties • Rapid technological development • The Bottom Line • Greater harmonisation would not only help business, but also individuals • A binding solution is hard to achieve, while a non-binding approach would not resolve the issues • Boost harmonisation on regional level, and intensify dialogue between regional data protection systems and associated steps of convergence • ICC is looking forward to working with the Commission and other related authorities to transfer effective data protection into corporate practice 2010 DB Blue template
Significant Issues concerning Harmonisation • Transparency • Avoid information overload via balanced and concise information / notices • Security breach notification aligned with underlying peril / risk for data subject • Clear and unified criteria for informed and free consent by data subject • Enhancing Internal Market Dimension • Stengthen harmonisation and clarity of implementation of the EU Data Protection Directive • Reduce administrative burdens where these do not contribute to effective data protection, e.g. • Registration / notification requirements for personal data processing and • Prior notification / approval requirements of third country data transfers • Avoid contradiction with sectoral requirements (e.g.anti money-laundering) • Global Dimension of Data Protection • Current set of rules for international data transfers does not allow for a reasonable handling of data within a corporate group • Consider that today’s information flows are global and less defined by point to point communication • Consider technological trends, so that regulations apply to new technologies as well 2010 DB Blue template