May 13, 2021

Volume XI, Number 133

Advertisement

May 13, 2021

Subscribe to Latest Legal News and Analysis

May 12, 2021

Subscribe to Latest Legal News and Analysis

May 11, 2021

Subscribe to Latest Legal News and Analysis

The EU General Data Protection Regulation – Council is Moving Forward in Great Strides

The Council, which represents the 28 EU Member States, reached a partial general approach on the so-called “one stop shop” mechanism (Chapters VI and VII) and principles for protecting the personal data (Chapter II).

Three years ago, in January 2012, the European Commission proposed a reform of the EU’s data protection rules to make them fit for the 21st Century. The Commission pursued a two-fold aim, to strengthen privacy rights and boost Europe’s digital economy. The “one stop shop” mechanism was promoted as one of the major benefits for companies: essentially, under the Commission proposal companies would only have to deal with one single supervisory authority, not 28. The Council has now watered down the Commission’s ambitious proposal to important cross-border cases and replaced it with cooperation and joint-decision making between several data protection authorities concerned. Moreover, the proposed text by Council foresees that the jointly agreed decision will be taken by the data protection authority best placed to deliver the most effective protection from the perspective of the data subject, instead of the authority at the controller’s or processor’s main establishment, as the Commission had initially envisaged. In practice, this could mean that a controller or processor potentially still may have to deal with 28 different data protection authorities.

The JHA reportedly also endorsed a set of general principles of data processing, with a particular emphasis on processing of special categories of personal data. The text also includes measures for processing on the basis of consent as well as further processing for secondary purposes.

The Latvian Presidency is working hard to come to a general approach in June so as to allow the trilogues between Council, the European Parliament and the European Commission to start before the European Parliament’s summer break. Until then, Council still needs to find partial general approaches on a number of open issues, such as sanctions and the Right To Be Forgotten (RTBF).

Advertisement
© 2021 Covington & Burling LLPNational Law Review, Volume V, Number 92
Advertisement
Advertisement

TRENDING LEGAL ANALYSIS

Advertisement
Advertisement

About this Author

Repeatedly ranked as having one of the best privacy practices in the world, Covington combines exceptional substantive expertise with an unrivaled understanding of the IT industry, and of e-commerce and digital media business models in particular.  Our practice provides exceptional coverage of all of the substantive areas of privacy, including IT/technology, data security, financial privacy, health privacy, employment privacy, litigation and transactions.  One of our core strengths is the ability to advise clients on relevant privacy and data security rules worldwide,...

202-662-6000
Advertisement
Advertisement