{"id":2438,"date":"2010-08-04T17:06:33","date_gmt":"2010-08-04T15:06:33","guid":{"rendered":"http:\/\/www.daten-speicherung.de\/?p=2438"},"modified":"2011-01-16T22:28:03","modified_gmt":"2011-01-16T20:28:03","slug":"enhancing-privacy-proposed-amendments-to-data-protection-directive","status":"publish","type":"post","link":"https:\/\/www.daten-speicherung.de\/index.php\/enhancing-privacy-proposed-amendments-to-data-protection-directive\/","title":{"rendered":"Enhancing privacy &#8211; Proposed amendments to data protection directive"},"content":{"rendered":"<p>The Commission is currently reviewing the data protection <a href=\"http:\/\/eur-lex.europa.eu\/LexUriServ\/LexUriServ.do?uri=CELEX:31995L0046:en:HTML\">directive 95\/46\/EC<\/a>. Here are some ideas on how directive 95\/46 should be amended:<\/p>\n<ul>\n<li><a href=\"http:\/\/eur-lex.europa.eu\/LexUriServ\/LexUriServ.do?uri=CELEX:31995L0046:en:HTML\">Recital 26<\/a> says: &#8222;whereas, to determine <strong>whether a person is  identifiable<\/strong>, account should be taken of all the means likely reasonably  to be used either by the controller or by any other person to identify  the said person&#8220;. This should be made a &#8222;shall&#8220; (not &#8222;should&#8220;) and  should be in the text of the directive (not just a recital).<\/li>\n<li><strong>A right of action for consumer and privacy associations <\/strong>should be  introduced where the right to privacy is violated (Directive 98\/27 on  injunctions for the protection of consumers&#8216; interests should be  extended to mention the data protection directive)<\/li>\n<li><strong>A right of action for competitors <\/strong>should be introduced where the right  to privacy is violated by a business (Directive 2005\/29 concerning  unfair business-to-consumer commercial practices should be extended  accordingly)<\/li>\n<li>A <strong>privacy by design principle <\/strong>should be introduced. The design of  commercial information technology products must default to conformity  with privacy legislation (e.g. web server software)<\/li>\n<li><strong>Manufacturers should be liable <\/strong>where unsafe technology leads to data  protection breaches. Product liability law should cover data breaches  caused by unsafe information technology products (directive 85\/374 on  the liability for defective products should be extended to cover data  safety)<\/li>\n<li>The entity processing the data should be <strong>liable for data protection  breaches <\/strong>regardless of fault, and a fixed minimium compensation payment  for victims of data loss should be established (200 Euros?).<\/li>\n<li><strong>It should be prohibited to disadvantage citizens <\/strong>who choose to  exercise their rights conferred in the directive (exercising them often  leads to the termination of the contract).<\/li>\n<li><strong>A <\/strong><strong>right to use any information society service anonymously <\/strong>should be  introduced.<\/li>\n<li><strong>A right to public information on data breaches <\/strong>should be included in  directive 95\/46.<\/li>\n<li><a href=\"http:\/\/eur-lex.europa.eu\/LexUriServ\/LexUriServ.do?uri=CELEX:31995L0046:en:HTML\">Article 10<\/a> of the directive should be amended so that the <strong>retention  period <\/strong>must be revealed (for how many years will the information retained?).<\/li>\n<li><strong>Consenting clauses <\/strong>concerning personal data must be subject to  judicial review (Directive 93\/13 of 5 April 1993 on unfair terms in  consumer contracts should be extended)<\/li>\n<\/ul>\n<p>Some of these proposals are explained in more detail in a presentation <a href=\"http:\/\/webcast.ec.europa.eu\/eutv\/portal\/jsf\/player\/index_player.html?id=7275&amp;pId=7256&amp;userlocale=en\">(Video)<\/a> and in a document in German <a href=\"http:\/\/ec.europa.eu\/justice\/news\/events\/conference_dp_2009\/presentations_speeches\/BREYER_Patrick.pdf\">(pdf)<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>The Commission is currently reviewing the data protection directive 95\/46\/EC. Here are some ideas on how directive 95\/46 should be amended: Recital 26 says: &#8222;whereas, to determine whether a person is identifiable, account should be taken of all the means likely reasonably to be used either by the controller or by any other person to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[34,36],"class_list":["post-2438","post","type-post","status-publish","format-standard","hentry","category-english","tag-eu","tag-vorschlaege"],"_links":{"self":[{"href":"https:\/\/www.daten-speicherung.de\/index.php\/wp-json\/wp\/v2\/posts\/2438","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.daten-speicherung.de\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.daten-speicherung.de\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.daten-speicherung.de\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.daten-speicherung.de\/index.php\/wp-json\/wp\/v2\/comments?post=2438"}],"version-history":[{"count":4,"href":"https:\/\/www.daten-speicherung.de\/index.php\/wp-json\/wp\/v2\/posts\/2438\/revisions"}],"predecessor-version":[{"id":2441,"href":"https:\/\/www.daten-speicherung.de\/index.php\/wp-json\/wp\/v2\/posts\/2438\/revisions\/2441"}],"wp:attachment":[{"href":"https:\/\/www.daten-speicherung.de\/index.php\/wp-json\/wp\/v2\/media?parent=2438"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.daten-speicherung.de\/index.php\/wp-json\/wp\/v2\/categories?post=2438"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.daten-speicherung.de\/index.php\/wp-json\/wp\/v2\/tags?post=2438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}