European Data Protection Supervisor

From Wikipedia, the free encyclopedia


Location:	Brussels, Belgium
Established:	January 2004
Legal basis:	Article 286, Treaty establishing the European Communities Regulation 45/2001 of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data. Directive 95/46/EC of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data
Supervisor:	Peter Hustinx
Assistant Supervisor:	Joaquín Bayo Delgado
Website:	www.edps.europa.eu

The European Data Protection Supervisor was set up under Article 286 of the Treaty establishing the European Communities within the context of harmonising data protection legislation in the European Union. While Directive 95/46/EC addresses personal data processing in the member states, Regulation 45/2001 covers the European institutions and bodies.

Peter Hustinx is the current EDPS and Joaquín Bayo Delgado is the Assistant Supervisor. They took office in January 2004 for a five year term. They are supported by a secretariat consisting of about 30 staff.

The EDPS' mandate is to ensure that the data protection standards set out in Regulation 45/2001 are upheld. The Regulation requires all institutions and bodies to appoint an internal Data Protection Officer(DPO). The DPO is responsible for maintaining a register of all processing operations which involve personal data. If an operation is risky, e.g. because it relates to health, evaluations or suspected offences, the DPO must notify it to the EDPS. The EDPS then carries out a prior check on the processing operation. In a prior check opinion, the EDPS assesses whether the operation complies with the Regulation and he may propose recommendations to ensure better compliance.

People whose personal data are processed by a European institution or body can also lodge a complaint with the relevant DPO if they feel their data protection rights have not been respected. Alternatively, they can lodge their complaint directly with the EDPS.

Apart from this supervisory role, the EDPS advises the European Commission, the European Parliament and the Council on proposals for new legislation and a wide range of other issues with a data protection impact. The purpose of this consultative role is to analyse how policies affect the privacy rights of the citizens in the EU. The EDPS has issued several opinions on legislative proposals, in particular in the field of exchanging and processing personal data for law enforcement purposes (within the EU's so-called "third pillar"). Some recent examples are the opinions on data protection in the third pillar and on the initiative to integrate the Prüm Convention into the EU's legal framework.

In addition, the EDPS can intervene in cases before the European Court of Justice with an impact on data protection. For example, in 2004, the EDPS intervened in two cases concerning an agreement between the EU and the US on the transmission of passenger name records to the United States (the so-called PNR case).

The EDPS also publishes papers on different aspects of data protection relevant to his work.

Finally, the EDPS assumes a cooperative role in working closely with other data protection authorities. The purpose of this is to promote consistent data protection throughout Europe. For an increasing number of European databases, supervision is shared between different data protection authorities (such as the Eurodac database). The central platform for cooperation with national supervisory authorities is the Article 29 Working Party.