Slide 1

Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 1 Re-use and Privacy/Data Protection Ccile de TERWANGNE Professor at the Law Faculty CRID - University of Namur Slide 2 Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 2 Privacy/Data Protection Aim of Data Protection Legislation: informational self-determination = control over ones personal information Right to informational self-determination is derived from but not assimilated to right to privacy: - art. 8 ECHR - art. 7 and 8 European Charter Fund. R. Slide 3 Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 3 Privacy/Data Protection Data protection legislation is not a prohibition legislation Slide 4 Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 4 When does data protection apply? Which data? Personal data = any information related to a natural person not necessarily confidential data even professional data commercial data published data When data is processed by automatic means or is part of a filing system Slide 5 Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 5 Examples possibly concerned by re-use: Commercial registers Vehicles registration Case law data bases Institutional web sites presenting members, agenda, etc. Socio-economic data Land register European Patent Office Slide 6 Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 6 Art. 1, 4, PSI directive 2003/98 This Directive leaves intact and in no way affects the level of protection of individuals with regard to the processing of personal data under the provisions of Community and national law, and in particular does not alter the obligations and rights set out in Directive 95/46/EC. respect data prot. rules when re-using PSI Relations re-use & data protection Slide 7 Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 7 Data Protection Principles Data protection principles having particuliar impact on PSI re-use: Purpose principle Proportionality principle Slide 8 Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 8 Data Protection Principles Purpose principle: Data processed for specified, explicit and legitimate purposes And data not processed in a way incompatible with the purposes of collection (compatible = within data subjects reasonable expectations) Slide 9 Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 9 Data Protection Principles Further processing of data for historical, statistical or scientific purposes not considered as incompatible appropriate safeguards in each Member State Slide 10 Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 10 Data Protection Principles Proportionality principle Grounds to legitimate data processing (re- use): Data subjects consent (ex.: planning permissions) Interest of re-use overriding data subjects rights and interests (ex.: re-use of data from official websites in the newspaper of a non- profit-making association) Slide 11 Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 11 Data Protection Principles Only relevant data in relation with the purposes of processing (re-use) Slide 12 Prof. Ccile de Terwangne - LAPSI Workshop 7-8 October 2010 12 Data Protection Principles In conclusion : Re-use of personal data OK if -It is not incompatible (with the original aim) -It is not disproportionate Or you have informed data subjects and have their freely given consent