 |
|
|
|
Data Protection — European Commission
Commission decisions on the adequacy of the protection of personal data in third countries
Overview
The Council and the European Parliament have given the Commission the power to determine, on the basis of Article 25(6) of directive 95/46/EC whether a third country ensures an adequate level of protection by reason of its domestic law or of the international commitments it has entered into. The adoption of a (comitology) Commission decision based on Article 25.6 of the Directive involves:
- A proposal from the Commission,
- an opinion of the group of the national data protection commissioners (Article 29 working party)
- An opinion of the Article 31 Management committee delivered by a qualified majority of Member States.
- A thirty-day right of scrutiny for the European Parliament, to check if the Commission has used its executing powers correctly. The EP may, if it considers it appropriate, issue a recommendation.
- The adoption of the decision by the College of Commissioners.
The effect of such a decision is that personal data can flow from the 27 EU member states and three EEA member countries (Norway, Liechtenstein and Iceland) to that third country without any further safeguard being necessary. The Commission has so far recognized Switzerland, Canada, Argentina, Guernsey, Isle of Man, the US Department of Commerce's Safe harbor Privacy Principles, and the transfer of Air Passenger Name Record to the United States' Bureau of Customs and Border Protection as providing adequate protection.
Third countries
AR - Argentina
AU - Australia
- Council Decision 2008/651/CFSP/JHA of 30 June 2008 on the signing, on behalf of the European Union, of an Agreement between the European Union and Australia on the processing and transfer of European Union-sourced passenger name record (PNR) data by air carriers to the Australian Customs Service; OJ L213 of 08/08/2008, p.47-48
   
Html version
- AGREEMENT between the European Union and Australia on the processing and transfer of European Union sourced passenger name record (PNR) data by air carriers to the Australian customs service; OJ L213 of 08/08/2008, p.49-57
Html version
CA - Canada
- COMMISSION STAFF WORKING DOCUMENT: The application of Commission Decision 2002/2/EC of 20 December 2001 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documentation Act
- COUNCIL DECISION of 18 July 2005 on the conclusion of an Agreement between the European Community and the Government of Canada on the processing of API/PNR data
               
- COMMISSION DECISION of 6 September 2005 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the Canada Border Services Agency
- Opinion 1/2005 on the level of protection ensured in Canada for the transmission of Passenger Name Record and Advance Passenger Information from airlines (19.1.2005)
- Opinion 3/2004 on the level of protection ensured in Canada for the transmission of Passenger Name Records and Advanced Passenger Information from airlines (11.2.2004)
- Frequently Asked Questions on the Commission's adequacy finding on the Canadian Personal Information Protection and Electronic Documents Act (March 2002)
- Commission Decision 2002/2/EC of 20.12.2001 on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documents Act - O.J. L 2/13 of 4.1.2002
- Opinion 2/2001 of the Art. 29 Data Protection Working Party
CH - Switzerland
- Report on the application of Commission Decision 2000/518/EC of 26 July 2000 pursuant to Directive 95/46/EC
- Commission Decision 2000/518/EC of 26.7.2000 - O. J. L 215/1 of 25.8.2000
- Opinion 5/99 of the Art. 29 Data Protection Working Party
US - United States - Transfer of Air Passenger Name Record (PNR) Data
- Council Decision 2007/551/CFSP/JHA of 23 July 2007 on the signing, on behalf of the European Union, of an Agreement between the European Union and the United States of America on the processing and transfer of Passenger Name Record (PNR) data by air carriers to the United States Department of Homeland Security (DHS) (2007 PNR Agreement)
- Agreement between the European Union and the United States of America on the processing and transfer of Passenger Name Record (PNR) data by air carriers to the United States Department of Homeland Security (DHS) (2007 PNR Agreement)
Signed in Brussels, 23 July 2007 and in Washington, 26 July 2007
- Agreement between the European Union and the United States of America on the processing and transfer of passenger name record (PNR) data by air carriers to the United States Department of Homeland Security
Signed in Washington on 19.10.2006
- Letter from the 'US Department of Homeland Security' (PNR interpretations)
- Reply by the Council Presidency and the Commission to the letter from the USA's Department of Homeland Security
- Council decision 2006/729/CFSP/JHA
- Commission Staff Working Paper on the Joint Review of the implementation by the U.S. Bureau of Customs and Border Protection of the Undertakings set out in Commission Decision 2004/535/EC of 14 May 2004 (Redacted version - 2005)
- European Court of Justice judgment on Passenger Name Records: The court annuls the council decision concerning the conclusion of an agreement between the European Community and the United States of America on the processing and transfer of personal data and the Commission decision on the adequate protection of those data
- Opinion 8/2004 on the information for passengers concerning the transfer of PNR data on flights between the European Union and the United States of America (30.9.2004)
- Agreement between the European Community and the United States of America on the processing and transfer of PNR data by air carriers to the United States Department of Homeland Security, Bureau of Customs and Border Protection
Signed in Washington on 28.5.2004
- Council Decision of 17 May 2004 on the conclusion of an Agreement between the European Community and the United States of America on the processing and transfer of PNR data by Air Carriers to the United States Department of Homeland Security, Bureau of Customs and Border Protection (2004/496/EC)
- Commission Decision of 14 May on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the United States' Bureau of Customs and Border Protection
- Commission secures guarantees for protecting personal data of transatlantic air passengers (17.5.2004)
- Opinion 2/2004 on the Adequate Protection of Personal Data Contained in the PNR of Air Passengers to Be Transferred to the United States' Bureau of Customs and Border Protection (US CBP) (2.2.2004)
- Letter from Commissioner Bolkestein to US Secretary Tom Ridge, Department of Homeland Security, 18.12.2003
- Communication from the Commission to the Council and the Parliament of 16.12.2003
- Speech by Commissioner Bolkestein of 16.12.2003
US - United States - Safe Harbor
Guernsey
Isle of Man
- Commission Decision 2004/411/EC of 28.4.2004 on the adequate protection of personal data in the Isle of Man
See page 48
Other linguistic versions: see Official Journal L151
Jersey
Press releases
|
|
|
 |
