Proposals would introduce a single set of rules giving individuals more control over how their personal data is managed and used.
A recent survey on attitudes on data protection in the EU has found that:
To address these concerns, the Commission is proposing to update the EU’s data protection law. The changes would introduce a single set of rules on data protection, valid across the EU.
The proposals include:
Good for business
A single set of rules would encourage a more consistent application of the law across the EU. Businesses would have clear rules on how to treat private information.
And red tape would be cut, saving businesses an estimated €2.3bn a year. For example, companies would only have to deal with a single national data protection authority in the EU country where they have their main operations.
The new rules would give national data protection authorities powers to enforce the EU rules more rigorously.
For crime investigations, a separate law would apply to the exchange of data.
The proposals complement the EU's drive to encourage more online commerce by improving consumer trust – contributing to economic growth and job creation. They must be approved by EU governments and the European Parliament before becoming law.