Privacy & Data Protection Laws – Overview and History Introduction to Privacy and the GDPR Simone Fischer-Hübner CC-BY-4.0
Privacy Legislation - History 1950 Art. 8 ECHR: “ Everyone has the right to respect for his private and family life, his home and his correspondence.” 1970 First data protection act: ”Hessisches Datenschutzgesetz” 1973 Swedish Data Act 1980 OECD Guidelines governing the Protection of Privacy and Transborder Flows of Personal Data (updated in 2013) The Council of Europe's Convention for the Protection of 1981 Individuals 1995 EU Data Protection Directive 95/46/EC 1998 Revised Swedish Data Act (PUL - Personuppgiftslagen) Safe Harbor Principles (Sept. 2015: declared as invalid by 2000 European Court of Justice) – replaced by the Privacy Shield in June 2016
Privacy Legislation – History (II) EU Charter of the Fundamental Rights recognises Privacy (Art. 2000 7) & Data Protection (Art. 8) 2002 EU ePrivacy Directive 2002/58/EC (amended in 2009 – ”Cookie Directive” 2009/136 ) 2006 EU Data Retention Directive 2006/24/EC (April 2014: declared as invalid by European Court of Justice) since 2012 Reform of EU Data Protection Legislation – Draft EU General Data Protection Regulation (GDPR) & EU Police Data Protection Directive April 2016 GDPR & Police Data Protection Directive 2016/680 were adopted. GDPR will apply from 25 May 2018 • Directive 2016/680 enters into force 5 May 2016 • January Draft ePrivacy Regulation adopted 2017
Sw edish Sectoral Data Protection law s (lex specialis) - Examples • Patient Data Act (2008:355) ( Patientdatalagen ) and the Pharmacy Data Act (2009:367) ( Apoteksdatalag ) • Credit Information Act (1973:1173 ) ( Kreditupplysningslagen ) and the Debt Recovery Act (1974:182) ( Inkassolagen ) • Camera Surveillance Act (2013:460) ( Kameraövervakningslagen ) -- A Revison will enter into force in May 2018. Note: All sectoral data protection laws are currently under revisions for achieving compliance with the GDPR.
Recommend
More recommend
