The Proposed European Privacy Directive and What It Means for Internet Privacy

A Presentation From Françoise Le Bail, Director General for Justice in the European Commission

Congressional Internet Caucus Advisory Committee
March 19, 2012

This Congressional Privacy Briefing will feature Françoise Le Bail, European Commission, Director General for Justice. The European Union recently unveiled a draft European Data Protection Regulation to supersede the Data Protection Directive as a comprehensive reform measure to strengthen online privacy rights. This new measure will address the current law's fragmentation and costly administrative burdens with a single set of rules on data protection valid across the EU. Organizations will only deal with a single national data protection authority in the EU country where they are mainly established. Companies must notify a national supervisory authority of serious data breaches as soon as feasible. A 'right to be forgotten' will enable people to delete their data if there are no legitimate grounds for retaining it. Furthermore, EU rules must apply if personal data is handled abroad by companies that are active in the EU market and offer their services to EU citizens.