Data Protection Directive 95/46/EC

Data Protection Directive 95/46/EC was a European Union directive adopted on October 24, 1995, with the aim of protecting the fundamental rights of European citizens, in particular the right to privacy, as enshrined in the European Convention on Human Rights and the Treaty on European Union. The directive was influenced by the Council of Europe's Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data and the OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data. It played a crucial role in shaping the data protection landscape in the European Economic Area, including Iceland, Liechtenstein, and Norway, as well as Switzerland.

● Introduction

The Data Protection Directive 95/46/EC was a landmark legislation that harmonized the data protection laws across the European Union, ensuring a high level of protection for personal data and facilitating the free flow of data between EU member states, such as Germany, France, and the United Kingdom. The directive was also influenced by the work of the European Data Protection Supervisor, Peter Hustinx, and the Article 29 Data Protection Working Party, which included representatives from national data protection authorities, such as the UK Information Commissioner's Office and the French National Commission on Informatics and Liberty. The directive's provisions were also informed by the European Court of Human Rights' judgments, including the Marper v. the United Kingdom case, and the European Court of Justice's rulings, such as the Bodil Lindqvist case.

● Background and Purpose

The Data Protection Directive 95/46/EC was adopted in response to the growing concern about the protection of personal data in the European Union, particularly in the context of the Single European Act and the Maastricht Treaty. The directive's purpose was to ensure that personal data was protected from unauthorized processing, disclosure, or access, and to provide individuals with control over their personal data, as recognized by the European Court of Human Rights in the S and Marper v. the United Kingdom case. The directive was also influenced by the work of the OECD, the Council of Europe, and the United Nations, which had developed guidelines and conventions on data protection, such as the UN Guidelines for the Regulation of Computerized Personal Data Files. The directive's provisions were also shaped by the European Commission's Data Protection Directive Proposal, which was presented by Commissioner Martin Bangemann.

● Key Provisions

The Data Protection Directive 95/46/EC established several key principles for the protection of personal data, including the principles of fairness, lawfulness, and transparency, as well as the requirement for informed consent and the right to access and rectification of personal data. The directive also introduced the concept of data protection by design and by default, which was later developed by the European Data Protection Board, established by the General Data Protection Regulation. The directive's provisions were also influenced by the Directive 2002/58/EC on privacy and electronic communications, which was amended by the Directive 2009/136/EC, and the Regulation (EC) No 45/2001 on the protection of individuals with regard to the processing of personal data by the European Union institutions. The directive's principles were also reflected in the OECD Privacy Guidelines and the APEC Privacy Framework.

● Implementation and Impact

The Data Protection Directive 95/46/EC was implemented by the EU member states through the adoption of national data protection laws, such as the UK Data Protection Act 1998 and the German Federal Data Protection Act. The directive had a significant impact on the development of data protection laws and practices in the European Union, influencing the work of national data protection authorities, such as the French National Commission on Informatics and Liberty and the Italian Data Protection Authority. The directive's provisions were also applied by the European Court of Justice in several landmark cases, including the Google Spain SL v. Agencia Española de Protección de Datos case, which established the right to be forgotten. The directive's impact was also felt beyond the European Union, influencing the development of data protection laws in countries such as Argentina, Australia, and Canada.

● Repeal and Succession

The Data Protection Directive 95/46/EC was repealed on May 25, 2018, by the General Data Protection Regulation, which introduced new and enhanced provisions for the protection of personal data in the European Union. The General Data Protection Regulation was influenced by the work of the European Data Protection Board, established by the Regulation (EU) 2016/679, and the Article 29 Data Protection Working Party, which included representatives from national data protection authorities, such as the UK Information Commissioner's Office and the French National Commission on Informatics and Liberty. The General Data Protection Regulation also built on the principles established by the Data Protection Directive 95/46/EC, including the principles of fairness, lawfulness, and transparency, and introduced new provisions, such as the right to data portability and the right to object to automated decision-making.

● Enforcement and Jurisprudence

The Data Protection Directive 95/46/EC was enforced by the national data protection authorities and the European Commission, which monitored the implementation of the directive and took action against EU member states that failed to comply with its provisions. The directive's provisions were also interpreted by the European Court of Justice, which developed a significant body of case law on data protection, including the Bodil Lindqvist case and the Google Spain SL v. Agencia Española de Protección de Datos case. The directive's enforcement was also influenced by the work of the Article 29 Data Protection Working Party, which provided guidance on the interpretation and application of the directive's provisions, and the European Data Protection Supervisor, who monitored the processing of personal data by the European Union institutions. The directive's jurisprudence was also shaped by the European Court of Human Rights' judgments, including the S and Marper v. the United Kingdom case, which recognized the importance of protecting personal data as a fundamental right. Category:European Union law