Tag Archives: Article 29 Working Party

EU and U.S. Formulating a Privacy Framework Agreement

As reported in BNA’s Privacy Law Watch, EU Member States are working on an overarching privacy framework agreement with the United States. The framework agreement, which may be used as a starting point for future negotiations, aims to reduce the amount of time and resources required to prepare new agreements between the European Union and the United States.

Continue reading…

Tags: , , , , , ,

European Commission Publishes Data Protection Law Reform Package

On January 25, 2012, the European Commission published its long-awaited legislative package to reform EU data protection rules. The package includes a regulation that covers data processing in the private sector and by public authorities and a directive covering data processing for criminal justice purposes, as well as a communication, a report on the protection of personal data processed in the framework of police and judicial cooperation, and an impact assessment with a summary.

Continue reading…

Tags: , ,

Article 29 Working Party Rejects Industry Self-Regulatory Code on Online Behavioral Advertising

On December 8, 2011, the Article 29 Working Party (the “Working Party”) adopted an Opinion on the European Advertising Standards Alliance (“EASA”) and IAB Europe best practice recommendations for the online behavioral advertising (“OBA”) industry to comply with Article 5.3 of the revised e-Privacy Directive 2002/58/EC (the “cookie clause”). The cookie clause requires a user’s informed consent for the use of cookies and similar technologies that store and access information in the user’s terminal device. Finding practical ways of complying with the cookie clause has proven challenging for the OBA industry, which relies heavily on these kinds of tracking mechanisms.

Continue reading…

Tags: , , , ,

European Commission Drafts to Reform the EU Data Protection Framework Enter Interservice Consultation

In early December 2011, drafts of two legal instruments prepared by DG Justice of the European Commission to reform the EU data protection framework entered interservice consultation. This process will give other Directorates-General of the Commission the opportunity to comment on the drafts before they are formally released as legislative proposals; accordingly, changes to the drafts are likely. Following this comment period, the drafts will enter the EU legislative process, which is likely to take at least two to three years before they become law. It is believed that Justice Commissioner and Commission Vice-President Viviane Reding will formally announce final versions of the drafts at an appearance at the World Economic Forum in late January 2012.

Continue reading…

Tags: , , , , , , , , , ,

Mexico Hosts 33rd International Conference of Data Protection and Privacy Commissioners

On November 2-3, 2011, Mexico’s Federal Institute for Access to Information and Data Protection (“IFAI”) will host the 33rd International Conference of Data Protection and Privacy Commissioners in Mexico City. Marty Abrams, President of the Centre for Information Policy Leadership at Hunton & Williams LLP, is the chairman of the Conference’s advisory panel and principal advisor to Conference organizers on program content. Hunton & Williams is a proud sponsor of the event which will feature Hunton representatives as speakers or moderators on multiple panels and plenary sessions, including the following:

Continue reading…

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

Article 29 Working Party Meets with Europe’s Online Advertising Industry to Discuss Self-Regulatory Framework

On September 14, 2011, the Article 29 Working Party (the “Working Party”) met with representatives of the European Advertising Standards Alliance (“EASA”) and IAB Europe, to discuss the industry’s new self-regulatory code of conduct for online behavioral advertising (the “Code”), which was released on April 14, 2011. Continue reading…

Tags: , , , , ,

Belgium Simplifies the Authorization Procedure for Binding Corporate Rules

On July 13, 2011, the Belgian Privacy Commission (the “Belgian DPA”) signed a Protocol with the Ministry of Justice which significantly simplifies the authorization procedure for binding corporate rules (“BCRs”) under Belgian law.  The Protocol was just made public on the Belgian DPA’s website.  View the Protocol on BCRs (in both Dutch and French).

Continue reading…

Tags: , , , , , , , ,

ICC Reappoints Christopher Kuner as Chair of Data Protection Task Force

Christopher Kuner, partner in the Brussels office of Hunton & Williams, recently was reappointed to a fourth term as Chair of the International Chamber of Commerce (“ICC”) Task Force on Privacy and the Protection of Personal Data.  Based in Paris and founded in 1919, ICC  represents businesses around the world and has thousands of member companies and national committees in over 130 countries.  Mr. Kuner has been Chair of the Task Force since 2003, and also is a Vice-Chair of ICC’s Commission on E-Business, IT and Telecoms (“EBITT”).  He was reappointed to a further three-year term as Chair by ICC Secretary General Jean-Guy Carrier, who stated that Mr. Kuner’s “expertise and experience have been greatly appreciated and of high value to ICC’s work and the membership of the Commission.” 

Under Mr. Kuner’s chairmanship, the ICC Task Force’s accomplishments have included drafting the standard application form for Binding Corporate Rules that was approved by the Article 29 Working Party in 2007, negotiating the standard contractual clauses for data processors that were approved by the European Commission in 2010, and participating in every meeting of APEC’s Electronic Commerce Steering Group addressing cross-border data flows since the Steering Group began working on that topic.

Tags: , , , , , , , ,

Article 29 Working Party Opines on Consent Requirements

On July 13, 2011, the Article 29 Working Party (the “Working Party”), adopted an Opinion on the concept of consent as a legal basis for processing personal data, which includes recommendations for improving the concept in the context of the ongoing review of the EU data protection framework.  The Opinion also analyzes the conditions for valid consent under EU data protection law (that consent must be “freely given,” “specific,” “unambiguous,” “explicit,” “informed,” etc.), and clarifies the obligations of data controllers seeking consent.  In addition, the Opinion provides examples of valid and invalid consent with respect to company social media, medical research, body scanners, PNR data and online gaming.

Continue reading…

Tags: , , , ,

Use of Facial Recognition Technology Raises Privacy Concerns

Recent developments involving the use of facial recognition technology have raised privacy concerns in the United States, Europe and Canada.  As we reported earlier this month, the Electronic Privacy Information Center (“EPIC”) and several other consumer privacy advocacy groups filed a complaint with the Federal Trade Commission against Facebook for its use of facial recognition technology.  According to EPIC’s complaint, Facebook’s Tag Suggestions feature recognizes individuals’ faces based on photographs already on Facebook, then suggests that users “confirm Facebook’s identification of facial images in user photos” when they upload new photos to their Facebook profiles. Continue reading…

Tags: , , , , , , , ,