Temeljne pravice

Listina EU o temeljnih pravicah državljanom EU zagotavlja pravico do varstva osebnih podatkov.

Protection of personal data

Zakonodaja

S sprejetjem svežnja o varstvu podatkov maja 2016 smo želeli Evropo prilagoditi digitalni dobi. Več kot 90 % Evropejcev si želi enake pravice do varstva podatkov po vsej EU in ne glede na to, kje se njihovi podatki obdelujejo.

Splošna uredba o varstvu podatkov

Uredba (EU) 2016/679 o varstvu posameznikov pri obdelavi osebnih podatkov in o prostem pretoku takih podatkov. Besedilo uredbe vključuje popravek, objavljen v Uradnem listu Evropske unije z dne 23. maja 2018.

Uredba je bistven korak za krepitev temeljnih pravic posameznikov v digitalni dobi in spodbujanje poslovanja s pojasnitvijo pravil za podjetja in javne organe na enotnem digitalnem trgu. En sam akt odpravlja trenutno razdrobljenost v različnih nacionalnih sistemih in nepotrebna upravna bremena.

Uredba je začela veljati 24. maja 2016 in se je začela uporabljati s 25. majem 2018. Več informacij za podjetja in posameznike.

Informacije o vključitvi splošne uredbe o varstvu podatkov v Sporazum EGP.

EU Member States notifications to the European Commission under the GDPR

Study on Data Protection Certification Mechanisms

Direktiva o varstvu podatkov pri preprečevanju, odkrivanju in preiskovanju kaznivih dejanj

Direktiva (EU) 2016/680 o varstvu posameznikov pri obdelavi osebnih podatkov v zvezi s kaznivimi dejanji ali izvrševanjem kazenskih sankcij in o prostem pretoku takih podatkov.

Direktiva varuje temeljno pravico državljanov do varstva podatkov, kadar organi preprečevanja, odkrivanja in preiskovanja kaznivih dejanj osebne podatke uporabljajo za namene kazenskega pregona. Zlasti zagotavlja ustrezno zaščito osebnih podatkov žrtev, prič in oseb, osumljenih kaznivih dejanj, ter bo olajšala čezmejno sodelovanje v boju proti kriminalu in terorizmu.

Direktiva je začela veljati 5. maja 2016. Države EU so jo morale prenesti v nacionalno zakonodajo do 6. maja 2018.

Nacionalni organi za varstvo podatkov

Države EU so ustanovile nacionalne organe, odgovorne za varstvo osebnih podatkov v skladu s členom 8(3) Listine EU o temeljnih pravicah.

Evropski odbor za varstvo podatkov

Evropski odbor za varstvo podatkov je neodvisen evropski organ, ki skrbi za dosledno uporabo pravil o varstvu podatkov po vsej Evropski uniji. Odbor je bil ustanovljen s Splošno uredbo o varstvu podatkov.

Evropski odbor za varstvo podatkov sestavljajo predstavniki nacionalnih organov za varstvo podatkov iz držav EU/EGP in Evropskega nadzornika za varstvo podatkov. Evropska komisija sodeluje pri dejavnostih in sejah odbora, vendar nima glasovalne pravice. Za sekretariat odbora skrbi Evropski nadzornik za varstvo podatkov. Sekretariat opravlja svoje naloge izključno po navodilih predsednika odbora.

Naloge Evropskega odbora za varstvo podatkov vključujejo predvsem zagotavljanje splošnih smernic o ključnih konceptih Splošne uredbe o varstvu podatkov in direktive o preprečevanju, odkrivanju in preiskovanju kaznivih dejanj, svetovanje Evropski komisiji o vprašanjih, povezanih z varstvom osebnih podatkov in novo predlagano zakonodajo v Evropski uniji ter sprejemanje zavezujočih odločitev v sporih med nacionalnimi nadzornimi organi.

Varstvo podatkov v institucijah in organih EU

Zakonodaja

Uredba št. 2018/1725 določa pravila, ki se uporabljajo za obdelavo osebnih podatkov v institucijah, organih, predstavništvih in agencijah Evropske unije. Usklajena je s Splošno uredbo o varstvu podatkov in direktivo o varstvu podatkov pri preprečevanju, odkrivanju in preiskovanju kaznivih dejanj. Veljati je začela 11. decembra 2018.

Evropski nadzornik za varstvo podatkov

Z Uredbo 2018/1725 je bil ustanovljen Evropski nadzornik za varstvo podatkov. Evropski nadzornik za varstvo podatkov je neodvisen organ EU, pristojen za spremljanje uporabe pravil o varstvu podatkov v evropskih institucijah in za obravnavo pritožb.

Uradna oseba za varstvo podatkov Evropske komisije

Evropska komisija je imenovala uradno osebo za varstvo podatkov, ki spremlja uporabo pravil o varstvu podatkov v Evropski komisiji. Uradna oseba za varstvo podatkov neodvisno skrbi za interno uporabo pravil o varstvu podatkov v sodelovanju z evropskim nadzornikom za varstvo podatkov.

Financiranje

Program za pravice, enakost in državljanstvo 2014–2020

Dogodek

The data protection package adopted in May 2016 aims at making Europe fit for the digital age. More than 90% of Europeans say they want the same data protection rights across the EU and regardless of where their data is processed.

The General Data Protection Regulation (GDPR)

Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. This text includes the corrigendum published in the OJEU of 23 May 2018.

The regulation is an essential step to strengthen individuals' fundamental rights in the digital age and facilitate business by clarifying rules for companies and public bodies in the digital single market. A single law will also do away with the current fragmentation in different national systems and unnecessary administrative burdens.

The regulation entered into force on 24 May 2016 and applies since 25 May 2018. More information for companies and individuals.

Information about the incorporation of the General Data Protection Regulation (GDPR) into the EEA Agreement.

EU Member States notifications to the European Commission under the GDPR

The Data Protection Law Enforcement Directive

Directive (EU) 2016/680 on the protection of natural persons regarding processing of personal data connected with criminal offences or the execution of criminal penalties, and on the free movement of such data.

The directive protects citizens' fundamental right to data protection whenever personal data is used by criminal law enforcement authorities for law enforcement purposes. It will in particular ensure that the personal data of victims, witnesses, and suspects of crime are duly protected and will facilitate cross-border cooperation in the fight against crime and terrorism.

The directive entered into force on 5 May 2016 and EU countries had to transpose it into their national law by 6 May 2018.

EU countries have set up national bodies responsible for protecting personal data in accordance with Article 8(3) of the Charter of Fundamental Rights of the EU.

The European Data Protection Board (EDPB) is an independent European body which shall ensure the consistent application of data protection rules throughout the European Union. The EDPB has been established by the General Data Protection Regulation (GDPR).

The EDPB is composed of the representatives of the national data protection authorities of the EU/EEA countries and of the European Data Protection Supervisor. The European Commission participates in the activities and meetings of the Board without voting right.  The secretariat of the EDPB is provided by the EDPS. The secretariat performs its tasks exclusively under the instructions of the Chair of the Board.

The EDPB tasks consist primarily in providing general guidance on key concepts of the GDPR and the Law Enforcement Directive, advising the European Commission on issues related to the protection of personal data and new proposed legislation in the European Union, and adopting binding decisions in disputes between national supervisory authorities.

Legislation

Regulation 2018/1725sets forth the rules applicable to the processing of personal data by European Union institutions, bodies, offices and agencies. It is aligned with the General Data Protection Regulation and the Data Protection Law Enforcement Directive. It entered into application on 11 December 2018.

European Data Protection Supervisor

Regulation 2018/1725 established a European data protection supervisor (EDPS). The EDPS is an independent EU body responsible for monitoring the application of data protection rules within European Institutions and for investigating complaints.

Data Protection Officer in the European Commission

The European Commission has appointed a Data Protection Officer who is responsible for monitoring and the application of data protection rules in the European Commission. The data protection officer independently ensures the internal application of data protection rules in cooperation with the European data protection supervisor.

Following the adoption in June 2021 of two sets of Standard Contractual Clauses (SCC) (one for the use between controllers and processors within the European Economic Area (EEA)and one for the transfer of personal data to countries outside of the EEA), the European Commission published on 25 May 2022 Questions and Answers (Q&As) to provide practical guidance on the use of the SCCs and assist stakeholders in their compliance efforts under the General Data Protection Regulation (GDPR). These Q&As are based on feedback received from various stakeholders on their experience with using the new SCCs in the first months after their adoption. The Q&As are intended to be a ‘dynamic’ source of information and will be updated as new questions arise. 

Funding & tender opportunities (SEDIA)

Rights, Equality and Citizenship Programme (2014-2020)