CINXE.COM
Data Protection | European Data Protection Supervisor
<!DOCTYPE html> <html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#"> <head> <meta charset="utf-8" /> <meta name="description" content="Privacy and Data Protection, though connected, are commonly recognised all over the world as two separate rights. In Europe, they are considered vital components for a sustainable democracy. Though experts sometimes disagree over the finer points of these two rights, on this page you will find a ..." /> <link rel="canonical" href="https://www.edps.europa.eu/data-protection_en" /> <meta name="robots" content="index, follow" /> <meta property="og:site_name" content="European Data Protection Supervisor" /> <meta property="og:url" content="https://www.edps.europa.eu/data-protection_en" /> <meta property="og:title" content="Data Protection" /> <meta property="og:description" content="Privacy and Data Protection, though connected, are commonly recognised all over the world as two separate rights. In Europe, they are considered vital components for a sustainable democracy. Though experts sometimes disagree over the finer points of these two rights, on this page you will find a ..." /> <meta property="og:image" content="https://www.edps.europa.eu/themes/custom/edpsweb_theme/og_image.png" /> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /> <meta name="MobileOptimized" content="width" /> <meta name="HandheldFriendly" content="true" /> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /> <meta http-equiv="x-ua-compatible" content="ie=edge" /> <link rel="icon" href="/themes/custom/edpsweb_theme/favicon.ico" type="image/vnd.microsoft.icon" /> <link rel="alternate" hreflang="de" href="https://www.edps.europa.eu/data-protection_de" /> <link rel="alternate" hreflang="en" href="https://www.edps.europa.eu/data-protection_en" /> <link rel="alternate" hreflang="fr" href="https://www.edps.europa.eu/data-protection_fr" /> <title>Data Protection | European Data Protection Supervisor</title> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/align.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/fieldgroup.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/container-inline.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/clearfix.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/details.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/hidden.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/item-list.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/js.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/nowrap.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/position-container.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/reset-appearance.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/resize.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-counter.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-counters.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-general-info.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/tablesort.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/modules/custom/edps_cookies/css/cookies-popup.css?snk5ny" /> <link rel="stylesheet" media="all" href="/core/modules/views/css/views.module.css?snk5ny" /> <link rel="stylesheet" media="all" href="/themes/contrib/bootstrap_barrio/css/components/node.css?snk5ny" /> <link rel="stylesheet" media="all" href="/themes/custom/edpsweb_theme/build/css/edpsweb_theme.min.css?snk5ny" /> <link rel="stylesheet" media="all" href="/themes/contrib/bootstrap_barrio/css/components/breadcrumb.css?snk5ny" /> <link rel="me" href="https://social.network.europa.eu/@EDPS"> </head> <body class="layout-one-sidebar layout-sidebar-second page-node-5 path-node node--type-edpsweb-page"> <a href="#main-content" class="visually-hidden focusable skip-link"> Skip to main content </a> <script type="application/json">{"utility":"globan","theme":"light","logo":true,"link":true,"mode":false}</script> <div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas> <div id="page-wrapper"> <div id="page"> <header id="header" class="header" role="banner" aria-label="Site header"> <nav class="navbar navbar-light bg-white" id="navbar-top"> <div class="container"> <div class="top-headers"> <section class="region region-top-header"> <div class="system-branding"> <a href="/_en" title="Home" rel="home" class="navbar-brand"> <img src="/themes/custom/edpsweb_theme/logo.svg" alt="Home" class="img-fluid" /> </a> <div class="site-infos"> <div class="site-name">European Data Protection Supervisor</div> <div class="site-slogan"></div> </div> </div> </section> <section class="region region-top-header-right"> <div class="language-switcher-oe-multilingual-url-suffix-negotiation-method block block-language block-language-blocklanguage-interface" id="block-edpsweb-theme-language-switcher" role="navigation"> <div class="content"> <div class="links dropdown"><button class="btn btn-link dropdown-toggle" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> English (en) </button><ul class="dropdown-menu"><li class="dropdown-item"> <a href="/data-protection_de" class="language-link" hreflang="de" data-drupal-link-system-path="node/5">Deutsch (de)</a> </li><li class="dropdown-item"> <a href="/data-protection_fr" class="language-link" hreflang="fr" data-drupal-link-system-path="node/5">français (fr)</a> </li></ul> </div> </div> </div> <div> <ul class="social-links"> <li> <a href="https://twitter.com/EU_EDPS" class="social-link social-link-x" title="EDPS on X" rel="noopener" target="_blank"> <span class="sr-only">X</span> </a> </li> <li> <a href="https://social.network.europa.eu/@EDPS" class="social-link social-link-mastodon" title="EDPS on EU Voice" rel="noopener" target="_blank"> <span class="sr-only">EU Voice</span> </a> </li> <li> <a href="https://www.linkedin.com/company/edps" class="social-link social-link-linkedin" title="EDPS on Linkedin" rel="noopener" target="_blank"> <span class="sr-only">LinkedIn</span> </a> </li> <li> <a href="https://www.instagram.com/eu_edps" class="social-link social-link-instagram" title="EDPS on Instagram" rel="noopener" target="_blank"> <span class="sr-only">Instagram</span> </a> </li> <li> <a href="https://open.spotify.com/show/2JlsePIpCNTQfTGTDGhUyd" class="social-link social-link-spotify" title="EDPS Podcasts on Spotify" rel="noopener" target="_blank"> <span class="sr-only">Spotify</span> </a> </li> <li> <a href="https://www.youtube.com/user/EDPS2011" class="social-link social-link-youtube" title="EDPS on YouTube" rel="noopener" target="_blank"> <span class="sr-only">YouTube</span> </a> </li> <li> <a class="social-link social-link-peertube" href="https://tube.network.europa.eu/a/edps/video-channels" title="EDPS on EU Video" rel="noopener" target="_blank"> <span class="sr-only">EU Video</span> </a> </li> <li> <a href="/feed/news_en" class="social-link social-link-rss" title="EDPS RSS Feed" target="_blank"> <span class="sr-only">RSS Feed</span> </a> </li> </ul> <a class="dpn-header" href="/about-edps/data-protection-edps_en" title="Data Protection Notice">Data Protection Notice</a> </div> </section> </div> </div> </nav> <nav class="navbar navbar-dark bg-primary navbar-expand-md" id="navbar-main"> <div class="container"> <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#collapsing-navbar" aria-controls="collapsing-navbar" aria-expanded="false" aria-label="Toggle navigation"> <i class="fas fa-bars"></i> </button> <span class="navbar-mobile-title">European Data Protection Supervisor</span> <div class="collapse navbar-collapse" id="collapsing-navbar"> <div class="navbar-collapse-content"> <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#collapsing-navbar" aria-controls="collapsing-navbar" aria-expanded="false" aria-label="Toggle navigation"> <i class="fas fa-times"></i> </button> <nav role="navigation" aria-labelledby="block-edpsweb-theme-main-navigation-menu" id="block-edpsweb-theme-main-navigation" class="block block-menu navigation menu--main"> <h2 class="sr-only" id="block-edpsweb-theme-main-navigation-menu">Main navigation</h2> <ul id="block-edpsweb-theme-main-navigation" block="block-edpsweb-theme-main-navigation" class="clearfix nav navbar-nav"> <li class="nav-item"> <a href="/_en" class="nav-link" data-drupal-link-system-path="<front>">Home</a> </li> <li class="nav-item menu-item--expanded dropdown"> <a href="/about-edps_en" class="nav-link" data-toggle="dropdown" aria-expanded="false" aria-haspopup="true" data-drupal-link-system-path="node/4">About</a> <ul class="dropdown-menu"> <a href="#" class="dropdown-menu-close"> <i class="fas fa-arrow-circle-left"></i> </a> <li class="dropdown-item menu-item--expanded"> <a href="/about/supervisor_en" data-drupal-link-system-path="node/8">The Supervisor</a> <ul> <li class="dropdown-item"> <a href="/about-edps/members-mission/supervisors/wojciech-wiewi%C3%B3rowski_en" data-display-title="1" data-hide-children="0" data-remove-class="0" data-drupal-link-system-path="node/3951">Wojciech Wiewiórowski</a> </li> <li class="dropdown-item"> <a href="/about/supervisor/secretary-general_en" data-drupal-link-system-path="node/12116">The Secretary-General</a> </li> <li class="dropdown-item"> <a href="/about-edps/members-mission/agenda_en" data-drupal-link-system-path="about-edps/members-mission/agenda">Agenda</a> </li> </ul> </li> <li class="dropdown-item menu-item--expanded"> <a href="/about-edps/edps-secretariat_en" data-drupal-link-system-path="node/3930">The Office of the EDPS</a> <ul> <li class="dropdown-item"> <a href="/about/office-edps/edps-rules-procedure_en" data-drupal-link-system-path="node/10361">EDPS Rules of Procedure</a> </li> <li class="dropdown-item menu-item--expanded"> <a href="/careers_en" data-drupal-link-system-path="node/19">Careers</a> </li> <li class="dropdown-item"> <a href="/about-edps/public-procurement_en" data-drupal-link-system-path="node/5436">Public procurement</a> </li> </ul> </li> <li class="dropdown-item menu-item--expanded"> <a href="/about-edps/data-protection-edps_en" data-drupal-link-system-path="node/20">Data Protection within the EDPS</a> <ul> <li class="dropdown-item"> <a href="/about/data-protection-within-edps/data-protection-officer-edps_en" data-drupal-link-system-path="node/4004">The DPO at the EDPS</a> </li> <li class="dropdown-item"> <a href="/about/data-protection-within-edps/records-register_en" data-drupal-link-system-path="node/5005">Records Register</a> </li> <li class="dropdown-item"> <a href="/about-edps/legal-notices_en" data-display-title="1" data-hide-children="0" data-remove-class="0" data-drupal-link-system-path="node/21">Cookies</a> </li> </ul> </li> <li class="dropdown-item menu-item--expanded"> <a href="/about/about-us_en" data-drupal-link-system-path="node/6221">About Us</a> <ul> <li class="dropdown-item"> <a href="/about-edps/legal-notices/copyright_en" data-drupal-link-system-path="node/25">Copyright</a> </li> <li class="dropdown-item menu-item--expanded"> <a href="/about-edps/contact_en" data-drupal-link-system-path="node/11">Contact Us</a> </li> </ul> </li> <li class="dropdown-item menu-item--expanded"> <a href="/about/transparency-and-access-documents_en" data-drupal-link-system-path="node/8331">Transparency and Access to Documents</a> <ul> <li class="dropdown-item"> <a href="/about/transparency/public-access-documents-register_en" data-drupal-link-system-path="node/7761">Public Access to Documents Register</a> </li> </ul> </li> </ul> </li> <li class="nav-item menu-item--expanded active dropdown"> <a href="/data-protection_en" class="nav-link active is-active" data-toggle="dropdown" aria-expanded="false" aria-haspopup="true" data-drupal-link-system-path="node/5" aria-current="page">Data Protection</a> <ul class="dropdown-menu"> <a href="#" class="dropdown-menu-close"> <i class="fas fa-arrow-circle-left"></i> </a> <li class="dropdown-item menu-item--expanded"> <a href="/data-protection/data-protection_en" data-drupal-link-system-path="node/26">Data Protection</a> <ul> <li class="dropdown-item"> <a href="/data-protection/data-protection/legislation_en" data-drupal-link-system-path="node/27">Legislation</a> </li> <li class="dropdown-item"> <a href="/data-protection/data-protection/legislation/history-general-data-protection-regulation_en" data-drupal-link-system-path="node/2866">The History of the GDPR</a> </li> <li class="dropdown-item menu-item--collapsed"> <a href="/data-protection/data-protection/reference-library_en" data-drupal-link-system-path="node/29">Reference Library</a> </li> <li class="dropdown-item"> <a href="/data-protection/data-protection/case-law-and-guidance_en" data-drupal-link-system-path="node/30">Court Cases</a> </li> <li class="dropdown-item menu-item--collapsed"> <a href="/data-protection/data-protection/glossary_en" data-drupal-link-system-path="node/3094">Glossary</a> </li> </ul> </li> <li class="dropdown-item menu-item--expanded"> <a href="/data-protection/our-role-supervisor_en" data-drupal-link-system-path="node/31">Our role as a supervisor</a> <ul> <li class="dropdown-item"> <a href="https://www.edps.europa.eu/data-protection/our-work/our-work-by-type/audits_en">Audits</a> </li> <li class="dropdown-item"> <a href="/data-protection/our-role-supervisor/complaints_en" data-drupal-link-system-path="node/905">Complaints</a> </li> <li class="dropdown-item"> <a href="https://edps.europa.eu/data-protection/our-work/our-work-by-type/investigations_en">Investigations</a> </li> <li class="dropdown-item"> <a href="https://edps.europa.eu/data-protection/our-work/our-work-by-type/opinions-prior-check-and-prior-consultations_en">Prior Consultations</a> </li> <li class="dropdown-item"> <a href="https://edps.europa.eu/data-protection/our-work/our-work-by-type/supervisory-opinions_en">Supervisory Opinions</a> </li> <li class="dropdown-item"> <a href="https://edps.europa.eu/data-protection/our-work/our-work-by-type/authorisation-decisions-transfers_en">International Transfers</a> </li> <li class="dropdown-item"> <a href="/data-protection/our-role-supervisor/personal-data-breach_en" data-drupal-link-system-path="node/5046">Personal Data Breach</a> </li> <li class="dropdown-item"> <a href="/data-protection/our-role-supervisor/use-edps-powers_en" data-drupal-link-system-path="node/6202">Use of EDPS Powers</a> </li> </ul> </li> <li class="dropdown-item menu-item--expanded"> <a href="/data-protection/our-role-advisor_en" data-drupal-link-system-path="node/35">Our role as an advisor</a> <ul> <li class="dropdown-item"> <a href="https://edps.europa.eu/data-protection/our-work/our-work-by-type/opinions_en">Opinions</a> </li> <li class="dropdown-item"> <a href="https://edps.europa.eu/data-protection/our-work/our-work-by-type/formal-comments_en">Formal Comments</a> </li> <li class="dropdown-item"> <a href="https://edps.europa.eu/data-protection/our-work/our-work-by-type/joint-opinions_en">Joint Opinions</a> </li> </ul> </li> <li class="dropdown-item menu-item--expanded"> <a href="/data-protection/technology-monitoring_en" data-drupal-link-system-path="node/45">Technology Monitoring</a> <ul> <li class="dropdown-item"> <a href="/data-protection/our-work/our-work-by-type/techdispatch_en" data-drupal-link-system-path="taxonomy/term/345">TechDispatch</a> </li> <li class="dropdown-item menu-item--collapsed"> <a href="/data-protection/technology-monitoring/techsonar_en" data-drupal-link-system-path="node/7590">TechSonar</a> </li> <li class="dropdown-item menu-item--expanded"> <a href="/data-protection/ipen-internet-privacy-engineering-network_en" data-display-title="1" data-hide-children="0" data-remove-class="0" data-drupal-link-system-path="node/47">IPEN</a> </li> <li class="dropdown-item"> <a href="/data-protection/technology-monitoring/data-protection-and-privacy-tools_en" data-drupal-link-system-path="node/13034">Data Protection and Privacy Tools</a> </li> </ul> </li> <li class="dropdown-item menu-item--expanded"> <a href="/data-protection/our-work_en" data-drupal-link-system-path="node/42">Our work</a> <ul> <li class="dropdown-item"> <a href="/data-protection/our-work/international-cooperation_en" data-drupal-link-system-path="node/44">International Cooperation</a> </li> <li class="dropdown-item menu-item--collapsed"> <a href="/data-protection/our-work/cooperation-eu-dpas_en" data-drupal-link-system-path="node/13115">Cooperation with EU DPAs</a> </li> </ul> </li> <li class="dropdown-item menu-item--expanded"> <a href="/data-protection/eu-institutions-dpo_en" data-drupal-link-system-path="node/50">DPOs</a> <ul> <li class="dropdown-item"> <a href="/data-protection/eu-institutions-dpo/network-dpos_en" data-drupal-link-system-path="node/53">DPO network list</a> </li> <li class="dropdown-item"> <a href="/data-protection/eu-institutions-dpo/reports_en" data-drupal-link-system-path="node/55">Survey reports</a> </li> <li class="dropdown-item"> <a href="/data-protection/dpos/edps-dpos-meetings_en" data-drupal-link-system-path="node/3208">EDPS-DPOs meetings</a> </li> </ul> </li> <li class="dropdown-item"> <a href="/data-protection/supervision-coordination_en" data-drupal-link-system-path="node/37">Supervision Coordination</a> </li> <li class="dropdown-item"> <a href="/data-protection/links_en" data-display-title="1" data-hide-children="0" data-remove-class="0" data-drupal-link-system-path="node/56">Links</a> </li> <li class="dropdown-item menu-item--expanded"> <a href="/data-protection/search-publications_en" data-drupal-link-system-path="node/3035">Search by:</a> <ul> <li class="dropdown-item"> <a href="/data-protection/our-work/our-work-by-type_en" data-drupal-link-system-path="data-protection/our-work/our-work-by-type">Document</a> </li> <li class="dropdown-item"> <a href="/data-protection/our-work/subjects_en" data-drupal-link-system-path="data-protection/our-work/subjects">Topic</a> </li> </ul> </li> </ul> </li> <li class="nav-item menu-item--expanded dropdown"> <a href="/artificial-intelligence_en" class="nav-link" data-toggle="dropdown" aria-expanded="false" aria-haspopup="true" data-drupal-link-system-path="node/13612">Artificial Intelligence</a> <ul class="dropdown-menu"> <a href="#" class="dropdown-menu-close"> <i class="fas fa-arrow-circle-left"></i> </a> <li class="dropdown-item"> <a href="/artificial-intelligence/artificial-intelligence-act_en" data-drupal-link-system-path="node/13613">Artificial Intelligence Act</a> </li> <li class="dropdown-item"> <a href="https://www.edps.europa.eu/data-protection/our-work/subjects/artificial-intelligence_en">Our work on AI</a> </li> </ul> </li> <li class="nav-item menu-item--expanded dropdown"> <a href="/press-publications_en" class="nav-link" data-toggle="dropdown" aria-expanded="false" aria-haspopup="true" data-drupal-link-system-path="node/6">Press & Publications</a> <ul class="dropdown-menu"> <a href="#" class="dropdown-menu-close"> <i class="fas fa-arrow-circle-left"></i> </a> <li class="dropdown-item menu-item--expanded"> <a href="/press-publications/press-news_en" data-drupal-link-system-path="node/62">Press & News</a> <ul> <li class="dropdown-item"> <a href="/press-publications/press-news/news_en" data-drupal-link-system-path="press-publications/press-news/news">News</a> </li> <li class="dropdown-item"> <a href="/press-publications/press-news/press-releases_en" data-drupal-link-system-path="press-publications/press-news/press-releases">EDPS Press Releases</a> </li> <li class="dropdown-item"> <a href="https://edpb.europa.eu/our-work-tools/our-documents/publication-type/press-releases_en">EDPB Press Releases</a> </li> <li class="dropdown-item"> <a href="/press-publications/press-news/blog_en" data-display-title="1" data-hide-children="0" data-remove-class="0" data-drupal-link-system-path="press-publications/press-news/blog">Blog</a> </li> <li class="dropdown-item"> <a href="/press-publications/press-news/videos_en" data-drupal-link-system-path="press-publications/press-news/videos">Videos</a> </li> <li class="dropdown-item"> <a href="/press-publications/press-news/pictures_en" data-drupal-link-system-path="press-publications/press-news/pictures">Pictures</a> </li> <li class="dropdown-item menu-item--collapsed"> <a href="/press-publications/press-news/press-kit_en" data-drupal-link-system-path="node/63">Press Kit</a> </li> <li class="dropdown-item"> <a href="/data-protection/our-work/publications/brochures/edps-brochure-shaping-safer-digital-future_en" data-drupal-link-system-path="node/6193">EDPS Brochure: Shaping a Safer Digital Future</a> </li> <li class="dropdown-item"> <a href="/frequently-asked-questions_en" data-drupal-link-system-path="node/5973">Frequently Asked Questions</a> </li> </ul> </li> <li class="dropdown-item menu-item--expanded"> <a href="/press-publications/publications_en" data-drupal-link-system-path="node/65">Publications</a> <ul> <li class="dropdown-item menu-item--collapsed"> <a href="/press-publications/publications/strategy_en" data-drupal-link-system-path="node/3902">Strategy</a> </li> <li class="dropdown-item"> <a href="/annual-reports_en" data-drupal-link-system-path="node/76">Annual Reports</a> </li> <li class="dropdown-item"> <a href="/press-publications/publications/speeches-articles_en" data-drupal-link-system-path="node/503">Speeches & Articles</a> </li> <li class="dropdown-item"> <a href="/press-publications/publications/annual-activity-reports_en" data-drupal-link-system-path="node/77">Annual Activity Reports</a> </li> <li class="dropdown-item"> <a href="https://edps.europa.eu/data-protection/our-work/our-work-by-type/brochures_en">Brochures</a> </li> <li class="dropdown-item"> <a href="/press-publications/publications/factsheets_en" data-drupal-link-system-path="node/3901">Factsheets</a> </li> <li class="dropdown-item menu-item--collapsed"> <a href="/press-publications/publications/newsletters_en" data-drupal-link-system-path="node/4231">Newsletters</a> </li> <li class="dropdown-item"> <a href="https://edps.europa.eu/press-publications/publications/podcasts_en">Podcasts</a> </li> </ul> </li> <li class="dropdown-item menu-item--expanded"> <a href="/press-publications/events_en" data-drupal-link-system-path="node/3288">Events</a> <ul> <li class="dropdown-item"> <a href="/european-conferences_en" data-drupal-link-system-path="node/4142">European Conferences</a> </li> <li class="dropdown-item"> <a href="/press-publications/events/international-conferences_en" data-drupal-link-system-path="node/4143">International Conferences</a> </li> </ul> </li> <li class="dropdown-item"> <a href="https://www.edps.europa.eu/data-protection/our-work/publications/book/2024-06-20-two-decades-personal-data-protection-whats-next_en">20th Anniversary Book</a> </li> <li class="dropdown-item"> <a href="/edps-inspection-software_en" data-drupal-link-system-path="node/5452">EDPS Inspection Software</a> </li> <li class="dropdown-item"> <a href="/comic-book_en" data-drupal-link-system-path="node/4938">Comic Book</a> </li> <li class="dropdown-item"> <a href="/press-publications/edps-support-independent-research-projects_en" data-drupal-link-system-path="node/13141">EDPS support to independent research projects</a> </li> </ul> </li> </ul> </nav> <div class="form-inline navbar-form"> <form id="navbar-search-form" action="/search_en" method="get" accept-charset="UTF-8"> <div class="form-row"> <input placeholder="Search" type="text" name="search" size="30" maxlength="128" class="form-text form-control"> <button type="submit" value="Apply" class="form-submit btn btn-primary"><i class="fas fa-search"></i></button> </div> </form> </div> </div> </div> </div> </nav> </header> <div id="block-breadcrumbs" class="block block-system block-system-breadcrumb-block"> <div class="content"> <nav role="navigation" aria-label="breadcrumb"> <div class="container"> <ol class="breadcrumb"> <li class="breadcrumb-item"> <a href="/_en"> <i class="fas fa-home"></i> </a> </li> <li class="breadcrumb-item active"> Data Protection </li> </ol> </div> </nav> </div> </div> <div id="main-wrapper" class="layout-main-wrapper clearfix"> <div id="main" class="container"> <div class="row row-offcanvas row-offcanvas-left clearfix"> <main class="main-content col" id="content" role="main"> <section class="section"> <a id="main-content" tabindex="-1"></a> <div data-drupal-messages-fallback class="hidden"></div><div id="block-pagetitle" class="block block-core block-page-title-block"> <a href="javascript:void();" onclick="window.print();" class="print-button" title="Print page">Print</a> <script type="application/json"> { "service": "etrans", "languages": { "exclude": ["en", "ru", "uk", "zh"] }, "renderAs": { "icon": true, "button": false, "link": true }, "include": "main h1.title, #block-edpsweb-theme-main-page-content, #block-edpsweb-documents-details-block, #block-views-block-edpsweb-public-access-to-docs-register-block-1, #block-edpsweb-timeline-block, #block-edpsweb-newsletter-block, #block-edpsweb-publication-display-block" } </script> <div class="content"> <h1 class="title"><span class="field field--name-title field--type-string field--label-hidden">Data Protection</span> </h1> </div> </div> <div id="block-edpsweb-theme-main-page-content" class="block block-system block-system-main-block"> <div class="content"> <article class="node node--type-edpsweb-page node--view-mode-full clearfix"> <header> </header> <div class="node__content clearfix"> <div class="clearfix text-formatted field field--name-field-edpsweb-body field--type-text-with-summary field--label-hidden field__item"><p>Privacy and Data Protection, though connected, are commonly recognised all over the world as two separate rights. In Europe, they are considered vital components for a sustainable democracy.</p> <p>Though experts sometimes disagree over the finer points of these two rights, on this page you will find a general description of <a href="#Privacy">privacy</a> and <a href="#Data-Protection">data protection</a>, as well as an outline of <a href="#DP_Law">data protection law</a>; data protection <a href="#DP_Practice">in practice</a>; the <a href="#Independance">independence</a> of supervisory authorities; <a href="#Cross_border">cross border data protection</a>; and the <a href="#Interaction">interaction</a> between privacy, data protection and security.</p> <p>In other pages under this section, you will find links to key pieces of data protection <a href="/data-protection/data-protection/legislation_en">legislation</a>, our <a href="/data-protection/data-protection/reference-library_en">Reference Library</a>, <a href="/data-protection/data-protection/case-law-and-guidance_en">Court Cases</a> and a <a href="/data-protection/data-protection/glossary_en">glossary</a> of data protection terms.</p> <h4><a id="Privacy" name="Privacy"></a>What is Privacy?</h4> <div>In the EU, human dignity is recognised as an absolute fundamental right.</div> <p>In this notion of dignity, privacy or the right to a private life, to be autonomous, in control of information about yourself, to be let alone, plays a pivotal role. Privacy is not only an individual right but also a social value.</p> <p>Historically, in other parts of the world, such as the U.S.A., privacy has often been regarded as an element of liberty, the right to be free from intrusions by the state. This distinction between Europe and other parts of the world is relative since it is also an element of privacy in the EU.</p> <h4><strong>Privacy – a fundamental right</strong></h4> <p>Almost every country in the world recognises privacy in some way, be it in their constitution or in other provisions.</p> <p>Moreover, privacy is recognised as a universal human right while data protection is not – at least not yet.</p> <p>The right to privacy or private life is enshrined in the Universal Declaration of Human Rights (Article 12), the European Convention of Human Rights (Article 8) and the <a href="http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:12012P/TXT&from=EN">European Charter of Fundamental Rights</a> (Article 7).</p> <h4><strong><a id="Data-Protection" name="Data-Protection"></a>What is Data Protection?</strong></h4> <p>Data protection is about protecting any information relating to an identified or identifiable natural (living) person, including names, dates of birth, photographs, video footage, email addresses and telephone numbers. Other information such as IP addresses and communications content - related to or provided by end-users of communications services - are also considered personal data.</p> <p>The notion of data protection originates from the right to privacy and both are instrumental in preserving and promoting fundamental values and rights; and to exercise other rights and freedoms - such as free speech or the right to assembly.</p> <p>Data protection has precise aims to ensure the fair processing (collection, use, storage) of personal data by both the public and private sectors.</p> <h4><strong>The Right to Data Protection</strong></h4> <p>Privacy and data protection are two rights enshrined in the EU Treaties and in the EU <a href="http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:12012P/TXT&from=EN">Charter of Fundamental Rights</a>.</p> <p>The Charter contains an explicit right to the protection of personal data (Article 8).<br> The entry into force of the Lisbon Treaty in 2009, gave the Charter of Fundamental Rights the same legal value as the constitutional treaties of the EU. Thus the EU institutions and bodies and the Member States are bound by it.</p> <h4><strong><a id="DP_Law" name="DP_Law"></a>Data Protection Law</strong></h4> <p>For decades, the EU has held high standards of <a href="/data-protection/data-protection/legislation_en">data protection law</a> . The law entitles individuals to exercise specific data protection rights and obliges (public or private sector) organisations that process their data to respect these rights.</p> <p>In April 2016, the EU adopted a new legal framework - <a href="/data-protection/data-protection/legislation/history-general-data-protection-regulation_en">the General Data Protection Regulation (GDPR)</a> and the Data Protection Directive for the law enforcement and police area.</p> <p>Fully applicable across the EU in May 2018, the GDPR is the most comprehensive and progressive piece of data protection legislation in the world, updated to deal with the implications of the digital age.</p> <p>It applies to organisations or companies not established in the EU who offer goods and services to individuals in the EU or monitor their behaviour. It creates new rights for individuals in the digital environment and several new and detailed obligations for cooperation.</p> <p>Globally, there is an increasing growth in data protection (sometimes referred to as data privacy in non-EU countries) laws. Many of these laws are strongly influenced by the EU rules, which have long been considered the gold standard in data protection law.</p> <p>Over 100 countries around the world now have data protection laws in place: fewer than half of these countries are in Europe (28 EU Member States and others). The majority of data protection laws have been adopted outside of Europe, with the fastest growth seen in African countries.</p> <p>The<a href="http://fra.europa.eu/en/publication/2018/handbook-european-data-protection-law"> handbook on data protection law</a> provides an overview of the EU’s and the CoE’s applicable legal frameworks. It also explains key case law, summarising major rulings of both the Court of Justice of the European Union and the European Court of Human Rights.</p> <h4><strong><a id="DP_Practice" name="DP_Practice"></a>Data Protection in Practice</strong></h4> <p>In most countries, national<a href="http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm"> Data Protection Authorities (DPAs)</a> or Regulators have been established to be the guardians of data protection.</p> <p>For the enforcement of data protection laws to be effective, DPAs are given the power to investigate, detect and punish violations as well as the responsibility to raise awareness of data protection rights and obligations in general.</p> <p>In the EU, this effectiveness is strengthened by the requirement for DPAs to be independent of any political, governmental or other influence.</p> <p>Furthermore, good cooperation between DPAs (Article 29 Working Party, EDPB) ensures greater consistency of data protection in the EU.</p> <h4><strong><a id="Independance" name="Independance"></a>Independence</strong></h4> <p>In the EU the requirement for DPAs to be independent is laid down in law: Article 16(2) of the Treaty on the Functioning of the EU (TFEU) and Article 8(3) of the EU Charter of Fundamental Rights.</p> <p>The Court of Justice of the European Union, has consistently emphasised that control by an independent authority is an essential component of the right to data protection and has laid down the criteria for such independence.</p> <p>In particular, the supervisory authority must act with complete independence, which implies a decision-making power independent of any direct or indirect external influence.</p> <p>The Court has also emphasised the crucial role of EU independent supervisory authorities in relation to control of international transfers to non-EU countries.</p> <p>The General Data Protection Regulation (GDPR) also emphasises the importance of independence; Chapter VI of the GDPR provides detailed rules for the establishment and functioning of independent supervisory authorities, including provisions on the resources necessary for the effective performance of their tasks and powers.</p> <p>The EDPS is an independent supervisory authority responsible for ensuring that EU institutions and bodies comply with data protection law when processing personal data.</p> <h4><strong><a id="Cross_border" name="Cross_border"></a>Cross border data protection</strong></h4> <p>Data protection laws are national but in the online environment, data does not respect borders.</p> <p><a href="/data-protection/our-work/edps-worldwide_en">Cross-border</a> cooperation and agreements to deliver effective data protection are essential, particularly if the EU is to maintain its values and uphold its principles.</p> <p>To achieve this, the EDPS regularly interacts with EU and international DPAs and Regulators to influence and develop cross-border enforcement.</p> <h4><strong><a id="Interaction" name="Interaction"></a>Privacy, data protection and security</strong></h4> <p>In the EU, privacy and data protection are not absolute rights and can be limited under certain conditions according to the EU Charter of Fundamental Rights.</p> <p>The rights to privacy and data protection may need to be balanced against other EU values, human rights, or public and private interests such as the fundamental rights to freedom of expression, freedom of press or freedom of access to information.</p> <p>The rights to privacy and data protection may also need to be weighed up against other public interests, such as national security. EU Member States adopt measures to combat terrorist threats, but more generally to reinforce the judicial and police cooperation in criminal matters in the <a href="http://eur-lex.europa.eu/summary/chapter/justice_freedom_security.html?root_default=SUM_1_CODED%3D23,SUM_2_CODED%3D2307&locale=en">area of Freedom, Security and Justice (AFSJ)</a>.</p> <p>In the EU, national security is the sole responsibility of each Member State and is outlined in the Treaty on the Functioning of the EU (article 4.2 TFEU).</p> <p>However, the courts by means of the specific legal provision on data retention, are now exploring the boundaries of this competence: according to the Court of Justice of the EU (<a href="http://curia.europa.eu/juris/liste.jsf?language=en&jur=C,T,F&num=C-399/11&td=ALL">Case C-399/11</a>; <a href="http://curia.europa.eu/juris/liste.jsf?language=en&jur=C,T,F&num=C-411/10&td=ALL">Case C-411/10</a>), even measures derogating from EU law are subject to the Charter of Fundamental Rights.</p> <p>In any case, the scale of collection, storage and cross-border exchange of personal data between Member States in crime and terrorism matters is enormous. </p> <p>The increased access to European databases as well as to commercial data for law enforcement purposes are challenging the balance between privacy and security.</p> <p>Data protection authorities in general have a pivotal role to play in ensuring this balance between privacy and other interests, including in the sensitive domain of security where their role is expanding; for instance on 1 May 2017, the EDPS will take over the data protection supervision of <a href="https://www.europol.europa.eu/about-europol">Europol</a>, the EU body actively cooperating with law enforcement authorities to combat international crime and terrorism.</p> <p>The EDPS' role of independent adviser to the EU institutions relates to all matters concerning the processing of personal data, including initiatives to improve security in the EU and new data-exchange tools for law enforcement agencies.</p> <p>Indeed, the EDPS has issued numerous Opinions on initiatives to expand information sharing for law enforcement purposes inside the EU including on the Entry/Exit System and EU PNR - but also outside of Europe such as the Umbrella Agreement with the US and PNR agreements with non-EU countries.</p> </div> </div> </article> </div> </div> </section> </main> <div class="sidebar_second sidebar col-md-4 order-last" id="sidebar_second"> <aside class="section" role="complementary"> <div class="views-element-container block block-views block-views-blockedpsweb-news-block-edpsweb-news-side card" id="block-edpsweb-news-side"> <div class="card-header"> <div class="float-right"> <a class="btn btn-sm btn-blue" href="/press-publications/press-news/news_en" title="+ View more news"> + <span class="d-none d-lg-inline">View more news</span></a> </div> <h2>News</h2> </div> <div class="card-body"> <div class="content"> <div><div class="view view-edpsweb-news view-id-edpsweb_news view-display-id-block_edpsweb_news_side js-view-dom-id-1861ba805c3f1d85ed66a646fedb981838ef33855cc5c16471af2f2a129af990"> <div class="view-content"> <div class="views-row"> <article class="node node--type-edpsweb-news node--promoted clearfix"> <a id="news_13896"></a> <header> </header> <div class="node__content clearfix"> <h3 class="node__title"> <a href="https://20years.edps.europa.eu/en/talks/eliska-pirkova" rel="bookmark"><span class="field field--name-title field--type-string field--label-hidden">Introducing a new interview with Eliška Pírková</span> </a> </h3> <div class="field field--name-field-edpsweb-date field--type-datetime field--label-hidden field__item"><time datetime="2024-12-02T12:00:00Z" class="datetime">2 December 2024</time> </div> <div class="clearfix text-formatted field field--name-field-edpsweb-news-intro field--type-text-long field--label-hidden field__item"><p>Eliška is a legal expert and digital rights advocate known for her work in internet governance and online freedom of expression. Together we discuss freedom of expression, democracy, privacy and digital rights in the context of a "super election year".</p> </div> <div class="field field--name-field-edpsweb-news-link field--type-link field--label-hidden field__item"><a href="https://20years.edps.europa.eu/en/talks/eliska-pirkova">Watch it</a></div> </div> </article> </div> <div class="views-row"> <article class="node node--type-edpsweb-news node--promoted clearfix"> <a id="news_13895"></a> <header> </header> <div class="node__content clearfix"> <h3 class="node__title"> <a href="https://www.edps.europa.eu/press-publications/press-news/videos/mini-video-series-oral-history-data-protection-towards-convention-108_en" rel="bookmark"><span class="field field--name-title field--type-string field--label-hidden">Episode of mini video series is out!</span> </a> </h3> <div class="field field--name-field-edpsweb-date field--type-datetime field--label-hidden field__item"><time datetime="2024-11-29T12:00:00Z" class="datetime">29 November 2024</time> </div> <div class="clearfix text-formatted field field--name-field-edpsweb-news-intro field--type-text-long field--label-hidden field__item"><p>Join us as we speak with leading experts who witnessed the evolution of data protection globally first-hand. The second episode features Peter Hustinx and focuses on the work that led to the Council of Europe’s Convention 108. </p> </div> <div class="field field--name-field-edpsweb-news-link field--type-link field--label-hidden field__item"><a href="https://www.edps.europa.eu/press-publications/press-news/videos/mini-video-series-oral-history-data-protection-towards-convention-108_en">Watch it here</a></div> </div> </article> </div> <div class="views-row"> <article class="node node--type-edpsweb-news node--promoted clearfix"> <a id="news_13887"></a> <header> </header> <div class="node__content clearfix"> <h3 class="node__title"> <a href="https://20years.edps.europa.eu/en/talks/segolene-martin" rel="bookmark"><span class="field field--name-title field--type-string field--label-hidden">20 Talks with Ségolène Martin from Kantify</span> </a> </h3> <div class="field field--name-field-edpsweb-date field--type-datetime field--label-hidden field__item"><time datetime="2024-11-28T12:00:00Z" class="datetime">28 November 2024</time> </div> <div class="clearfix text-formatted field field--name-field-edpsweb-news-intro field--type-text-long field--label-hidden field__item"><p>In this episode, we welcome Mrs Ségolène Martin. Mrs Martin is a cofounder of Kantify and a pioneer in AI-driven health solutions. Dive deep with us to explore how Artificial Intelligence improves drug discovery in healthcare. </p> </div> <div class="field field--name-field-edpsweb-news-link field--type-link field--label-hidden field__item"><a href="https://20years.edps.europa.eu/en/talks/segolene-martin">Watch it here</a></div> </div> </article> </div> </div> </div> </div> </div> </div> </div> <div id="block-edpsweb-agenda-sidebar" class="block block-edps-agenda card"> <div class="card-header"> <div class="float-right"> <a class="btn btn-sm btn-blue" href="/about-edps/members-mission/agenda_en" title="+ View full agenda"> + <span class="d-none d-lg-inline">View full agenda</span></a> </div> <h2>Agenda</h2> </div> <div class="card-body"> <div class="content"> <article class="node node--type-edpsweb-agenda node--promoted node--view-mode-teaser clearfix"> <a id="agenda_13886"></a> <header> <h3 class="node__title"> <time datetime="2024-12-03T12:00:00Z" class="datetime">3 December 2024</time> </h3> </header> <div class="node__content clearfix"> <div class="clearfix text-formatted field field--name-field-edpsweb-body field--type-text-with-summary field--label-hidden field__item"><p>Participation by Wojciech Wiewiórowski in reception organised by the Committee on Civil Liberties, Justice and Home Affairs (LIBE), Brussels, Belgium</p> </div> </div> </article> <article class="node node--type-edpsweb-agenda node--promoted node--view-mode-teaser clearfix"> <a id="agenda_13885"></a> <header> <h3 class="node__title"> <time datetime="2024-12-02T12:00:00Z" class="datetime">2 December 2024</time> </h3> </header> <div class="node__content clearfix"> <div class="clearfix text-formatted field field--name-field-edpsweb-body field--type-text-with-summary field--label-hidden field__item"><p>99th Plenary Session of the EDPB, Participation Wojciech Wiewiórowski, Brussels, Belgium</p> </div> </div> </article> <article class="node node--type-edpsweb-agenda node--promoted node--view-mode-teaser clearfix"> <a id="agenda_13884"></a> <header> <h3 class="node__title"> <time datetime="2024-11-28T12:00:00Z" class="datetime">28 November 2024</time> </h3> </header> <div class="node__content clearfix"> <div class="clearfix text-formatted field field--name-field-edpsweb-body field--type-text-with-summary field--label-hidden field__item"><p>"Transversal data protection enforcement issues", Speech by Wojciech Wiewiórowski at University of Utrecht, Utrecht, The Netherlands</p> </div> </div> </article> <article class="node node--type-edpsweb-agenda node--promoted node--view-mode-teaser clearfix"> <a id="agenda_13883"></a> <header> <h3 class="node__title"> <time datetime="2024-11-27T12:00:00Z" class="datetime">27 November 2024</time> </h3> </header> <div class="node__content clearfix"> <div class="clearfix text-formatted field field--name-field-edpsweb-body field--type-text-with-summary field--label-hidden field__item"><p>EDPS-DPO Meeting, Keynote speech by Leonardo Cervera Navas and Closing remarks by Wojciech Wiewiórowski, Luxembourg</p> </div> </div> </article> <article class="node node--type-edpsweb-agenda node--promoted node--view-mode-teaser clearfix"> <a id="agenda_13881"></a> <header> <h3 class="node__title"> <time datetime="2024-11-26T12:00:00Z" class="datetime">26 November 2024</time> </h3> </header> <div class="node__content clearfix"> <div class="clearfix text-formatted field field--name-field-edpsweb-body field--type-text-with-summary field--label-hidden field__item"><p>Wojciech Wiewiórowski gives lecture at ECPC Maastricht Advanced Masters in Privacy, Cybersecurity, and Data Protection at Fondation Universitaire Stichting, Brussels, Belgium</p> </div> </div> </article> </div> </div> </div> </aside> </div> </div> </div> </div> <footer class="site-footer"> <div class="container"> <section class="region region-footer"> <ul class="social-links"> <li> <a href="https://twitter.com/EU_EDPS" class="social-link social-link-x" title="EDPS on X" rel="noopener" target="_blank"> <span class="sr-only">X</span> </a> </li> <li> <a href="https://social.network.europa.eu/@EDPS" class="social-link social-link-mastodon" title="EDPS on EU Voice" rel="noopener" target="_blank"> <span class="sr-only">EU Voice</span> </a> </li> <li> <a href="https://www.linkedin.com/company/edps" class="social-link social-link-linkedin" title="EDPS on Linkedin" rel="noopener" target="_blank"> <span class="sr-only">LinkedIn</span> </a> </li> <li> <a href="https://www.instagram.com/eu_edps" class="social-link social-link-instagram" title="EDPS on Instagram" rel="noopener" target="_blank"> <span class="sr-only">Instagram</span> </a> </li> <li> <a href="https://open.spotify.com/show/2JlsePIpCNTQfTGTDGhUyd" class="social-link social-link-spotify" title="EDPS Podcasts on Spotify" rel="noopener" target="_blank"> <span class="sr-only">Spotify</span> </a> </li> <li> <a href="https://www.youtube.com/user/EDPS2011" class="social-link social-link-youtube" title="EDPS on YouTube" rel="noopener" target="_blank"> <span class="sr-only">YouTube</span> </a> </li> <li> <a class="social-link social-link-peertube" href="https://tube.network.europa.eu/a/edps/video-channels" title="EDPS on EU Video" rel="noopener" target="_blank"> <span class="sr-only">EU Video</span> </a> </li> <li> <a href="/feed/news_en" class="social-link social-link-rss" title="EDPS RSS Feed" target="_blank"> <span class="sr-only">RSS Feed</span> </a> </li> </ul> <nav role="navigation" aria-labelledby="block-footerlinks-menu" id="block-footerlinks" class="block block-menu navigation menu--menu-edpsweb-footer-links"> <h2 class="sr-only" id="block-footerlinks-menu">Footer Links</h2> <ul block="block-footerlinks" class="clearfix nav"> <li class="nav-item"> <a href="/about-edps/data-protection-edps_en" class="nav-link nav-link--about-edps-data-protection-edps-en" data-drupal-link-system-path="node/20">Data Protection Notice</a> </li> <li class="nav-item"> <a href="/about-edps/legal-notices_en" class="nav-link nav-link--about-edps-legal-notices-en" data-drupal-link-system-path="node/21">Cookies</a> </li> </ul> </nav> </section> </div> </footer> </div> </div> </div> <script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","pathPrefix":"","currentPath":"node\/5","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"edp_cookies_popup":{"popupHtml":"\u003Cdiv id=\u0022edp-cookies-banner\u0022\u003E\n \u003Cdiv class=\u0022banner-text\u0022\u003E\n \u003Cp\u003EThis website uses necessary cookies to function.\u003Cbr\/\u003E\r\nIf you give us your consent, we will also use cookies, when you visit our website, which allow us to collect data for aggregated statistics to improve our services.\u003Cbr\/\u003E\r\nMore information on \u003Ca href=\u0022\/about-edps\/legal-notices_en\u0022 title=\u0022Cookies\u0022\u003Ecookies\u003C\/a\u003E and \u003Ca href=\u0022\/about-edps\/data-protection-edps_en\u0022 title=\u0022Data protection\u0022\u003Edata protection\u003C\/a\u003E.\u003C\/p\u003E\n \u003C\/div\u003E\n \u003Cdiv class=\u0022banner-buttons\u0022\u003E\n \u003Cbutton class=\u0022btn btn-default edp-cookies-accept\u0022 type=\u0022button\u0022\u003EAccept cookies for aggregated statistics\u003C\/button\u003E\n \u003Cbutton class=\u0022btn btn-default edp-cookies-refuse\u0022 type=\u0022button\u0022\u003ENo thanks, only necessary cookies\u003C\/button\u003E\n \u003C\/div\u003E\n\u003C\/div\u003E","siteID":"9b49968a-a84a-46f8-adc5-ba3b6a2c7502","piwikURL":"https:\/\/webanalytics.europa.eu\/","expires":"180"},"user":{"uid":0,"permissionsHash":"83c478be4087ec168d2bca3268d0d09db64e824ee149cd3cd9d0534501857b74"}}</script> <script src="/core/assets/vendor/jquery/jquery.min.js?v=3.7.1"></script> <script src="/core/misc/drupalSettingsLoader.js?v=10.3.10"></script> <script src="/core/misc/drupal.js?v=10.3.10"></script> <script src="/core/misc/drupal.init.js?v=10.3.10"></script> <script src="/core/assets/vendor/js-cookie/js.cookie.min.js?v=3.0.5"></script> <script src="/modules/custom/edps_cookies/js/cookies-popup.js?v=1.x"></script> <script src="/themes/custom/edpsweb_theme/build/js/edpsweb_theme.min.js?v=10.3.10"></script> <script src="https://webtools.europa.eu/load.js" defer></script> </body> </html>