Data protection rules protect privacy and prevent personal information from misuse. When the general data protection regulation (GDPR) came into force in 2018, it strengthened the role of data protection authorities. These supervisory bodies are the key enforcers of the fundamental right of protection of personal data. This report analyses the challenges they face in the GDPR implementation. The findings complement the European Commission's forthcoming evaluation of the GDPR.
This report provides a partial update on the findings of the 2017 European Union Agency for Fundamental Rights (FRA) report Surveillance by intelligence services: Fundamental rights safeguards and remedies in the EU. It was prepared at the request of the European Parliament, which asked FRA to update its 2017 findings to support the work of its committee of inquiry to investigate the use of Pegasus and equivalent surveillance spyware (PEGA).
In this vlog Michael O'Flaherty outlines fundamental rights considerations when developing technological responses to public health, as he introduces the focus of FRA's next COVID-19 bulletin.
Este folleto ayuda a los funcionarios y a las autoridades a informar a los solicitantes de asilo y a los inmigrantes, de un modo comprensible y accesible, sobre el tratamiento de sus huellas dactilares en Eurodac.
The General Data Protection Regulation (GDPR) has applied across the European Union (EU) since 25 May 2018. One year on, this paper looks at how the new regulation has affected the daily work of civil society organisations (CSOs).
This guide explains what profiling is, the legal frameworks that regulate it, and why conducting profiling lawfully is both necessary to comply with fundamental rights and crucial for effective policing and border management. The guide also provides practical guidance on how to avoid unlawful profiling in police and border management operations.
El rápido avance de las tecnologías de la información ha aumentado la necesidad de una protección sólida de los datos personales, y el derecho a dicha protección está garantizado por instrumentos de la Unión Europea (UE) y del Consejo de Europa (CdE). Salvaguardar este importante derecho implica nuevos e importantes retos, a medida que los avances tecnológicos amplían las fronteras de campos tales como la vigilancia, la intervención de las comunicaciones y la conservación de los datos.
Debido a las crecientes amenazas que el terrorismo, los ciberataques y las sofisticadas redes delictivas transfronterizas plantean, la labor de los servicios de inteligencia tiene un carácter más urgente, complejo e internacional. Dicha labor puede interferir gravemente con los derechos fundamentales, en especial con la privacidad y la protección de datos. Aunque los avances tecnológicos continuos pueden agravar la amenaza de dicha injerencia, una supervisión y vías de recurso efectivos pueden poner freno a los posibles abusos.
This is the recording of the online press briefing about mass surveillance as presented by the EU Agency for Fundamental Rights (FRA) on 16 October 2017.
This report is FRA’s second publication addressing a European Parliament request for in-depth research on the impact of surveillance on fundamental rights. It updates FRA’s 2015 legal analysis on the topic, and supplements that analysis with field-based insights gained from extensive interviews with diverse experts in intelligence and related fields, including its oversight.
In 2006 the EU issued its Data Retention Directive. According to the Directive, EU Member States had to store electronic telecommunications data for at least six months and at most 24 months for investigating, detecting and prosecuting serious crime. In 2016, with an EU legal framework on data retention still lacking, the CJEU further clarified what safeguards are required for data retention to be lawful.This paper looks at amendments to national data retention laws in 2016 after the Digital Rights Ireland judgment.
This report, drafted in response to the European Parliament’s call for thorough research on fundamental rights protection in the context of surveillance, maps and analyses the legal frameworks on surveillance in place in EU Member States.
FRA was requested by the European Commission (EC) in January 2014 to provide practical guidance on the processing of Passenger Name Record (PNR) data for law enforcement purposes, in light of efforts by Member States to establish national PNR systems. As a result, in informal consultation with EC services and the European Data Protection Supervisor (EDPS) and building on opinions FRA, the EDPS and the Article 29 Working Party on PNR, FRA presented twelve fundamental rights considerations to EU Member States experts at technical level.
Following a request by the European Parliament on 5 September 2012 for an analysis of the fundamental rights issues associated with the proposed EU data protection reform package, FRA issued its opinion on the draft legislation on 1 October 2012.
When a decision to stop an individual is motivated solely or mainly by virtue of a person's race, ethnicity or religion, this constitutes discriminatory ethnic profiling. Such practices can serve to alienate certain communities in the EU, and in turn can contribute to inefficient policing. The FRA guide aims to help the police address and avoid discriminatory ethnic profiling, and is designed to be used as a tool for more effective policing.
The EU plays a pioneering role in the protection of personal data. The Charter of Fundamental Rights of the EU enshrines the right to data protection as an autonomous fundamental right. Despite the underlying importance and centrality of the right to data protection in the EU, many deficiencies are present in the data protection system. This study on data protection identifies deficiencies in the EU Member States.