European Data Protection Supervisor Data Protection and Freedom

European Data Protection Supervisor Data Protection and Freedom of Information at EU level Peter Hustinx 28 September 2010 Freedom of Information Day, Budapest, 28 September 2010

European Data Protection Supervisor Transparency (FOI) • Art 10 ECHR – Co. E Convention 205 (2009) • Art 255 EC Treaty – Regulation (EC) 1049/2001 • Art 42 EU Charter • Art 15 TFEU (Lisbon Treaty) Freedom of Information Day, Budapest, 28 September 2010

European Data Protection Supervisor Data Protection • Art 8 ECHR – Co. E Convention 108 (1981) • Art 286 EC Treaty – Regulation (EC) 45/2001 • Art 7 -8 EU Charter • Art 16 TFEU (Lisbon Treaty) Freedom of Information Day, Budapest, 28 September 2010

European Data Protection Supervisor DP & FOI • Scope for conflict – Interface limited, but relevant » e. g. expenses of MEP, staff data » All documents with personal data? • Dealing with conflicts – Balancing case-by-case – Need for a clear framework » Ensure proportionality & simplicity Freedom of Information Day, Budapest, 28 September 2010

European Data Protection Supervisor EU legal framework • Regulation (EC) 45/2001 – Grounds for lawful processing » Transfers to recipients (“necessity test”) • Regulation (EC) 1049/2001 – Art 4. 1 – “Shall refuse access where disclosure would undermine the protection of. . . ” – Sub b – “privacy and integrity of the individual, in particular in accordance with Community legislation regarding the protection of personal data. ” Freedom of Information Day, Budapest, 28 September 2010

European Data Protection Supervisor EDPS approach • Background Paper (July 2005) – “Public Access and Data Protection” – Analysis of interface, guidelines, checklist • Cooperation with EU Ombudsman • Interventions in Court cases – e. g. Bavarian Lager vs Commission • Review of Regulation (EC) 1049/2001 – EDPS Opinion (June 2008) > draft EP report Freedom of Information Day, Budapest, 28 September 2010

European Data Protection Supervisor Bavarian Lager • Access to minutes of meeting (“UK beer market”) – COM refusal (also) based on “data protection” • CFI (GC) 8 November 2007, Case T-194/04 – Very similar to EDPS approach • ECJ 29 June 2010, Case C-28/08 P – Priority for Regulation (EC) 1049/2001 – Full scope of exception, including “reference” to Regulation (EC) 45/2001 Freedom of Information Day, Budapest, 28 September 2010

European Data Protection Supervisor Follow up of Bavarian Lager • EDPS Press release, 30 June 2010 – “Review more urgent after Court ruling” • Addendum to Background Paper – Analysis ECJ judgment and consequences • “Proactive approach” more relevant – Public disclosure in Regulation (EC) 45/2001 • Interventions in Court cases – Seeking refinement of ECJ judgment Freedom of Information Day, Budapest, 28 September 2010

European Data Protection Supervisor More information: www. edps. europa. eu edps@edps. europa. eu Postal address: Rue Wiertz 60 - MO 63 B-1047 Brussels Freedom of Information Day, Budapest, 28 September 2010