Rina Steenkamp - Privacy and technology

My annotated General Data Protection Regulation

[Additional information]

[Directive 95/46/EC]

[Article 27]

Chapter V Codes of conduct

Article 27

Article 27(1)

1. The Member States and the Commission shall encourage the drawing up of codes of conduct intended to contribute to the proper implementation of the national provisions adopted by the Member States pursuant to this Directive, taking account of the specific features of the various sectors.

Article 27(2)

2. Member States shall make provision for trade associations and other bodies representing other categories of controllers which have drawn up draft national codes or which have the intention of amending or extending existing national codes to be able to submit them to the opinion of the national authority.

Member States shall make provision for this authority to ascertain, among other things, whether the drafts submitted to it are in accordance with the national provisions adopted pursuant to this Directive. If it sees fit, the authority shall seek the views of data subjects or their representatives.

Article 27(3)

3. Draft Community codes, and amendments or extensions to existing Community codes, may be submitted to the Working Party referred to in Article 29. This Working Party shall determine, among other things, whether the drafts submitted to it are in accordance with the national provisions adopted pursuant to this Directive. If it sees fit, the authority shall seek the views of data subjects or their representatives. The Commission may ensure appropriate publicity for the codes which have been approved by the Working Party.

[Source: Directive 95/46/EC]

Cross-reference

Article 27(1)

Article 27(1) Directive 95/46/ECArticle 38(1) GDPR

1. The Member States and the Commission shall encourage the drawing up of codes of conduct intended to contribute to the proper implementation of the national provisions adopted by the Member States pursuant to this Directive, taking account of the specific features of the various sectors.

1. The Member States, the supervisory authorities and the Commission shall encourage the drawing up of codes of conduct or the adoption of codes of conduct drawn up by a supervisory authority intended to contribute to the proper application of this Regulation, taking account of the specific features of the various data processing sectors [...]

[Context: Article 38 GDPR]

Article 27(2)

Article 27(2) Directive 95/46/ECArticle 38(2) GDPR

2. Member States shall make provision for trade associations and other bodies representing other categories of controllers which have drawn up draft national codes or which have the intention of amending or extending existing national codes to be able to submit them to the opinion of the national authority.

Member States shall make provision for this authority to ascertain, among other things, whether the drafts submitted to it are in accordance with the national provisions adopted pursuant to this Directive. If it sees fit, the authority shall seek the views of data subjects or their representatives.

2. Associations and other bodies representing categories of controllers or processors in one Member State which intend to draw up codes of conduct or to amend or extend existing codes of conduct may submit them to an opinion of the supervisory authority in that Member State. The supervisory authority shall without undue delay give an opinion in whether the processing under the draft code of conduct or the amendment is in compliance with this Regulation. The supervisory authority shall seek the views of data subjects or their representatives on these drafts.

 Artikel 25 lid 1 Wbp

2. De Lid-Staten bepalen dat beroepsverenigingen en andere vertegenwoordigingsorganen van andere categorieën van voor de verwerking verantwoordelijken die ontwerpen van nationale gedragscodes hebben opgesteld [...] deze voor advies aan de nationale autoriteit kunnen voorleggen.

De Lid-Staten bepalen dat deze autoriteit zich er inzonderheid van vergewist dat de haar voorgelegde ontwerpen in overeenstemming zijn met de ter uitvoering van deze richtlijn vastgestelde nationale voorschriften. [...]

1. De organisatie of organisaties, die voornemens zijn een gedragscode vast te stellen, kunnen het College verzoeken te verklaren dat de daarin opgenomen regels, gelet op de bijzondere kenmerken van de sector of sectoren van de samenleving waarin deze organisaties werkzaam zijn, een juiste uitwerking vormen van deze wet of van andere wettelijke bepalingen betreffende de verwerking van persoonsgegevens. [...]

 Artikel 25 lid 2 Wbp

[...] of voornemens zijn bestaande nationale codes te wijzigen of te verlengen [...]

2. Het eerste lid is van overeenkomstige toepassing op wijzigingen of verlengingen van bestaande gedragscodes.

[Context: Article 38 GDPR, Artikel 25 Wbp]

Article 27(3)

Article 27(3) Directive 95/46/ECArticle 38(3) GDPR

3. Draft Community codes, and amendments or extensions to existing Community codes, may be submitted to the Working Party referred to in Article 29. [...]

3. Associations and other bodies representing categories of controllers or processors in several Member States may submit draft codes of conduct and amendments or extensions to existing codes of conduct to the Commission.

 Article 38(4) GDPR

[...] This Working Party shall determine, among other things, whether the drafts submitted to it are in accordance with the national provisions adopted pursuant to this Directive. [...]

4. The Commission shall be empowered to adopt, after requesting an opinion of the European Data Protection Board, delegated acts in accordance with Article 86 for deciding that the codes of conduct and amendments or extensions to existing codes of conduct submitted to it pursuant to paragraph 3 are in line with this Regulation [...]

 Article 38(5) GDPR

[...] The Commission may ensure appropriate publicity for the codes which have been approved by the Working Party.

5. The Commission shall ensure appropriate publicity for the codes which have been decided as having general validity in accordance with paragraph 4.

[Context: Article 38 GDPR]