Rina Steenkamp - Privacy and technology
1. Member States shall bring into force the laws, regulations and administrative provisions necessary to comply with this Directive at the latest at the end of a period of three years from the date of its adoption.
When Member States adopt these measures, they shall contain a reference to this Directive or be accompanied by such reference on the occasion of their official publication. The methods of making such reference shall be laid down by the Member States.
2. Member States shall ensure that processing already under way on the date the national provisions adopted pursuant to this Directive enter into force, is brought into conformity with these provisions within three years of this date.
By way of derogation from the preceding subparagraph, Member States may provide that the processing of data already held in manual filing systems on the date of entry into force of the national provisions adopted in implementation of this Directive shall be brought into conformity with Articles 6, 7 and 8 of this Directive within 12 years of the date on which it is adopted. Member States shall, however, grant the data subject the right to obtain, at his request and in particular at the time of exercising his right of access, the rectification, erasure or blocking of data which are incomplete, inaccurate or stored in a way incompatible with the legitimate purposes pursued by the controller.
3. By way of derogation from paragraph 2, Member States may provide, subject to suitable safeguards, that data kept for the sole purpose of historical research need not be brought into conformity with Articles 6, 7 and 8 of this Directive.
4. Member States shall communicate to the Commission the text of the provisions of domestic law which they adopt in the field covered by this Directive.
[Source: Directive 95/46/EC]
| Article 32(1) Directive 95/46/EC | Article 91(1) GDPR |
|---|---|
|
1. Member States shall bring into force the laws, regulations and administrative provisions necessary to comply with this Directive at the latest at the end of a period of three years from the date of its adoption. [...] |
1. This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union. |
[Context: Article 91 GDPR]
| Article 32(2) Directive 95/46/EC | Article 91(2) GDPR |
|---|---|
|
2. Member States shall ensure that processing already under way on the date the national provisions adopted pursuant to this Directive enter into force, is brought into conformity with these provisions within three years of this date. [...] |
2. It shall apply from [two years from the date referred to in paragraph 1]. |
| Artikel 79 lid 1 en lid 2Wbp | |
|
2. De Lid-Staten dragen er zorg voor dat verwerking die reeds bezig is op de datum waarop de ter uitvoering van deze richtlijn vastgestelde nationale bepalingen in werking treden, binnen een termijn van drie jaar te rekenen vanaf die datum wordt aangepast aan die bepalingen. [...] |
1. Binnen een jaar na inwerkingtreding van deze wet worden de gegevensverwerkingen die op dat tijdstip reeds plaatsvonden, in overeenstemming gebracht met deze wet en worden deze gemeld als bedoeld in artikel 27 bij het College of de functionaris. Bij algemene maatregel van bestuur kan de termijn, bedoeld in de eerste volzin, worden verlengd tot ten hoogste drie jaren voor wat betreft de verplichting tot melding. 2. Voor de aanpassing van de verwerking van bijzondere gegevens aan paragraaf 2 van hoofdstuk 2 geldt een termijn van drie jaren met dien verstande dat voor verwerkingen die al plaatsvonden en noodzakelijk zijn voor de uitvoering van overeenkomsten tot stand gekomen voor het tijdstip van inwerkingtreding van deze wet, niet opnieuw toestemming behoeft te worden gevraagd als bedoeld in artikel 23, eerste lid, onder a. |
[Context: Article 91 GDPR, Artikel 79 Wbp]