Rina Steenkamp - Privacy and technology

My annotated General Data Protection Regulation

[Treaty on the Functioning of the European Union]

Having regard to the Treaty on the Functioning of the European Union, and in particular Article 16(2) and Article 114(1) thereof,

January 2012

Explanatory memorandum

3. Legal elements of the proposal

3.1. Legal basis

This proposal is based on Article 16 TFEU, which is the new legal basis for the adoption of data protection rules introduced by the Lisbon Treaty. This provision allows the adoption of rules relating to the protection of individuals with regard to the processing of personal data by Member States when carrying out activities which fall within the scope of Union law. It also allows the adoption of rules relating to the free movement of personal data, including personal data processed by Member States or private parties.

A Regulation is considered to be the most appropriate legal instrument to define the framework for the protection of personal data in the Union. The direct applicability of a Regulation in accordance with Article 288 TFEU will reduce legal fragmentation and provide greater legal certainty by introducing a harmonised set of core rules, improving the protection of fundamental rights of individuals and contributing to the functioning of the Internal Market.

The reference to Article 114(1) TFEU is only necessary for amending Directive 2002/58/EC to the extent that that Directive also provides for the protection of the legitimate interests of subscribers who are legal persons.

[Source: January 2012 | Context: Proposal from the European Commission]