Slashdot Mirror
EU Approves Strict New Privacy Rules
An anonymous reader writes: The EU just approved a new set of strict rules governing privacy and data protection, which include a right to be forgotten and to "clear and affirmative consent" for any processing of private data, as well as the right to know when data has been compromised. Culminating more than four years of work, "The reform will replace the current data protection directive, dating back to 1995 when the internet was still in its infancy," the EU said in a statement, "with a general regulation designed to give citizens more control over their own private information in a digitized world of smartphones, social media, internet banking and global transfers." If the rules are broken, the new EU privacy policy includes hefty fines of up to 4% of a firm's total worldwide annual turnover.
I'm amazed people still don't understand what this right is, considering how often it's been explained right here on Slashdot.
The right applies to companies that hold your data, and only when there is no overriding reason for them to keep it. So you can't ask your bank to forget your debt, or a newspaper to delete old editions that mention you.
You can ask Facebook to completely delete your profile instead of just marking it as dormant. It means you can expect credit agencies to not report your bankruptcy from 20 years ago because society says you did your time even if they think otherwise. And yes, it means companies that let others research you have a similar obligation.
Freedom of speech is unaffected, only commercial services. Corporations are not people and don't have the same rights in the EU, and privacy is considered a human right.
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
http://www.europarl.europa.eu/...
The new rules will give individuals greater control over their personal data in the following ways.
The right to be forgotten (Article 17)
Any person will have the right to be âoeforgottenâ/have his or her personal data erased when he or shel no longer wants the data to be processed, provided there are no legitimate reasons for retaining it.
To enforce this right, if a person asks an internet company to erase his/her data, the company should also forward the request to any others that replicate the data.
However, this right would be restricted in some cases, for instance when the data is needed for historical, statistical and scientific purposes, for public health reasons or to exercise the right to freedom of expression.
Also, the right to be forgotten would not apply when the retention of personal data is necessary to fulfil a contract or is required by law.
Purpose of this is to ensure that Facebook, Google and various government and other agencies can't use or sell your private data if you don't want them to.
Not for convicted murderers to be able to erase their past from the internet.
Freedom of speech still applies and still includes news articles about murder.
Just as the laws pertaining to government archives about the case still apply.
Mit der Dummheit kämpfen Götter selbst vergebens
It's worth adding that in the EU less serious crimes are considered "spent" after some time (or age 18 if committed as a child). After that point they don't have to be reported to potential employers. They can still show up on enhanced checks for sensitive jobs (state secrets, working with children etc.)
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC