DATA PROTECTION
35. Article 9 contains a series of data protection
safeguards, but no reference is made to specific data protection
instruments such as the 1981 Council of Europe Data Protection
Convention, the EC data protection Directive and the EU Charter
of Fundamental Rights.[27]
This may be a cause of concern in view of the different systems
of protecting data in the EU and the US. The issue was highlighted
during the scrutiny of the Agreement between Europol and the US
on the exchange of personal data which the Committee carried out
last year[28]
and also by the European Parliament Citizens' Rights Committee,
which said, in relation to the EU-US Mutual Legal Assistance Agreement,
that there were "no common principles on which to act with
regard to (a) the correct use of data (b) the integrity thereof
and (c) the rights of the data subject".[29]
Article 9(2)(b) further states that "generic restrictions
with respect to the legal standards of the requesting State for
processing personal data may not be imposed by the requested State
as a condition
to providing evidence or information".[30]
We urge the Government to ensure that a high level of data
protection, consistent with EU legislation and the 1981 Council
of Europe Data Protection Convention, is required as a condition
for the provision of information to the US.
RECOMMENDATION
36. The Agreements raise important questions to which
the attention of the House should be drawn. We make this Report
to the House for information.
26 Council Framework Decision of 13.6.02 on joint investigation
teams, OJ L 162, 20.6.2002, p 1. Back
27
See also the concerns of Statewatch, noting that no rights of
access to data held or rights of correction and deletion are included
in the agreement and no conditions are set out prohibiting passing
information to third parties. See www.statewatch.org/news/2003/may/06useu.htm Back
28
See in particular the letters of Lord Grenfell to Bob Ainsworth
dated 20 November and 4 December 2002, www.parliament.uk/parliamentary-committees/lords-s-comm-f/cwm-f.cfm Back
29
Op. cit., p 6. Back
30
The Explanatory Note on the Agreement further states that: "A
broad, categorical, or systematic application of data protection
principles by the requested State to refuse co-operation is therefore
precluded. Thus, the fact [that] the requesting and requested
States have different systems of protecting the privacy of data
(such as that the requesting State does not have the equivalent
of a specialised data protection authority) or have different
means of protecting personal data (such as that the requesting
State uses means other than the process of deletion to protect
the privacy or the accuracy of the personal data received by law
enforcement authorities), may as such not be imposed as additional
conditions under Article 9(2)(a)." It is also to be noted
that under Article 9(4) a requested State may apply the relevant
provision of its bilateral treaty in substitution where doing
so will result in less restriction on the use of information or
evidence. Back