Brussels, 24/06/2010 (Agence Europe) - On Thursday 24 June, the European Commission requested the UK to strengthen the powers of its data protection authority so that it complies with the EU's Data Protection Directive. The Commission request takes the form of a reasoned opinion - the second stage under EU infringement procedures. In the UK, national data rules are curtailed in several ways, leaving the standard of protection lower than required under EU rules. The UK now has two months to inform the Commission of measures taken to ensure full compliance with the EU Data Protection Directive.
The case particularly concerns the implementation of the EU's 1995 Data Protection Directive (95/46/EC) both in UK law (the Data Protection Act of 1998) and its application by UK courts. The Commission has worked with UK authorities to resolve a number of issues, but several remain, notably limitations of the Information Commissioner's Office's powers: - it cannot monitor whether third countries' data protection is adequate. These assessments should come before international transfers of personal information; - it can neither perform random checks on people using or processing personal data, nor enforce penalties following the checks. Furthermore, courts in the UK can refuse the right to have personal data rectified or erased. The right to compensation for moral damage when personal information is used inappropriately is also restricted. “These powers and rights are protected under the EU Data Protection Directive and must also apply in the UK”, explained the Commission in a press release. (O.L./transl.fl)