001148/EU XXVII. GP Eingelangt am 31/10/19
Council of the European Union Brussels, 31 October 2019 (OR. en)
6365/14 ADD 1 DCL 1
DATAPROTECT 25 JAI 80 MI 145 FREMP 24 RELEX 114
DECLASSIFICATION of document: 6365/14 ADD 1 RESTREINT UE/EU RESTRICTED dated: 14 February 2014 new status: Public Subject: Negotiations on the modernisation of the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of personal data (EST 108) - Follow-up of the CAHDATA meeting on 12-14 November 2013 and - preparation of CAHDATA meeting on 28-30 April 2014
Delegations will find attached the declassified version of the above document.
The text of this document is identical to the previous version.
6365/14 ADD 1 DCL 1 ni SMART.2.C.S1 EN
www.parlament.gv.at RESTREINT UE/EU RESTRICTED
COUNCIL OF Brussels, 14 February 2014 THE EUROPEAN UNION
6365/14 ADD 1
RESTREINT UE/EU RESTRICTEDR
DATAPROTECTDATAPRROTTECCT 2525 JAIJAI 800 MI 1451445 FREMPFRREME P 2424 RELEXREELELEX 114111 4
NOTE from: Commissionission ServicesServices to: Delegationstions Subject: Negotiationsations on the modernisation of ththee CouncilCoounccilil ofof EuropeEurope Convention for the Protectionion of Individuals with regarregardd tto AutomaticAutomo aatiic Processing of personalpersona data (EST 108)08) - Follow-upw-up of the CCAHDATAAHDATA meetingmeeetinng ono 12-1412-14 NovemberNovember 2013 andand - preparationration of CAHDATACAHDATA memeetingeete ining on 228-308-330 April 20120144
The delegations wwillill find in the AAnnexnnnexe a tatableabble ffofollowingllowing ththee CCAHDATAAHDATA mmeetingeeting oon 12-14 November 2013 aandnd in view off tthehe CCAHDATAAHHDAATA mmeetingeeting on 2828-30-30 April 20142014..
______
6365/14 ADD 1 CHS/ec 1 DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
ANNEX
Negotiations on the modernisation of DAPIX meeting 20.02.2014 the Council of Europe Convention for the Protection of Individuals with Information by the Commission with a view regard to Automatic Processing of to the 2nd CAHDATA meeting on 28-30 April personal data (EST 108) 2013 (Strasbourg)
AD HOC COMMITTEE ON DATA PROTECTION (C(CAHDATA)AHDATA) WORKING DOCUMENT CAHDATA(2013)01CAHDATA((202 13)01
CCommentsomments on WorkWorkinginng DocumentDoD ccuumment CConventiononvention 108 Modernisation proposalsproropposaalss CAHDATA(2013)01CAHA DATA(2013)01
Note: the presentt ddocumentocument aaimsimms att mmakingaka iing visivisibleble the modernisation proposalsproposal adopted by the Consultative Committeemmittee at its 2929thth PlenaryPllenarry meeting (2(27-307-30 November 2013) andand the preliminary comments thereto..
CURRENT TEXTEXT OOFF THTHEE MODERNISATIONMODERNISATION COMMENTSCOM CONVENTIONTIONN ANDANDD PROPOSALSPROPOSALS ADDITIONALL PPROTOCOLROOTOTOCCOOL Title : Conventionntion for thethhe Title : ConventionConvention for the Protection of Individualsndividuals with Protection of Individuals with Regard to the Processing of Regard to the Processing of Personal Data Personal Data Preamble Preamble
The member States of the Council unchanged of Europe, signatory hereto,
6365/14 ADD 1 CHS/ec 2 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Considering that the aim of the unchanged Council of Europe is to achieve greater unity between its members, based in particular on respect for the rule of law, as well as human rights and fundamental freedoms; Considering that it is desirable to Considering that it is necessary, extend the safeguards for given the diversification, everyone's rights and fundamental intensification and globalisation freedoms, and in particular ofof data processing and InitialIniti support frontiers the rightht to the respect exchangesexchanges of personal data, too for privacy, takingng account of the guaranteeguarantee human dignity anandd thethhe increasing flow acrosscross of pepersonalrsonal protectionprotection of human rightsrights andanand data undergoingng automatic fundamental freedoms of everyevverry processing; person,person, in particular ththroughroouggh thethhe right to control one’sone’ss personalperersos nnal datadata and the proceprocessingssing ofo susuchuchh data.data. Reaffirming at thee same time theitheirr Recalling that tthehhee rrightigi hth to commitment too freedomfreedom off protectionprotection of pepersonalersrsonal ddataatta iis to be information rregardlessegardless ofof consideredconsidered in rerespectesppeect ofo iitstts role iinn InitialIniti support frontiers; societysociety anandnd thtthatat iitt hhahass to be reconciledreconciled wwithitth otothertheer hhuhumanman rights and fufundamentalnddammenntaal freedomsfreedoms,, includingincluddini g freedomfreedom oof expression; ConsideringConsiderrinng thtthathaat this Convention permitspermits accountacccoount to be taken, in the implementationimmplp eemenntattion of the rules InitialIniti support laidlaaidd downdown therein, of the principle ofof thethe rrightigi ht of public accessacacccesss to official documents ;
6365/14 ADD 1 CHS/ec 3 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Recognising that it is necessary to Recognising that it is necessary to reconcile the fundamental values promote at the global level the of the respect for privacy and the fundamental values of respect for Initial support free flow of information between privacy and protection of peoples, personal data, thereby contributing to the free flow of information between peoples; Recognising the interest of a reinforcement of international Initial support cooperation between the Parties to thethe CConvention.onvention. Have agreed as follows:ollows: unchangedunchanged
Chapter I – Generaleral provisionprovisionss ChapterChapter I – GGeneraleneral provisprovisionsionsns
Article 1 – Objectct and purpose ArticleArticle 1 – Object and purposepuurrpop ses
The purpose of thishis Convention is The purpose of this CoCConventiononnvvenentiiono isis to secure in the territoryterritory of each toto secure for eveveryery iinindividualddiividual Party for everyery individual, subjectsubject to the jurisdictionjuriisds icctiiono of the whatever his nationality oorr PartiesParties, whateverwhatevveer ttheirheh iri nnationalityattionality InitialIniti support residence, respectct for his rights oror resiresidence,dence, thethhe prprotectionrotection ooff and fundamental freedomsfreedoms,, and in their personalpersono al datadaata when particular his rightght to privacy,privacy, undergoingundergoinngg processing,proccesssiing, thus with regard to automatic contributingcontributinngg toto respectreespect for theitheirr processing of personal data rightsrights andandn ffundamentalunndad mem ntal freedoms, relating to him (“data and inn pparticuara tit cuc larlaar ththeireir rightright to protection”). privacy.privacy. Article 2 – Definitionsitions ArticleArA tiiclc e 2 – DDeDefinitionsfinitions
For the purposesposes of ththishiss unchangedunchhanngeg d Convention: a “personal ddata”ata” memeansanns anaanyy unchangedunnchc anged information relatingng to ann identified or identifiabletifiable individual (“data subject”);subjecct””);) b “automated ddataata fifile”lee” memeansans DeletedDeleted – see 33.1.1 belowbelow any set of data undergoingdergoing automatic processing;i
6365/14 ADD 1 CHS/ec 4 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
c “automatic processing” c “data processing” means includes the following operations any operation or set of operations if carried out in whole or in part which is performed upon by automated means: storage of personal data, and in particular Initial support data, carrying out of logical and/or the collection, storage, arithmetical operations on those preservation, alteration, data, their alteration, erasure, retrieval, disclosure, making retrieval or dissemination; available, erasure or destruction of data, or the carrying out of logical and/or arithmetical operations on data; where no automated processing iss used,used, data processing means ththehe operationsoperations carried out withinwithhinin a InitialIniti support structuredstructured sesett esestablishedtabbllishs edd according to any criteriacriteria whichwwhhicch allow to search for personalpersonnal ddataata a ; d “controller o off ththee fil file”e” d “controller”“controller” m meanseae nsn t thehhe means the naturall or legal person, naturalnatural or legal pperson,eersoon, publicpublb ic public authority, agency or anyany authority, service,servicee, agencyaggenencyy oror anyany other body whoo isis competent otherother bodybody whichwhicch aloneaalonne oro jjointlyointly according to the national law to withwith oothersthers hahasas thethhe decision-ddecision- decide what shouldld be the purpose making powerpooweer withwiith respectrespect to InitialIniti support of the automated data filefile,, which datadata processing.proceesssinng.g categories of personalsonal data should be stored and wwhichhich operations should be applied to themthem..
e “recipient”“recipi ieent” means a natural oorr legallegag l person,ppersson, public authority, service,sseervicce,e agencyaagency or ananyy other bodbodyy InitialIniti support to whomwhoom datadata araree ddisclosedisclosed or mademaade available;available;
f “processor“ means a natural oror legal person, public authority, service,service, agency or any other bodybody InitialIniti support which processes personal data on behalfbehalf of the controllercontroller;;
6365/14 ADD 1 CHS/ec 5 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 3 – Scope Article 3 – Scope
1 The Parties undertake to 1 Each Party undertakes to apply apply this Convention to this Convention to data automated personal data files and processing subject to its automatic processing of personal jurisdiction, thereby protecting data in the public and private the right to protection of sectors. personal data of any person Initial support subject to its jurisdiction.
1bis This Convention shall not apply to data processing carried outout by a natural person for ththehe exercise of purely personal orr householdhousehold aactivities.ctivities.
2 Any State may,may, at the time deletedelete of signature or whenhen depositing its instrument off ratificationratification,, acceptance, approvaloval or accession, or at any later time,me, give notice byby a declaration addressedddressed ttoo ththee Secretary Generall of the Council of Europe: a that it willl not apply this deletedelete Convention to certainertain categories of automated personalsonal data files, a list of which will be deposited. In this list it shaallll not include,includee, however, categoriesies of automatautomatedeed data files subjectject under iitstst domestic law to data protectionproteecttioi n provisions. Consequently,equently, iit sshallhah lll amend this listst byy a newnewe declaration wheneverneverr aadditionalddd ittionan l categories of automatedomateed peppersonalrrsoonal data files are subjecubjectedted too datadata protection provisionssions ununderdeer its domestic law;
6365/14 ADD 1 CHS/ec 6 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
b that it will also apply this delete Convention to information relating to groups of persons, associations, foundations, companies, corporations and any other bodies consisting directly or indirectly of individuals, whether or not such bodies possess legal personality; c that it will also apply this delete Convention to personalersonal data files which are nnotot processed automatically. 3 Any Statee which has deletedelete extended the scope of this Convention by any of the declarations providedvided for in susubb- paragraph 2.b or c above may give notice in the saidd decdeclarationlaration that such extensions shallshall apply onlyonly to certain categoriesories of personal data files, a list ooff which will be deposited. 4 Any Partyy which has deletedelete excluded certainn categories ooff automated personalnal data files by a declaration providedded for in susubb- paragraph 2.a aabovebove may not claim the applicationication of this Convention to suchuch categories byy a Party which hasas not exclexcludedudeedd them. 5 Likewise, a Party whwhichhich hashaas deleteded lete not made one oror otherother ofof tthehe extensions providedded ffoforor in subsubu - paragraphs 2b andnd c aboveaba ovo e mmamayy not claim the applicationpplication off tthishis Convention on thesehese poinpointstss with respect to a Party which has made such extensions.
6365/14 ADD 1 CHS/ec 7 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
6 The declarations provided delete for in paragraph 2 above shall take effect from the moment of the entry into force of the Convention with regard to the State which has made them if they have been made at the time of signature or deposit of its instrument of ratification, acceptance, approval or accession, or three months after their receipt byy the Secretary General of the Councilouncil of Europe if they have beenen made at anyany later time. These ddeclarationseclarations mamayy be withdrawn, in whole or in part, by a notification addressed to thethe Secretary Generall of the Council of Europe. Such wwithdrawalsithdrawals shall take effect three mmonthsonths afterafter ththee date of receipteipt of such notification. Chapter II – Basicsic principles for ChapterChapter II – BasicBaasiic principlesprinciiples for data protection the protectiprotectiononon ooff pepersonalrsr oonal data Article 4 – Dutiess ofof thethe PartiesParties ArticleArticle 4 – DuDDutiesutities ofof theththe PartiesParties
1 Each Partyy shall take the 1 EachEEach PPartyara tyt shalshalll taktakee ththee necessary measuressures in its necessarynecessarary memmeasuresasures in its domestic domestic law to givegive effect to the lawlaw to ggiveivi e efeffectffect to the provisions InitialIniti support basic principles foror data protection setseet ouooutt inn thistht is ConventionConvention and set out in this chapter.pter. ensureene sus rer ththeireir effectiveeffective application.aapplplici attioi n. 2 These measuresasures sshallhall bbee 2 TheseTThese mmeasureseasures sshallhall be taktakenen taken at the latestst at thethe ttimeimme off byy each Party prior to InitialIniti support entry into force off this ConventionConvvenentitioon ratificationrratification oror accessionaccession ttoo thithiss in respect of that PParty.arty. ConventionCConvention. 3 Each Party undertakes to allow thethe CConventiononvention CCommitteeommittee providedprovided for in Chapter V to evaluate the observance of its engagements and to contribute Initial support actively to this evaluation, notably by submitting reports on the measures it has taken and which give effect to the provisions of the present Convention.
6365/14 ADD 1 CHS/ec 8 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 5 – Quality of data Article 5 – Legitimacy of data processing and quality of data
1 Data processing shall be proportionate in relation to the legitimate purpose pursued and reflect at all stages of the Initial support processing a fair balance between all interests concerned, be they public or private interests, and the rights and freedoms at stake.
2 Each Party shall provideprovide thtthathatt data processing can be carcarriedriieedd ooututut ReservationRReses rvati – issue open onon the basis of the free, specific,speccifi icc, pendingpending EU internal informedinformed andand [explicit,exexplp iccit, negotiationsneg unambiguouss] consentconsent off tthehehe ddataata a subjectsubject or of some llegitimateegiti immatte babasissisis laidlaid down by law.law.
Personal dataa undergoing 3 PersoPersonalnaal dataddata uundergoingndn ergoing InitialIniti support automatic processingsing shall be:be: processingprocessing sshallhah lll bbee : a obtained and processed a. procesprocessedssed lalawfullyawffulu lly and fairly.fairly. InitialIniti support fairly and lawfully;y; b stored for specified and b. collectedccoollleected forfor explicitexplicit, legitimate purposesses and not used specifiedsppece ified anandnd legitimate purposes in a way incompatibleatible with those andannd nnotot processedpprocessed inin a wayway InitialIniti support purposes; incompatibleinncoomppaatibble with those purposespurposes; c adequate, relevantelevant aandnd nnotott c.c adequate, relevant, not excessive in relationelation tto tthehe excessiveexxccessive anandd lilimitedmited to tthehe InitialIniti support purposes for whichwhich theytheh y areaare minimummminimum necessary in relation to stored; thethe ppurposesurposes for which they are processedprocessed; d accurate andand,, whwwhereere unchangedunchanged necessary, kept upp to date; e preserved in a form which e preserved in a form which permits identification of the data permits identification of data Initial support subjects for no longer than is subjects for no longer than is required for the purpose for which necessary for the purposes for those data are stored. which those data are processed.
6365/14 ADD 1 CHS/ec 9 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 6 – Special categories of Article 6 – Processing of data sensitive data Personal data revealing racial 1 The processing of genetic data, origin, political opinions or of personal data concerning religious or other beliefs, as well offences, criminal convictions and as personal data concerning health related security measures, the or sexual life, may not be processing of biometric data processed automatically unless uniquely identifying a person, as domestic law provides appropriate well as the processing of personal safeguards. The same shall apply data for the information they to personal dataata relating to revealreveal relating to racial origin, criminal convictions.ons. politicalpolitical opinions, tradtradee-unionunion ReservationReesservatio – articulation membership,membership, religious or ootherthhere withwiw thh currentcurr EU acquis beliefs,beliefs, health or sexual lifelife,, shsshallhaall onlyonly be allowed wherewhere thetheh applicable law pprovidesror vividees appropriate sasafeguards,afeguuarrdsd , complementingcomplementing ththoseosse of tthehee presentpresent Convention.Convention.
2. Appropriate ssafeguardsafafeguardds shall preventprevent the rirrisksisks ththathat the processingprocessing ofof suchsuuchh ssensitiveensiittive data maymay presentpresennt too the iinterests,ntn errests, rights andand ffundamentalundammenental frffreedomseeddoms ooff thethe data ssubject,ububjej ctt, nonotablyotaably a risk ooff discrimination.discrimminan tit ono .
Article 7 – Data securitysecurity ArticleArtit clle 7 – Data securitsecurityy
Appropriate securityrity meameasuressuurees 1 EveryEEvery Party shall provide shall be taken for the pprotectionrooteectc ioon off thatthat the controllercontroller,, and,and, where personal data storeded iinn auautomatedtot mateed applicableapplicable the processor,processor, ttakesakes InitialIniti support data files against aaccidentalcciddeentat l oor thethe appropriate security measures unauthorised destructionruction oorr against accidental or unauthorised accidental loss as well as aagainstgaainst access,access, destruction, loss unauthorised access,ess, alteration oorr modificationmodification oorr ddisseminationissemination of dissemination. personal data.
6365/14 ADD 1 CHS/ec 10 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
2 Each Party shall provide that the controller shall notify, without delay, at least the supervisory authorities within the meaning of Initial support Article 12 bis of this Convention of those data breaches which may seriously interfere with the rights and fundamental freedoms of data subjects.
Article 7bis – TransparencyTransparency ofof processing 1 Each Party shall see to it thtthatatt thethe cocontrollerntroller eensuresnsures tthehee transparencytransparency of data proceprocessingsss inng by informinginforming the data subjesubjects,ctts,s uunlessnlese s theythey have alreadalreadyy bebeenenn iinformed,nfnforo mmed,d ofof at least the identityidentityy andandn hhabitualabbiti uaual residenceresidence oror establishmentestabliishs mmentt ofof theththe InitialIniti support controller,controller, the puppurposesrppososess ooff the processingprocessing carcarriedriiedd oout,utu , ththehe data processed,processed, tthehe rrecipientseccipiei nts oorr categoriescategories ooff rerecipientsecic pip ennts of the personalpersonal data,datta,a aandnd ttheheh means ooff exercisingexercising tthehe rrightsigghth s set out in ArticleArticle 8,8 as wewellelll as any otherother informationinformaattion nennecessaryecessary to ensure fairaiair and lallawfulawfwful ddataata processing.
2.2 WhereWhW ere the personal data are not collectedcolllece teed from the data subjects, thethhe ccocontrollerontroller sshallhall nnonethelessonetheless nnotot bebe required to provide such InitialIniti support informationini formation where the processing isi expressly prescribed by law oror thisthis proves to be impossible oorr involvesinvolves disproportionatedisproportionate effoefforts.rts.
6365/14 ADD 1 CHS/ec 11 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 8 – Additional Article 8 – Rights of the data safeguards for the data subject subject
Any person shall be enabled: Any person shall be entitled: a to establish the existence of a not to be subject to a decision an automated personal data file, significantly affecting him/her, Initial support its main purposes, as well as the based solely on an automatic identity and habitual residence or processing of data without having principal place of business of the their views taken into controller of the file; consideration; b to object at any time to tthehe processingprocessing of personal ddataatta concerningconcerning him/her unless thtthee InitialIniti support controllercontroller ddemonstratesemonsttraatet s compellingcompelling legitimate grougroundsndds fofforr the processing which overrideoverrridde ththeirheiir interestsinterests or rights and fundamentalfuundamene tat l freedoms ; b to obtain at reasonablereasonable c toto obtain, onon request,reequq ese t, at intervals and withoutithout excessiveexcessive reasonable intintervalserrvaalsl aandndn wwithoutiti hout delay or expense confirmation ofof excessive delaydelaay oro expense whether personal data relating to confirmationconfirmationn ooff thtthehe prpprocessingoocessing ooff him are stored inn ththee aautomatedutomated personalpersonal ddataaata rerelatingelatiingn ttoo him/her, data file as well ass cocommunicatiommunication thethe cocommunicationmmmmunnicaattioi n in anan to him of suchch datadata in an intelligibleintelliggibblel fformorrm of the dadatata intelligible form; processed,processsed,d allala l aavailablevailable informationinformaatioi n onn their origin, on ReservationReservati – issue open thethhe prespreservationerrvaation period as wewellll asas pendingpending EU internal anyanny otheroto heer informationiinformation that the negotiationsneg controllercoconttror lllerer is required to provide to eensurensuure the trtransparencyansparency ooff processingprp ooceessing in accordance with ArticleArArticlc e 7bis paragraph 11;;
d to obtain, on request, knowledge of the reasoning underlyingunderlying the data processing, the results of which are applied to him/her ;
6365/14 ADD 1 CHS/ec 12 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED c to obtain, as the case may e to obtain, upon request, as the be, rectification or erasure of such case may be, rectification or data if these have been processed erasure of such data if these have Initial support contrary to the provisions of been processed contrary to the law domestic law giving effect to the giving effect to the provisions of basic principles set out in Articles this Convention; 5 and 6 of this Convention;
6365/14 ADD 1 CHS/ec 13 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
d to have a remedy if a See f below request for confirmation or, as the case may be, communication, rectification or erasure as referred to in paragraphs b and c of this article is not complied with. f to have a remedy if a decision significantly affecting them has been taken without taking into consideration their Initial support viewsviews or nnoo response is given to a requestrequest for confirmaticonfirmation,onn, communication,communication, rectification,rectificationn, erasure or to an objectiobjection,onn, asa referredreferred to in this ArticlArticle;e; g to benefit, whawhateverteevev r ththeirheiir residence,residence, from the assistanceassiisttaanccee ooff a supervisorysupervisory authoritauthorityy wiwwithintht ini tthehhe InitialIniti support meaningmeaning of ArtArticleiccle 1122 bbibis,s, iinn exercising the rrightsigghtts providedprp ovviddede byby thisthis Convention.Conventionn.
6365/14 ADD 1 CHS/ec 14 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 8bis – Additional obligations 1- Each Party shall provide that the controller, or where applicable the processor, shall take at all stages of the processing all appropriate measures to implement Initial support the provisions giving effect to the principles and obligations of this Convention and to establish internal mechanisms to verify and be able to demonstrate at least to thethe supervisorysuupervisory authorities providedprovided for in Article 12 bis ooff thisthis Convention the comcompliancepliannce with the applicableapplicable law . 2- Each PartPartyy shall pproviderovided tthathaat thethe controller, or where applicableappplicac blb e thethe pprocessor,rocessor, shall carcarryryy ooututt a rriskisi k analysisanalysis of the ppotentialotentiaal imiimpactmpap ctc ooff thethe intended data pprocessingrocceessingg oonn ththehe rightsrights and fundamentalfundameentn ala ffreedomsreedomms ofof the data subsubjectject aanandd deddesignesiigng data processingprocessing operationsoperaatit onns ini suchsuuch a way as to preventprreveveent oro aatt least minimiseminimise thethe riskrisk ofof interferenceintteerference InitialIniti support with those rightsrighth s andaand fundamentalfuundamental freedoms.freedoms.
3- EaEachachch PartyPartty shshallhaall pproviderovide that thethe pproductsrooducu tst andand sserviceservices intended for the datadaata pprocessingrorocessing shall take intoinntot accountacccoountn tthehe imimplicationsplications ooff thethhe rirightght tot the protectionprotection ooff personalpep rsr onnall datadata a from the stagestage ooff theirthheir dedesignessign and facilitate the compliancecompliiaance of the pprocessingrocessing with thethe applicableappplicable lawlaw..
4- Each PartPartyy can take the measuresmmeasures needed to adaadaptpt the applicationapplication of the pprovisionsrovisions of the previousprevious paragraphs,paragraphs, accordingaccording to thethe size of the controllercontroller,, or where applicableapplicable the pprocessor,rocessor, the volumevolume or nature of data processedprocessed and,d more generally,ll iin lilight ht of f the th risks for the interests, rights and fundamental freedoms of the data subjects.
6365/14 ADD 1 CHS/ec 15 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 9 – Exceptions and Article 9 – Exceptions and restrictions restrictions 1 No exception to the 1 No exception to the provisions of Articles 5, 6 and 8 principles expressed in this of this Convention shall be Chapter shall be allowed, except allowed except within the limits to the provisions of Articles 5.3, Initial support defined in this article. 7.2, 7bis and 8 when such derogation is provided for by law and constitutes a necessary measure in a democratic societyy for:for:
2 Derogation from the deletedelete provisions of Articlesticles 5, 6 and 8 of this Conventionntion shall be allowed when suchuch derogation is provided for by the law of the Party and constitutesutes a necessarynecessary measure in a democraticocratic society in the interests of: a protecting State security, a thethe protectionprotecctiioon ofof nationalnational public safety, the monetarmonetaryy security,security, pupublicublblic ssafety,afety,, important interests of thee SStatetate oror ththee economiceconomic aandndn ffinancialinnaanciial interestsinterests InitialIniti support suppression of criminalminal offences;offences; ofof the SStatetatee oorr thethhe preventionprp evention and suppressionsuppreesss ioi n off criminalcriimminal offences; b protecting tthehe data subject b thethe protectionpprottection of the data or the rights andnd freedoms ooff subjectsuubjece t oror tthehhe rights and freedoms others. ofof others,oththeers, notablynotably freedom ofof InitialIniti support expressionexpresssisioon.
2 RestrictionsRestrictions onon thethe exerciseexercise of thethe provisions specified in Article 12 may also admitted where thetheyy InitialIniti support are provided bbyy lalaww anandd coconstitutenstitute a necessary measure in a democraticdemocratic societysociety fforor thethe freedomfreedom of expression.
6365/14 ADD 1 CHS/ec 16 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
3 Restrictions on the exercise 3 Restrictions on the exercise of of the rights specified in Article 8, the provisions specified in Articles paragraphs b, c and d, may be 7bis and 8 may be provided by provided by law with respect to law with respect to data Initial support automated personal data files used processing for statistical for statistics or for scientific purposes or for the purposes of research purposes when there is scientific research, when there is obviously no risk of an obviously no risk of infringement infringement of the privacy of the of the rights and fundamental data subjects. freedoms of data subjects. Article 10 – SanctionsSanctions and Article 10 – SanctionsSanctions and remedies remediesremedies Each Party undertakestakes to establish Each Party undertakes to estestablishabblil shh appropriate sanctionsanctions and appropriate judicial and nnon-onn- remedies for vviolationsiolations off judicialjudicial sanctionssanctions andand reremediesemmeedieses InitialIniti support provisions of domesticmestic law giving forfor vviolationsiolations ofof domesticdomeessticc llawawaw effect to the basicic prprinciplesinciples foforr givinggiving effect to the provisionsprrovvisi ioonss ofof data protection set out in this this Convention.Convention. chapter. Article 11 – Extendedended protectionprotection ArticleArticle 11 ExtendedExtenddede protectionprooteecttiion
None of the provisionsovisions of this unchangedunchanged chapter shall bee interpreted as limiting or otherwisewise affecting the possibility for a Partyarty to grant data subjects a widerer measure ooff protection than thathat stistipulatedpulated in this Convention. Chapter III – Transborderansborder ddataataa ChapterChC aappter IIIIIII – TranTransbordersborder flows flowsflowws off ppersonalersonal datadata Article 12 – Transborderansborder flowsffloows ArticleArtticcle 12 - TransborderTransborder flowsflows of personal dataa and ddomesticomomesestiic off ppersonalersonal data law 1 The followingwing pprprovisionsovvissionss DeleteDelete shall apply to thee tratransnssferfeer acrossaacrross national borders,s, by wwhateverhatet ver medium, of personal data undergoing automaticti processing i or collected with a view to their being automatically processed.
6365/14 ADD 1 CHS/ec 17 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
2 A Party shall not, for the 1. A Party shall not, for the sole sole purpose of the protection of purpose of the protection of privacy, prohibit or subject to personal data, prohibit or subject Initial support – a special authorisation transborder to special authorisation the reformulation, as flows of personal data going to the transfer of data to a recipient who discussed during the 1st territory of another Party. is subject to the jurisdiction of CAHDATA meeting, can another Party to the Convention, only be accepted to the unless the Party referred to at the extent that it does not beginning of the present paragraph change the underlying is regulated by binding harmonised principle (MS may further rules of protection shared by States restrict dadata flows to other belongingbelonging to a regregionalional PartiesPaP rties ooff Convention 108 internationalinternational organisation and thethe ini accordanceaccor with the transfertransfer of data is not governegovernedd byy rulesruuleles of thet EU acquis) measuresmeasures provided for in paragraphparagraph 3.b3.b..
3 Nevertheless,ss, each PartPartyy 2.2. WWhenhen the recipientrecippientn iiss shall be entitled too derogate from subjectsubject to the jurisdictionjurisdicttioi n ofo a the provisions of pparagrapharagraph 2:2: State or internationalinternationaall oorganisationrgana isi ation which is not PartyParty toto thetht e Convention,Convention, thethe transfertrtransfferr ooff data cancan only occoccururu wwhereheheree aann appropriateappropriate lelevelevvel off ppersonalere ssonal data protectionprotection bbasedasased oonn ththehe principles InitialIniti support ofof the CConvono ventionenntionn iiss guaranteedguaranteed..
3. AnAn appropriateapapppropriate level of protectionproto ectionn cancaan be ensured byby::
a)a ttheheh llawaww of that State oorr internationalinteernr attioi nal organisation, includinginclludding the applicable internationalini teerrnational treatiestreaties or agreements,aga reements, oorr
b ad hoc or approved standardised safeguardssafeguards providedprovided byby lelegallygally bindingbinding and enforceable instrumentsinstruments adopted anandd implementedbyi l db the h persons involved in the transfer and further processing
6365/14 ADD 1 CHS/ec 18 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
a insofar as its legislation 4. Notwithstanding the provisions includes specific regulations for of the previous paragraphs, each certain categories of personal data Party may provide that the transfer or of automated personal data of data may take place, if : files, because of the nature of those data or those files, except a) the data subject has given where the regulations of the other his/her specific, free and [explicit, Initial support Party provide an equivalent unambiguous] consent, after being protection; informed of risks arising in the absence of appropriate safeguards, or b)b) the specific interests of the data subject require it in the particularparticular case, oror c)c) prevailing legitimate interests,interests, in particular importantimportaantt publicpublic interests, are providedbyproviddedbyy lawlaw and constitute a necessaryneccessasaryr measuremeasure in a democraticdemocratit c sosociety.ocic etty.y 5.5. Each Party shashallll pprovideroovidee tthathat thethe competent susupervisoryupeervr isi orry authority withwithininn thetheh meaningmeaaninng of ArticleArticle 12 bbisiss ooff thetht e CoCConventionnnvention be informedinformed ooff ththee modalitiesmoodad llitties regulatingregulating thethehe transferstranssfef rrs of data providedprovideded fforor iinn papparagraphsaraagraphs 3.b InitialIniti support whenwhen adad hohocc sasafeguardsafeegguards are set up, 4.b4.b anandd 4.44.c.c.c IItt shshallhall also provide thatthhata the supervisorysuupeervisory authority be entitledenntit tlede toto requestrer quest that the person whowwho transfersdata,trt ana sfs ersdata, or the recipient, demonstratedemonsstrt ate the quality and effectivenessefe feectctiveness ooff aactionsctions taktakenen anandd thattht att thethe supervisory authorityty be entitledeentitled to prohibit, suspend oror subjectssubject to condition such transfers ofof data.data.]] . b when the ttransferransfer is mmadeade DeleteDelete from its territory toto the terrterritoryitoory ooff a non Contractingng State through the intermediary of the territory of another Party, in order to avoid such transfers resulting in circumvention of the legislation of the Party referred to at the beginning of this paragraph.
6365/14 ADD 1 CHS/ec 19 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 2 – Transborder flows of (Article 12 above replaces the old personal data to a recipient which Article 12 and Article 2 of the is not subject to the jurisdiction of Additional Protocol) a Party to the Convention (Additional Protocol) 1 Each Party shall provide for the Delete transfer of personal data to a recipient that is subject to the jurisdiction of a State or organisation that is not Party to the Convention only if that State or organisationn ensures an adequate level ooff pprotectionrotection foforr the intended data ttransferransfer 2 By way of deroderogationgation from DeleteDelete paragraph 1 of AArticlerticle 2 of this Protocol, each PPartyarty mamayy allow for the transfer offp personalersonal data: a if domestic law providesprovides forfor DeleteDelete it because of: – specific interestserests of the data DeleteDelete subject, or – legitimate prevailingprevailing DeleteDelete interests, especiallyially imimportantportant public interests, orr b if safeguards,ds, which can in DeleteDeletee particular result ffromrom contractual clauses, are providedovided by the controller responsiblensible for the transfer and are foundound adequateadequate bbyy the competentnt authoritauthoritiesiees according to domesticestic lawlaw.. Additional Protocolocol ChapterChapter III bis SupervisorySupervisory authoritiesaua thhorities Article 1 ArticleAArticle 12bis SupervisorySupypervisory authoritiesauthorities 1 Each Party shalll pprovideroviidee fforoorr oonene 1 Each ParPartyty shall pproviderovide for one or more authoritieshorities toto be oror mmoreore aauthoritiesuthorities ttoo be responsible forfor ensuringennssuring responsibleresponsible for ensurinensuringg InitialIniti support compliance with the measures in compliancecompliance with the measures in its domestic law giving effect to its domestic law giving effect to the principles stated in Chapters II the principles of this Convention. and III of the Convention and in this Protocol.
6365/14 ADD 1 CHS/ec 20 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
2 a To this end, the said 2 To this end, such authorities: authorities shall have, in particular, powers of investigation a. shall have powers of and intervention, as well as the investigation and intervention; power to engage in legal proceedings or bring to the a’. are consulted when drawing attention of the competent judicial up legislative and administrative authorities violations of measures relating to the protection provisions of domestic law giving of individuals with regard to the effect to the principles mentioned processing of personal data; in paragraph 1 off Article 1 of this Protocol. b. shall perform the functions relating to transfers of data InitialIniti support provided for under Article 112,2,, notablynotably the approval of standardisedstandardised safeguards;safeguards;
c. shallshall have the powerpowerr toto issueissuue decisionsdecisions with respectrespect ttoo domesticdomestic law givgivinging effectefffef ctc ttoo ththehe provisions of this ConventionCono vev ntn ioon andand may in particularparrtticuular sanctionsaanccttion administrativeadministrativee offencesofff eencees;
d. shall havehaavee tthehehe ppoweroowerer to engage inin legallegal prproceedingsocceee diingngs or to bring to thethe attentionatteenttion off tthehe competent judicialjudiciall aauthoritiesuthoorir tit ees violations of provisionsprovisionsns ofof domesticdod mestic law giving effectefffeectc to ththehe provisions of this Convention;Coonvn ene tit onn;
e. shallshalll be responsible for raisingraaisi inng awareness of and providingprrooviding information on data protectionpprotection; b. Each supervisorysory aauthorityutu hoh riityty 3 Each ssupervisoryupervisory authoriauthorityty cancan shall hear claims llodgedodged byby anyanny be requesterequestedd by any person to person concerningg the protprotectionecction investigateinvestigate a claim concerning the of his/her rights anddf fundamental d l protectioni of f hihis/her /h rights i h and d InitialIii support freedoms with regard to the fundamental freedoms with regard processing of personal data within to the data processing within its its competence. competence and shall inform the data subject of the follow-up given to such a claim.
6365/14 ADD 1 CHS/ec 21 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
3 The supervisory authorities shall 4 The supervisory authorities exercise their functions in shall perform their duties and complete independence. exercise their powers in complete Initial support independence. They shall neither seek nor accept instructions from anyone in the performance of their duties and exercise of their powers. 5 Each Party shall ensure that the supervisory authorities have adequate human, technical and financialfinancial rresourcesesources anandd infrastructureinfrastructure necessary to perfperformorm theirtheir functionsfunctions andand exerciseexercise ttheirheeiir powerspowers independently and effectively.effectively. InitialIniti support 5bis The supervisorysupervisory authoritiesauuthhorrittiei s shallshall draw up a pupublicblic reportrepe oort of theirtheir aactivitiesctivities aandndd sshallhhall seeseee ttoo it that transparencytransparenccy onn theirthheir activitiesactivities be enensured.nsuureedd.
5ter MeMembersmbbers anandd staffststaaff of the supervisorysupervisorry aauauthoritiesthhooriti iies shall be boundbound byb obligationsoblliggattioons ooff confidentialityconfiddene tit aliti y withwwitth regard to confidentialconfidenntitiaall informationinfformation they havehaavev accessacceess ttoo oorr hahaveve hahadd accessaccess too inin thetht e performanceperrformance of their duties.ddutiiese .
4 Decisions of the supervisorysuperrviv ssoryr 6 Decisions of the supervisorysupervisory authorities, whichch give rririsesee ttoo authorities,aua tht orities, which give rise to InitialIniti support complaints, mayy be appealedappeealeled complaints,ccomplaints, may be appealed against through thehe cocourts.uurrtst . against through the courts.courts.
6365/14 ADD 1 CHS/ec 22 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
5 In accordance with the 7 In accordance with the provisions of Chapter IV, and provisions of Chapter IV, the without prejudice to the supervisory authorities shall co- Initial support provisions of Article 13 of the operate with one another to the Convention, the supervisory extent necessary for the authorities shall co-operate with performance of their duties, in one another to the extent particular by: necessary for the performance of their duties, in particular by exchanging all useful information. a exchanging all useful information,information, in particular byby taking,taking, under their domestic lawlaww and solely foforr thethe protectiprotectiononn ooff personalpersonal data, all appropriateapprooprriatet measuresmeasures to provide factualfaactc uaal InitialIniti support informationinformation relating toto specificspspece ifificic processingprocessing carried ooututt oonn ititsts territory,territory, with the exceptionexe ceeptiion oof personalpersonal data unundergoingndedergoio ngn this processing,processing, unlessunleesss suchsucch datadaata is essentialessential forfor coo-oper-oppere ationation oror that thethe data ssubjectubbjej ctc hhasasa ppreviouslyreviously agreed to iinn ann uunambiguous,nnaambiguous, specific,specific, frffreereee aandndd informed manner;mannerr; b coordinatingcoordid nan titingg ttheirhheir investiinvestigationsgations InitialIniti support orr intinterventionserrvev ntn ioons or conducting jointjooinnt actiactions;onnss; c prpprovidingovidding informationinformation onon theirtheir lawlaw anandnd administrative practice InitialIniti support relatingreelalatiinng to data protectionprotection.. 8 In order to organise their coco-- operationooperation and to perform the duties setset out in the preceding paragraph, InitialIniti support thethe supervisorysupervisory authorities of the PartiesParties shallshall formform a conference/network.conference/network. 9 The supervisory authorities shall not be competent with respect to Initial support processing carried out by entities acting in their judicial capacity.
6365/14 ADD 1 CHS/ec 23 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Chapter IV – Mutual assistance Chapter IV – Mutual assistance
Article 13 – Co-operation Article 13 – Co-operation between Parties between Parties 1 The Parties agree to render unchanged each other mutual assistance in order to implement this Convention. 2 For that purpose: unchanged a each Party shall designate a each Party shall designate one or more authorities,orities, the name oneone oror moremore ssupervisoryupervisorry and address of eeachach ooff wwhichhich it authorities within the meanimeaningngg ooff InitialIniti support shall communicateicate to tthehe ArticleArticle 1212bisbis of this ConConvention,venntioon,n, Secretary Generall of the Council thethe namename andand aaddressddress ooff eaeachachh ooff of Europe; whichwhich it sshallhall cocommunicatemmunicaatee ttoo ththehe SecretarySecretary General of tthehe CCouncilouunccili of Europe; b each Partyy which has b each Party wwhichhhichh has designated morere than one designated mmoreorre ththanann one authority shall specify in its supervisorysupervisory authorityaua thoro ity shall InitialIniti support communication referredeferred toto inin ththee specifyspecify in iitstss ccommunicationomo mum nication previous sub-paragraphparagraph the referredreferred ttoo in thethee ppreviousreevious susub-b- competence of eachch authorityauthority.. paragraphparagraph tththee cocompetencemppeteteence of eacheach..
3 An authorityty designateddesignated by IncorporatedIncorpororatteded iintontnto Article 12bis a Party shall at thehe request of an authority designatedated by anotheanotherr Party: 3 An authorityty designateddesignated bby DeleteDeeletet a Party shall at thehe request ooff ann authority designatedated by aananothernoother Party: b take, in conformitynformmitty wiwwiththh iitstss DeleteDelete domestic law andnd ffororr ttheheh ssoleole purpose of protectionction off privacy,priivav cy, all appropriate measurmeasuresess foforr furnishing factualual information relating to specific automatic processing carried out in its territory, with the exception however of the personal data being processed.
6365/14 ADD 1 CHS/ec 24 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 14 – Assistance to data Article 14 – Assistance to data subjects resident abroad subjects resident abroad 1 Each Party shall assist any delete person resident abroad to exercise the rights conferred by its domestic law giving effect to the principles set out in Article 8 of this Convention. 2 When such a person resides delete in the territory of anotheranother PartyParty hehe shall be given the option of submitting his requestquest through the intermediary of thehe authorityauthority designated by thatt PartyParty.. 3 The request for assistance deletedelete shall contain all thehe necessarnecessaryy particulars, relatingng inter alia toto:: a the name, addressddress and anyany deletedelete other relevant particularsticulars identifying the personrson making the request; b the automateded personal data deletedelete file to which the rrequestequest pertains, or its controller; c the purpose of the request.request. deletedelete
Article 15 – SafeguardsSafeguards ArticleArtiiclc e 115 – SafeguardsSafeguards concerning assis--tancetance renderedrenderedd concerningcoconccerrnninng assistance renderedrendered by designated authorities.uthorities. by designateddesignated supervisory authoritiesaua tthoorities 1 An authority ddesignatedesignateed byby a 1 A supervisorysupervisory authorityauthority Party which has rerreceivedceeivved designatedddesignated by a Party which has information fromm anan authorityauthhoriti y receivedreceived infinformationormation frfromom an designated by anotherother PaPPartyrty eieeithertther authorityauthority accompanying a reqrequestuuestst foforr designated by another Party eithereither InitialIniti support assistance or in rreplyeply to ititss own accompanying a requrequestest for request for assistanceance shall not use assistance or in that information for purposes reply to its own request for other than those specified in the assistance shall not request for assistance. use that information for purposes other than those specified in the request for assistance.
6365/14 ADD 1 CHS/ec 25 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
2 Each Party shall see to it Delete that the persons belonging to or acting on behalf of the designated authority shall be bound by appropri¬ate obligations of secrecy or confidentiality with regard to that information. 3 In no case may a designated 2 In no case may a designated authority be allowed to make supervisory authority be allowed under Article 14, paragraph 2, a to make a request for assistance on Initial support request for assistanceance on behalf ofof behalfbehalf ooff a ddataata subject of its ownown a data subject residentsident abroad, ooff accord and without the expreexpresssss its own accord aandnd wwithoutithout ththee consentconsent of the person concerneconcerned.d. express consent of the person concerned. Article 16 – Refusalfusal of requests Article 16 – RefusalRefusal of requestsreqqueestts for assistance forfor asassistancesistance A designated authorityhority to which a A designated sussupervisorypep rrvisoro y request for assistanceance iiss addressedaddressed authority to whichwhichh a rrequesteqqueu st foforr under Articles 133 oorr 14 ooff thithiss assistanceassistance iiss addressedadddrd esesseed ununderder InitialIniti support Convention mayy not refuse to ArticleArticle 13 of ththishiss CConventiononnveventioi n maymay comply with it unless:less: notnot refuse ttoo coccomplympm lyl wwithitth iitt uunless:nless: a the request iiss not compatible unchangedunchanged with the powers in the field ofof data protection ooff the authorities responsible for replying;plying; b the request does not complcomplyy unchangedununchangeed with the provisionsisions of thithiss Convention; c compliance with the requestreequuesst compliancecoc mpliance with the request would would be incompatiblepatible wiwiththh tthehe bebe incompatible with the sovereignty, securityurity or ppublicubblil c sovereignty,ssovereignty, national security oorr policy (ordre public)blic) off thethee PPartyara ty publicppublic order of the Party by which InitialIniti support by which it wass designated,deessigng attede , oror itit was designated, or with the with the rights andand fundamentalfuunddammenntal rightsrights and fundamental freedoms freedoms of personsrsons unundernded r the ofof persons under the jurisdiction ooff jurisdiction of thatat PartyParty.. thatthat PartyParty..
6365/14 ADD 1 CHS/ec 26 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 17 – Costs and Article 17 – Costs and procedures of assistance procedures of assistance 1 Mutual assistance which the 1 Mutual assistance which the Parties render each other under Parties render each other under Article 13 and assistance they Article 13 and assistance they render to data subjects abroad render to data subjects under under Article 14 shall not give rise Article 14 shall not give rise to the Initial support to the payment of any costs or payment of any costs or fees other fees other than those incurred for than those incurred for experts and experts and interpreters. The latter interpreters. The latter costs or fees costs or fees shalll be borne by the shallshall be borne by the PartyParty which Party which has designated the hashas designated the ssupervisoryupervisory authority making the request foforr authority making the request fforoor assistance. assistance.assistance. 2 The data subjectbject may not be unchangedunchanged charged costs or ffeesees in connection with thehe ststepseps taken on his behalf in the territoryerritory of another Party otherer than thosethose lawfully payable bbyy residents of that Party. 3 Other detailss concerning the unchangedunchanged assistance relatingg in pparticulararticular to the forms and procedurescedures and the languages to be used,sed, shall be established directlyly between the Parties concerned.. Chapter V – Consultativensultative ChapterChC apter V – CConventiononvention Committee CommitteeCoC mmmittteee Article 18 – Compositionmposition off thethhe ArticleArrtticcle 18 – CompositionComposition of the committee committeecoommm ittee 1 A Consultativeative CCommitteeommmimittteee 1 A CConventiononvention CommitteeCommittee InitialIniti support shall be set up afterfter ththee enentrytrry iniintotot shallsshall be set up after the entry into force of this Convention.ventioonn. force of this CConvention.onvention. 2 Each Party sshallhall aappointpppoioint a unchangedunchanged representative to thethe committeecommittet e and a deputy representative.esentative Any member State of the Council of Europe which is not a Party to the Convention shall have the right to be represented on the committee by an observer.
6365/14 ADD 1 CHS/ec 27 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
3. The Consultative Committee 3 The Convention Committee may, by unanimous decision, may, by a decision taken by a invite any non-member State of majority of two-thirds of the Initial support the Council of Europe which is representatives of the Parties not a Party to the Convention to entitled to vote, invite an be represented by an observer at a observer to be represented at its given meeting. meetings. 4 Any Party which is not a member of the Council of Europe shall contribute to the funding of Initial support thethe activities of the CConventiononvention CommitteeCommittee according to thethee modalitiesmodalities established by ththehe CommitteeCommittee of Ministers inin agreement with that Party. Article 19 – Functionsunctions ofof thethe Article 19 – FunctionsFunctions ofo thetheh committee committeecommittee The Consultative Committee:Committee: TheThe ConventionConvention CoCommittee:ommitttet ee: a may make pproposalsroposals with a a may make recommendationsrreeccoommenendaations view to facilitatingng or improving with a view toto ffacilitatingaca illitaating oorr InitialIniti support the application off the Convention; improvingimproving thethhe applicationapplp ici attion of the Convention;Conventionn; b may makee proposals foforr unchangedunchangeg d amendment of thisis CConventiononvention iinn accordance with AArticlerticle 2121;; c shall formulatete its opinioopinionn onon unchangedununchangeed any proposal forr amendment ooff this Convention whichwhich is referredreferreed to it in accordancence wwithith AArticlertticclel 21, paragraph 3; d may, at the requestquest of a PaParty,arttyy, d may express an opinion oonn express an opinionpinion onon anyanny anyaany question concerning the ReservationRReservatio – articulation question concerningncernniinng ththehe interpretation or application ooff with the EUE acquis to be application of thiss CoConvention.nvvenentit onn. thisthis Convention;Convention; examinedexamined
e shall prepare, prepare before any new accession to the Convention, an opinion for the Committee of Initial support Ministers relating to the level of data protection of the candidate for accession;
6365/14 ADD 1 CHS/ec 28 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
f may, at the request of a State or an international organisation or on Doubt – if no accession is its own initiative, evaluate whether requested, what would be the level of data protection the the reason for such former provides is in compliance evaluation? with the provisions of this Convention; g may develop or approve models Reservation – articulation of standardised safeguardsreferred with the EU acquis to in Article 12; (including on BCRs and standardsstandard contractualc clauses)clauuses s) ttoo be examined h shall periodically review tthehee implementationimplementation of this ConventionConveentiion byby the Parties in accordanceaccordannce wwithiith thethe provisions of ArticlArticlee 4.44.33 andana d InitialIniti support decide uuponpon measurmeasuresese ttoo tattakeakeke where a Party is not iinn coccompliancempmpliiana cce with the Convention;Conventionn; i shall facilitate,facilitatee, wherewhw erre necessary,nen cessary, thethe friendly ssettlementete tlt emmennt of all InitialIniti support difficultiesdifficulties rrelatedelatatedd ttoo ththee applicationapplication ofof tthishihis CoCConvention.nvvention. Article 20 – Procedurecedure ArticleArticle 202 – PrPProcedureoccededure
1 The CConsultativeonsultative 1 TheThe ConventionCoConvvene tion CommitteeCommittee Committee shall be convened bbyy shallshhala l be convenedconnvev nned by the SecretarSecretaryy the Secretary GGeneraleneral of the GeneralGGeneral off ttheheh Council of Europe. Council of Europe.urope. Its firstfirstt ItsIts firstfiirst meetingmmeeting shallshall be hheldeld InitialIniti support meeting shall bbee held wiwithinthhiinn withinwithhinn twelvetwwelve months of the entrentryy twelve months ooff the ententryryy iintontto intoini too forceforce of this Convention.Convention. It force of this Convention.nvention. Itt shallshaall shallshhall subsequently meet at least subsequently meetet at leastleast ooncencnce onceono ce a year and in any case when every two years and inn anyany casecasse oneoone-thirdthird of the representatives ooff when one-thirdrd ofo thethee thethe Parties request its convocation.convocation. representatives ofof ttheheh PartiesPartit es request its convocation.cation.
6365/14 ADD 1 CHS/ec 29 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
2 A majority of 2 A majority of representatives representatives of the Parties shall of the Parties shall constitute a Initial support constitute a quorum for a meeting quorum for a meeting of the of the Consultative Committee. Convention Committee. 3 Each Party has a right to vote and shall have one vote. On questions related to its competence, the European Union exercises its right to vote and casts a number of votes equal to the Initial support numbernumber of its member SStatestates thathatt are Parties to the CConventiononvention anandd havehave transferred competencies ttoo thethe European Union in the fiffieldele d concerned.concerned. In this casecase,, tthosehhosse membermember States of the EuropeanEuru opopeaan UnionUnion do not vote. 3 After each of its meetings, 4 AfterAfter each of iititss memmeetings,ettingsg , the Consultative CCommitteeommittee shall thethe ConventionConvention CommitteeCoommm ittteee shallshhall submit to the CommitteeCommittee ofof submitsubmit to the CoCommitteeommm iti teee ooff InitialIniti support Ministers of thehe CCouncilouncil ooff Ministers of thethee CouncilCoounccili ofof EuropeEEurope Europe a report on its work and a report on ititss workwow rkk aandndn on the on the functioningoning of the functioningfunctioning off thethee CConvention.ononvevention. Convention. 4 Subject to thehe provisions of 5.5. SubjectSubjjece t to thetheh provisionsprrovisions of this this Convention, thethe Consultative Convention,Convenntiiono , ththee ConventionCConvention Committee shall drawdraw up its own CommitteeCommitttet e shallshhala l draw up its own Rules of Procedure.re. RulesRulel s ofof ProcedureProocedure anandd esestablishtablish ReservationReservatio – articulation in particularparrtit cuulaar the procedures of with the EUE acquis to be evaluationevevalluuatiionn sesett ououtt in ArtiArticlecle 44.3.3 examinedex andand ofo eexaminationxamination ooff ththee llevelevel ooff protectionprroteecction provided for in Article 19,199, oon the basis of objective criteria.crc iteria. Chapter VI – Amendmentsmendmdmeents ChapterChapter VI – AmendmentsAmendments
Article 21 – Amendmentsendmentss ArticleArticle 21 – AAmendmentsmendments
1 Amendmentsts to this 1 Amendments to this Convention may be proposed by a Convention may be proposed by a Initial support Party, the Committee of Ministers Party, the Committee of Ministers of the Council of Europe or the of the Council of Europe or the Consulta¬tive Committee. Convention Committee.
6365/14 ADD 1 CHS/ec 30 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
2 Any proposal for 2 Any proposal for amendment amendment shall be shall be communicated by the communicated by the Secretary Secretary General of the Council General of the Council of Europe of Europe to the Parties to the to the member States of the Convention, to the other member Initial support Council of Europe and to every States of the Council of Europe, to non-member State which has the European Union and to every acceded to or has been invited to non-member State which has been accede to this Convention in invited to accede to this accordance with the provisions of Convention in accordance with the Article 23. provisions of Article 23.23.
3 Moreover, any amendment 3 Moreover, any amenamendmentdmennt proposed by a Party or the proposedproposed by a Party or ttheheh Committee of MinisterMinisters shallshall be CommitteeCommittee of Ministers shallshaalll bebe InitialIniti support communi¬cated ttoo ththee communicommunicatedcated ttoo ththee ConventionConvvenntit oon Consultative Committee,mmittee, which Committee,Committee, which shashallll ssubmitubmmit toto shall submit to thehe CommitteeCommittee ofof thethe CCommitteeommittee of MinistersMinnisi teersr iitstss Ministers its opinionpinion on that opinionopinion on thatthaat proposedprooposeed proposed amendment.ment. amendment.amendment. 4 The Committeeittee of MinMinistersisters 4 TheThe CommitteeCommmititttee ofo MinistersMiinisters shall consider the proposed shallshall considerconsider tthehe pproposedroposed InitialIniti support amendment andd any opinion amendmentamendment aanandd ananyy opinioopinionn submitted by thehe Consultative submittedsubmitted byb thethee ConventionCConvention Committee and maymay approve the CommitteeCommittee andand maymmay approve the amendment. amendment.amendmmennt.t
5 The text off any amendment unchangedunchc angeed approved by thee CommitteCommitteee off Ministers in accordanceccordance wwithithh paragraph 4 of thisis article shshallall bbe forwarded to tthehe PartiPartiesess ffororr acceptance. 6 Any amendmentdment approvedappprovo ed unchangeduunchanged in accordance withth pparagrapharraggraaphp 4 ooff this article shall cocomeme inintontot fforceoorce on the thirtieth dayy after aalllll PartiesParrties have informed the SeSecretarycrc etary General of theirheir acceptance thereof.
6365/14 ADD 1 CHS/ec 31 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
7. Moreover, the Committee of Ministers may after consulting the Convention Committee, decide that a particular amendment shall enter into force at the expiration of a period of two years from the date Initial support on which it has been opened to acceptance, unless a Party notifies the Secretary General of the Council of Europe of an objection toto its entry into force. If such an objectionobjection is notified, tthehe amendmentamendment sshallhall eenternter intintoo forcefoorcr e onon the first day of the mmomonthnnth following the date on whichwhicch thtthee Party to the Convention whichwhhich hashaas notifiednotified the oobjectionbjecctit onon hhasaas deposited its ininstrumentsttruumeentn ooff acceptance with ththee SecretarySeS cretara y General of the CouCouncilnccilil EEurope.uuroppe. 8.8. If an amamendmentmene dmd ennt hashah s beenbeen approved bbyy ththehe CoCCommitteemmmittee ooff Ministers butbut hashhas notnon t yetyyet entered intointo forceforce iinn acaccordancecoordrdaance wwithith ththee InitialIniti support provisionsprovisioonsn setsett outouut inin paragraphs 6 oror 7, a State,Sttatte,e thethhe EuropeanEEuropean Union, oror an ininternationalnternnattional organisation maymay not expressexe ppress itsits consentconsent ttoo be boundboounu d byy thethhe Convention without atat ttheheh ssameaame time accepting the amendmentammendmment.
6365/14 ADD 1 CHS/ec 32 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Chapter VII – Final clauses Chapter VII – Final clauses
Article 22 – Entry into force Article 22 – Entry into force
1 This Convention shall be 1 This Convention shall be open for signature by the member open for signature by the member States of the Council of Europe. It States of the Council of Europe, is subject to ratification, the European Union and States acceptance or approval. not members of the Council of Instruments of ratification, Europe which have been invited Initial support acceptance or approvalpp shall be to accede to the Convention deposited with the SecretaSecretaryry openedopened for signature on 28 General of the Councilouncil of Europe.Europe. JanuaryJanuary 1981. It is subjectect too ratification,ratification, acceptance oorr approval. Instruments oof ratification,ratification, acceptance or approvalapppprovo aal shallshall be deposited wwithitith ththehe Secretary General of thethee CCouncilounccilil of Europe.Europe. 2 This Conventionention shall enteenterr unchangunchanged into force on the first day of the month following the expiration ofof a period of three months after the date on which fiveve member SStatestates of the Council ofof Europe have expressed their consent to be bound by the Convention in accordance with tthehe prprovisionsovisions ooff the preceding paragraph.agraph.
3 In respect of ananyy memembermbeer unchangeduunchhana geed State which subsequentlysubsequeentn lyl expresses its consentsent to be bobbounduund by it, the Conventionntion shshallalall eneenterteer into force on the first daydaay ofo tthehe month following the expirationexxpip rar tiion ofof a period of three momonthsntthsh afteraftere ttheheh date of deposit ooff the iinstnnstrumentrumment of ratification, acceptanceacceptance oorr approval.
6365/14 ADD 1 CHS/ec 33 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 23 – Accession by non Article 23 – Accession by Article 23 – Accession member States non-member States and by non-member States international organisations and international organisations 1 After the entry into force of 1 After the entry into force of this this Convention, the Committee of Convention, the Committee of Ministers of the Council of Ministers of the Council of Europe Europe may invite any State not a may, after consulting the Parties member of the Council of Europe to the Convention and obtaining to accede to this Convention by a their unanimous agreementg and decision taken bbyy the majoritmajorityy in light of the opopinioninion preparedprepared provided for in AArticlerticle 20.d20.d ofof thethe by the Convention Committee inn InitialInitia support1 Statute of the Councilouncil of Europe accordanceaccordance with Article 1919.e,9.ee, and by the unanimousmous vote of the inviteinvite any State not a memmemberbeer off representa¬tives of the thethe Council of Europe oro anan Contracting Stateses entitled to sit internationalinternational organisationorganisatioon tto on the committee.. accede to this ConventionConventtioi n byb a decision taken by ththehe mamajorityajoj rir tyy providedprovided for in ArticleArticlle 20.d200.dd ofof ththee Statute of the CouncilCouuncili ofof EuropeEuE rope and by the unanimousunaninimom usu votevotte ofo the representativesrepresentatives ofo thetheh ContractingConntracting StatesStates entitledentitleed too sitsiti on thethe CommitteeCommittee ofo MinistersMinissterss. 2 In respect ofof any acceding 2 In respectresppect off any State oorr State, the Conventionntion shall enteenterr internationalinternaatioonaal organisationororgaannisation acceding into force on the first dayday of the toto thethhee ppresentreresent Convention month following the expiration ofof accordingacccoc rdinng too pparagrapharagraph 1 abovabovee, InitialIniti support a period of three months after the thethhe CConventiononvvene tion shall enter into date of deposit off the instru¬meinstru¬mentntn forceforcce onn ttheheh first day of the month of accession withth the SecretarySecretarryy followingfolloowwingg the expiration of a General of the Councilouncil of Europe.Euroopep . periodpep riood of three months after the datedad tte ooff deposit of the instrument ooff accessionaca cession with the SecretarySecretary GeneralGGeneral of the Council of Europe.Europe.
1 During the T-PD Plenary, it was clarified that the term “international organization” means an intergovernmental organization, in accordance with Article 2 (1) (i) of the Vienna Convention on the Law of Treaties (1969).
6365/14 ADD 1 CHS/ec 34 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 24 – Territorial clause Article 24 – Territorial clause Article 24 – Territorial clause 1 Any State may at the time of 1 Any State, the European signature or when depositing its Union or other international instrument of ratification, organisation may at the time of acceptance, approval or accession, signature or when depositing its Initial support specify the territory or territories instrument of ratification, to which this Convention shall acceptance, approval or accession, apply. specify the territory or territories to which this Convention shall apply.apply.
2 Any State mmayay at any laterlater 2 AnyAny State , the EuroEuropeanpeeann date, by a declarationtion addressed to UnionUnion oror otherother internationalinternaattioonnall the Secretary GGeneraleneral of the organisationorganisation may atat any laterlatet r date,dadate, Council of Europe,ope, extend the byby a declaration addreaddressedssedd ttoo thtthehe application of thisis Convention to SecretarySecretary General of tthehe CCouncilououncn ili InitialIniti support any other territoryy specified in the ofof Europe, extend ththehe apaapplicationplp ici atioon declaration. In respectrespect of such ofof this ConventiConventiononn toto anyanny ototherheh r territory the Conventioonvention shallshall territoryterritory specspecifiediffied in the enter into force onn the first day ooff declaration. InIn respectreespspecect off such the month following the territoryterritory the ConventionConvveentiionn shallshhall enterenter expiration of a period of three intointo forceforce oon tthehee ffirstiri sst day of the months after the ddateate of receipt ooff monthmonth followingfolllowwinng thethhe expirationeexpiration ooff such declaration bbyy the SecretarySecretary a periperiodod ooff thtthreeree mmomonthsnths after the General. date ooff rereceiptceeipt off ssuchuch declaration by the SecretarySeccrer tataryy GGeneral.eneral. 3 Any declarationation made undeunderr unchangedunchc angeed the two precedingg paragraphs may, in respect off any territorterritoryy specified in such ddeclaration,eclaration, bbee withdrawn by a notificationotification addressed to the SecretarySecretary General. The withdrawalhdrawal shsshallhall become effective on ththee fifirstirsr t dadayy of the month followingowingg thethhe expiration of a periodriod ofof sissixix months after the datedate of receiptrecceieippt of such notification byby the SecretarySecretary General. Article 25 – Reservations Article 25 – Reservations
No reservation may be made in Unchanged respect of the provisions of this Convention.
6365/14 ADD 1 CHS/ec 35 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article 26 – Denunciation Article 26 – Denunciation
1 Any Party may at any time Unchanged denounce this Convention by means of a notification addressed to the Secretary General of the Council of Europe. 2 Such denunciation shall Unchanged become effective on the first day of the month following the expiration of a periodriod of six months after the ddateate of receipt of the notification byy the SecretarSecretaryy General. Article 27 – Notificationsfications Article 27 – NNotificationsotifications
The Secretary GGeneraleneral of the The SecretarSecretaryy GeneGeneralraal ofo ttheheh Council of Europee shall notify the CouncilCouncil of Europe shshallhaall nonotifyotit fyy ttheheh InitialIniti support member States off the CCouncilouncil andand membermember SStatestates of tthehe CCouncilouunncil andannd any State which has acceded to anyany PartyParty toto this ConventionCoonventit onn of:of: this Convention of:f: a any signature;re; UnchangedUnchanged b the depositosit of ananyy UnchangedUnchanged instrument off ratificationratification,, acceptance, approvaloval or accession; c any date off entry into force UnchangedUnchanged of this Conventionon in accordance with Articles 22, 2323 and 2424;; d any other act,ct, notification oor UnchangedUnnchanngged communication rrelatingelating ttoo thtthisiss Convention.
6365/14 ADD 1 CHS/ec 36 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at RESTREINT UE/EU RESTRICTED
Article … of the Protocol: signature and entry into force
1. This protocol shall be open for signature by the Parties to the Convention. it shall be subject to ratification, acceptance or approval. Instruments of ratification, acceptance or approval shall be deposited with the Secretary General of the Council of Europe.
2. This protocol shall enter into force on the first day of the month following the expiration of a period of [three] months after the date on which all Parties to the Convention have expressed their consent to be bound byyp the protocol in accordance with the pprovisions of pparagraphgp 1 of this Article.
3. However, this protocolprotocol shall enter into force following the expirexpiryy of a pperioderriod of [two] years after the date on which it hashas been oopenedpened to signature, unless a Party to thethe ConventionCoonveenntion has notified the Secretary Generall of the CCouncilouncil of EEuropeurope of an objection to iitstst entryentn ryy intointn o force.fforce. TThe right to make an objection shall be reservedreserved to those states which were PPartiesarrtitiees toto theththe ConventionConvention at the date of opening for signatureture of this protocolprotocol..
4. Should such ann objection be notified, the protocolprotocool shsshallhala l enterennter into force on the fifirstr day of the month following thethe expiration of a period of [t[three]three] mommonthsntthshs afterafter ththee ddateate oonn wwhichhic the Party to the Convention whichh has notified the objection hashaas ddeposeppossitiitededd its instrument of ratification,ratifica acceptance or approval with tthehe SSecretaryecretary GGeneraleneral ooff thtthehe CoCCouncilunnciil oof EEurope.urope.
______
6365/14 ADD 1 CHS/ec 37 ANNEX DG D 2B RESTREINT UE/EU RESTRICTED EN www.parlament.gv.at