European Union (EU) Data Protection Directive

EU Data Protection Directive- The objective of this regulation is to allow the free flow of personal data between member states of the European Union by harmonizing the level of adequate protection. Organizations must implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.

[Category=Geospatial ]

Source: RSA, 14 August 2011 10:48:16, http://www.rsa.com/glossary/  

---

These advertisers support this free service

---

EU Data Protection Directive (Directive 95/46/EC) - EU Data Protection Directive (also known as Directive 95/46/EC) is a directive adopted by the European Union designed to protect the privacy and protection of all personal data collected for or about citizens of the EU, especially as it relates to processing, using, or exchanging such data. Directive 95/46/EC encompasses all key elements from article 8 of the European Convention on Human Rights, which states its intention to respect the rights of privacy in personal and family life, as well as in the home and in personal correspondence. The Directive is based on the 1980 OECD "Recommendations of the Council Concerning guidelines Governing the Protection of Privacy and Trans-Border Flows of Personal Data."

These recommendations are founded on seven principles, since enshrined in EU Directive 94/46/EC:

   * Notice: subjects whose data is being collected should be given notice of such collection. 
   * Purpose: data collected should be used only for stated purpose(s) and for no other purposes. 
   * Consent: personal data should not be disclosed or shared with third parties without consent from its subject(s). 
   * Security: once collected, personal data should be kept safe and secure from potential abuse, theft, or loss. 
   * Disclosure: subjects whose personal data is being collected should be informed as to the party or parties collecting such data. 
   * Access: subjects should granted access to their personal data and allowed to correct any inaccuracies. 
   * Accountability: subjects should be able to hold personal data collectors accountable for adhering to all seven of these principles.

In the context of the Directive, personal data means "any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity" (Article 2a). Data is considered personal when it enables anyone to link information to a specific person, even if the person or entity holding that data cannot make that link. Examples of such data include address, bank statements, credit card numbers, and so forth. Processing is also broadly defined and involves any manual or automatic operation on personal data, including its collection, recording, organization, storage, modification, retrieval, use, transmission, dissemination or publication, and even blocking, erasure or destruction (paraphrased from Article 2b).

These data protection rules apply not only when responsible parties (called the controller in this EU directive) is established or operates within the EU, but whenever the controller uses equipment located inside the EU to process personal data. Thus, controllers from outside the EU who process personal data inside the EU must nevertheless comply with this directive. EU member states set up supervisory authorities whose job is to monitor data protection levels in that state, and to advise the government about related rules and regulations, and to initiate legal proceedings when data protection regulations are broken. All controllers must notify their governing authority before commencing any processing of personal information, and such notification prescribes in detail what kinds of notice is expected, including name and address of the controller or representative, purpose(s) of the processing, descriptions of the categories of data subjects and the data or categories of data to be collected, recipients to whom such data might be disclosed, any proposed transfers of data to third countries, and general description of protective measures taken to ensure safety and security of processing and related data.

Related glossary terms: IFRS (International Financial Reporting Standards), National Health Service (NHS), Code of Connection (CoCo), Information Assurance Standard 6 (IAS 6), Privacy and Electronic Communications Regulations (PECR), Financial Services Authority (FSA), Good Practice Guide 13, Basel II New Accord, British Standards Institution (BSI), UK Government Connect Secure Extranet (GCSX)

[Category=Data Management ]

Source: WhatIs.com, 02 August 2013 09:12:09, http://whatis.techtarget.com/glossary/Data-and-Data-Management