Global Data Protection In The Field Of Law Enforcement: An EU Perspective

Cover......Page 1
Half Title......Page 2
Title Page......Page 6
Copyright Page......Page 7
Table of Contents......Page 8
Abbreviations......Page 14
Acknowledgements......Page 20
1 Subject matter and aims......Page 22
2 Limitations of the research......Page 24
4 Terminology......Page 25
5 Structure of study......Page 26
1 Data exchanges for law enforcement purposes within the EU......Page 29
1 Origin, evolution and scope of the EC/EU legislation on the processing of personal data for criminal matters......Page 30
2 EU data-sharing instruments for law enforcement purposes......Page 35
2.1 The use of traditional MLA procedures within the EU......Page 36
2.2 Post-9/11 data-sharing instruments......Page 37
2.3.1 Delay in the implementation......Page 41
2.3.2 Complexities in the usage......Page 42
3.1 Shift from border management to law enforcement purposes......Page 44
3.2.1 Exchange of passenger data within the EU......Page 47
3.2.2 Exchange of financial data within the EU......Page 49
3.2.3 Exchange of telecommunications data within the EU. The annulled Data Retention Directive......Page 52
4.1.1 Origins of the EU data protection legislation......Page 57
4.1.2 Impact and scope of Directive 95/46/EC......Page 58
4.1.3 The Treaty of Lisbon and the new data protection paradigm......Page 60
4.2 Sector-specific data protection legislation within the AFSJ......Page 62
4.2.1 The limited scope of Council Framework Decision 2008/977/JHA......Page 63
4.2.2 New directive on data protection for police and judicial co-operation in criminal matters......Page 65
4.3 Comparative study of the specific data protection provisions in EU data-sharing instruments......Page 67
4.4 The purpose limitation and the necessity principles......Page 71
5 Conclusion......Page 73
2 Data exchanges for law enforcement purposes between the EU and a third state......Page 85
1.1 Origins and evolution......Page 86
1.2 Data exchanges for security purposes. The blurry line between the AFSJ and the CFSP/CSDP......Page 90
1.3 Questioning the scope and purposes of Article 39 TEU......Page 92
2 Exchange of information between the EU and the US......Page 94
2.1.1 The EU-US Mutual Legal Assistance Agreement......Page 97
2.1.2 Agreements on PNRs......Page 99
2.1.3 SWIFT agreements......Page 102
2.2 Issues of concern in the Agreements......Page 9
2.2.1 Legal basis implications......Page 105
2.2.2 Public-private partnership......Page 107
3.1.1 International data transfers according to Council Framework Decision
2008/977/JHA......Page 110
3.1.2 International data transfers according to the Police and Criminal Justice Data Protection Directive......Page 112
3.2 Data protection provisions in the main international agreements between the EU and the US......Page 114
3.2.1 Data protection in the EU-US PNR Agreement......Page 115
3.2.2 Data protection in the SWIFT Agreement......Page 120
3.3.1 Different conceptions of privacy in the US and the EU......Page 121
3.3.2 Attempts to approximate the EU and the US privacy legislations......Page 124
3.3.3 The umbrella EU-US Data Protection Agreement......Page 127
3.3.4 The norm-taking role of the EU......Page 129
4 Concluding remarks......Page 133
3 The role of Europol in the exchange of information within and beyond the EU......Page 144
1 The origin and aim of Europol......Page 145
2.1 The increasing involvement of Europol in the data-sharing procedures within the EU......Page 146
2.2.1 Background......Page 149
2.2.2 SIENA phases......Page 150
2.2.4 Advantages of using SIENA as EU default communication tool......Page 151
2.3.1 Purpose limitation principle......Page 153
2.3.2 Right of access, correction and deletion of data......Page 155
2.3.3 Europol’s oversight......Page 156
2.4.1 Enhanced powers of Europol......Page 157
a. The purpose limitation principle......Page 159
c. External supervision of Europol’s data processing......Page 161
2.5 Comparison with data protection standards in the Member States......Page 163
3 Europol’s data exchanges beyond the EU......Page 165
3.1 Europol co-operation agreements with third parties......Page 166
3.1.2 Operational agreements......Page 168
3.1.3 Data exchanges between Europol and private parties......Page 169
3.3 Data protection rules for data transfers to third parties......Page 170
3.4.1 Co-operation agreements between the US and Europol......Page 173
3.4.2 The role of Europol in the TFTP......Page 174
3.5 Data transfers to third partners in the proposed Europol regulation......Page 175
3.5.1 Transfer of personal data to third countries......Page 176
3.5.2 The enhanced role of the EP......Page 177
3.5.3 The lack of a SIENA provision......Page 178
3.5.4 Processing of data from third countries to Europol......Page 179
4 Data safeguards for the intelligence collected and shared by Member States......Page 188
1 Data processed by intelligence services......Page 189
2 The blurry scope of national security and implications for the
EU legislation......Page 190
3 The significance of the Snowden revelations at the EU level......Page 192
3.1 The start of the NSA and ECHELON......Page 193
3.2 The NSA data collection programmes......Page 196
3.3 Secret collaboration of the EU Member States with the NSA......Page 201
3.4 EU reaction and consequences for the EU-US agreements......Page 203
4 Systematic storage and access to data by intelligence services in the EU......Page 206
5 Could the EU set up data protection standards for the exchange of intelligence?......Page 208
5.1 Lack of co-ordination of intelligence services within the EU......Page 209
5.2 Divergence in the oversight over intelligence agencies......Page 212
5.3 Current challenges at the CJEU and the ECtHR......Page 216
5.4 The relevance of Article 39 TEU......Page 220
6 Conclusions......Page 221
5 The feasibility of global data protection standards for information processed for security purposes......Page 229
1 Compatibility of mass surveillance systems with public international law......Page 230
2.1 OECD Privacy Guidelines......Page 234
2.2 APEC Privacy Framework......Page 236
2.3 UN Guidelines for the Regulation of Computerised Personal Data Files......Page 237
2.4 1981 CoE Data Protection Convention and Cybercrime Convention......Page 238
2.5 Other global data protection principles......Page 242
3 The ideal regulatory system for a global data protection framework......Page 244
4 The EU’s role in designing global data protection principles through the CoE......Page 246
5 Conclusions......Page 249
Conclusions......Page 254
Index......Page 260