DATA PROTECTION : EP RAPPORTEUR STRENGTHENS EUROPEANS' FUTURE RIGHTS.

The principle is simple: "If you want my personal data, ask me for authorisation". According to the draft report by Jan Philipp Albrecht (Greens-EFA, Germany), presented on 10 January to the European Parliament's Committee on Civil Liberties (LIBE), web-based firms that exploit users' personal data for different purposes including advertising will have to obtain their consent.

"Users have to be informed about what will be done with their data and be in a position either to accept such use or refuse it," the rapporteur told reporters, on 9 January in Brussels. Albrecht has been active in this area for a long time.

The rapporteur also strengthens the right to be forgotten on the internet, which will enable users to demand the deletion and correction of their data, while maintaining general exceptions for freedom of expression, in particular to protect the press. In cases of a transfer of data to third parties or publication without a legitimate legal basis, added Albrecht, the national data protection supervisor will be required to order deletion of the data. On the other hand, if an individual has agreed to the publication of his personal data, "the right to be forgotten is never legitimate or realistic".

Albrecht also drastically reduces the number of delegated acts the European Commission may use to adapt the regulation. Those that remain are limited to technical provisions, subject to approval by the European Data Protection Supervisor (EDPS), whose responsibilities are enhanced.

The EU rules will...