621.397 .
. –
, . ,
,
,
,
,
. :
,
, ,
,
,
,
. ,
, .
:
,
,
,
. The article explores the stages of formation, direction, principles, actors, mechanism of implementation and the reform of the European Union's data protection policy. Key words: The European Union, data protection policy, protection of personal data, data protection legislation.
, , .
, ,
,
. ,
,
, . , . .
.
, .
, . . , .
.
.
, .
, .
, .
, .
, .
, .
, , .
.
, ,
.
–
, . , .
.
,
.
,
. ,
:
– – – .
,
; ;
, , .
– ,
, .
„ )
( .
, ,
”
, ,
,
,
,
, ,
( ,
,
), ,
,
,
,
,
,
, , .
[1]. , .
,
,
.
. ,
. („
” (1950), „ ” (1981)) . 1995
95/46/EC „ ”,
,
, ,
,
,
. ,
, .
1994
,
, . .
,
2003 [2].
,
.
”. ,
126
, ,
(
2007
,
) [3]. , 2000
,
„
”, .
,
7 , 8
,
,
[4]: – –
; ,
.
,
,
;
–
. . 18
„
45/2001
2000 ” .
, „
”, [5]. .
,
, , 1997
,
„
,
, .
97/66/ ,
, 95/46/EC [6].
,
, , ,
. „ 95/46/
.
2002/58/EC ”, ”,
„
,
. , [7].
,
2006-
[8] 2009-
[9]
. ,
,
2007 [10].
, , . ,
,
,
,
,
,
. . 95/46/EC,
„ ”.
,
, ,
„ ,
. ,
,
„opt in”. „ ”
,
” ,
, ,
„opt out”.
,
. , 11
.
,
, ,
,
,
,
.
12
, ,
,
14 .
.
,
.
.
,
,
,
(
: . ,
, : 127
20). ,
,
–
,
,
; – – –
,
; ;
,
, ,
,
;
–
,
,
,
, 1
7. .
„
2002/58/EC ”
, .
. . ,
. ,
,
, [11, . 137]:
–
, ,
–
;
,
,
; – ; – –
; . . .
:
,
(
, (
),
). .
,
, ,
.
,
, ,
,
;
,
;
,
, ,
,
,
;
. , ,
.
95/46/
,
.
,
. ,
,
,
,
,
.
. . .
,
,
,
,
,
;
,
,
,
,
,
,
[1]. . ,
,
,
„
”
[12]. , ,
2004 2001
.
[13]. . „
95/46/ ”
,
„
”–
,
. [1]: – – ,
(
„
”);
, .
,
,
(
–
, (
„
„
”); ,
”); 128
–
; ,
, ,
, (
–
,
, „
”);
,
,
,
. ,
,
(
„
”). . ,
. , .
, :
–
(JUST) ;
95/46/
,
;
,
-
. –
,
(CNECT) ;
, 2002/58/EC.
, –
:
,
,
; – – – 1.
29-
; ; . (European Data Protection Supervisor, EDPS). 45/2001 . ,
. ,
; ,
; ,
,
; ;
, .
, .
, (Data Protection Officer, DPO).
–
: .
. , . – Service, DPC). 45/2001;
[14]. (Data Protection Co-ordinator in a DG or , ; . .
2.
29-
(The Article 29 Data Protection Working Party) – 1996 29-
,
95/46/EC.
.
, . ; , , ;
,
[15, 16]. 3.
. ,
. ,
4. protection bodies)
2000/641/JHA
17
”, „ , ,
2000
. (Secretariat for the joint supervisory data„ ” ”. . ,
. . (95/46/EC), (2002/58/EC)
(2006/24/EC), . 129
, ,
(„
” – , ,
(
)) .
(„
”–
). ,
,
,
. ,
, . ”
„ ” 2009 . 20102011„ 2010 .
” [17]. , 2009-
, , 4
”
– „
. .
:
;
;
;
;
[18].
,
,
, [19]:
1.
,
, .
2.
„
, 3.
,
” (data protection by design) . :
. 4.
, . . 2011-2012
„EU Safe Harbour”. ,
– –„
2012 ,
:
„
.
21
(
” [20];
) [21];
–„ ,
,
, –
” [22];
, [23]. ,
, .
,
:
–
, ;
–
, ;
– . .
,
,
:
95/46/ 1995 ;
;
2002/58/EC ;
;
45/2001 2006/24/EC
18
2000
,
;
29-
. .
, . ,
, ,
. :
, ,
,
,
; ,
; 130
,
; ,
,
,
. ,
,
,
, ,
. . ,
:
;
;
;
.
1. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data // Official Journal of European Communities. – 23.11.1995. – L 281. – P. 31-50. 2. Regulation (EC) 1882/2003 of the European Parliament and of the Council of 29 September 2003 adapting to Council Decision 1999/468/EC the provisions relating to committees which assist the Commission in the exercise of its implementing powers laid down in instruments subject to the procedure referred to in Article 251 of the EC Treaty // Official Journal of European Communities. – 31.10.2003. – L 284. – . 1-53. 3. Communication from the Commission to the European Parliament and the Council on the follow-up of the Work Programme for better implementation of the Data Protection Directive. Brussels, 7.3.2007. COM(2007) 87 final. – Brussels: Commission of the European Communities, 2007 – 11 . 4. Charter of Fundamental Rights of the European Union // Official Journal of the European Union. – 30.3.2010. – C 83. – . 389-403. 5. Regulation (EC) 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data // Official Journal of European Communities. – 12.1.2001. – L 8. – P. 1-22. 6. Directive 97/66/EC of the European Parliament and of the Council of 15 December 1997 concerning the processing of personal data and the protection of privacy in the telecommunications sector // Official Journal of European Communities. – 30.1.1998. – L 24. – . 1-8. 7. Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) // Official Journal of European Communities. – 31.07.2002. – L 201. – . 37-47. 8. Directive 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC // Official Journal of European Communities. – 13.4.2006. – L 105. – . 54-63. 9. Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009 amending Directive 2002/22/EC on universal service and users’ rights relating to electronic communications networks and services, Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector and Regulation (EC) 2006/2004 on cooperation between national authorities responsible for the enforcement of consumer protection laws // Official Journal of European Communities. – 18.12.2009. – L 337. – . 1136. 10. Communication from the Commission to the European Parliament and the Council on Promoting Data Protection by Privacy Enhancing Technologies (PETs). Brussels, 2.5.2007. COM(2007) 228 final. – Brussels: Commission of the European Communities, 2007. – 10 . 11. . : , , / . – .: . , 1999. – 208 . 12. Commission Decision 2001/497/EC of 15 June 2001 on standard contractual clauses for the transfer of personal data to third countries under Directive 95/46/EC // Official Journal of European Communities. – 04.07.2001. L 181. – P. 14-21. 13. Commission Decision 2004/915/EC of 27 December 2004 amending Decision 2001/497/EC as regards the introduction of an alternative set of standard contractual clauses for the transfer of personal data to third countries // Official Journal of European Communities. – 29.12.2004. – L 385. – P. 74-84. 14. Commission Decision of 3 June 2008 adopting implementing rules concerning the Data Protection Officer pursuant to Article 24(8) of Regulation (EC) 45/2001 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data. (2008/597/EC) // Official Journal of the European Union. – 22.7.2008. – L 193. – . 7-11. 15. Working Party on the Protection of Individuals with regard to the Processing of Personal Data. Working document: Processing of Personal Data on the Internet. 5013/99/EN/final. WP 16. Adopted by the Working Party on 23 February 1999. – Brussels: The European Commission, Directorate General for Justice, 1999. – 5 . 16. Opinion 4/2007 on the concept of personal data. Article 29 Data Protection Working Party. Adopted on 20th June. – Brussels: The European Commission, Directorate General for Justice, 2007. – 26 . 17. A Digital Agenda for Europe. Communication from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions. Brussels, 26.8.2010. COM(2010) 245 final/2. – Brussels: Commission of the European Communities, 2010. – 41 p. 18. A comprehensive approach on personal data protection in the European Union. Communication from the Commission to the European Parliament, the Council, the Economic and Social Committee and the Committee of the Regions. Brussels, 4.11.2010. COM(2010) 609 final. – Brussels: Commission of the European Communities, 2010. – 19 . 19. Reding V. The reform of the EU Data Protection Directive: the impact on businesses / Viviane Reding. European Business Summit. Brussels, 18 May 2011. SPEECH/11/349. – Brussels: Commission of the European Communities, 2011. – 4 . 20. Safeguarding Privacy in a Connected World. A European Data Protection Framework for the 21st Century. Communication from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions. Brussels, 25.1.2012. COM(2012) 9 final. – Brussels: Commission of the European Communities, 2012. – 13 . 21. Proposal for a Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation). Brussels, 25.1.2012. COM(2012) 11 final. 2012/0011 (COD). – Brussels: Commission of the European Communities, 2012. – 118 . 22. Proposal for a Directive of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data by competent authorities for the purposes of prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and the free movement of such data. Brussels, 25.1.2012. COM(2012) 10 final. – Brussels: Commission of the European Communities, 2012. – 54 . 23. Report from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions based on Article 29 (2) of the Council Framework Decision of 27 November 2008 on the protection of personal data processed in the framework of police and judicial cooperation in criminal matters. Brussels, 25.1.2012. COM(2012) 12 final. – Brussels: Commission of the European Communities, 2012. – 8 .
131