On 27 February 2014, the Working Party (the "Working Party"), an independent European advisory body on data protection and privacy comprised of representatives from the national data protection authorities of the EU Member States, the European Data Protection Supervisor and the European Commission, adopted an opinion (the "Opinion") providing guidance on law enforcement measures that may interfere with the right to protection of personal data. The Opinion contains recommendations to the EU and national legislators and authorities adopting measures in the area of freedom, security and justice. In particular, the Opinion explains what elements must be taken into account when reviewing existing or adopting new rules on enforcement measures that may entail an intrusion in an individual's personal life and processing their personal data.

Pursuant to Article 8 of the Charter of Fundamental Rights (the "Charter"), every person has the right to the protection of their personal data. According to the Opinion, many law enforcement measures may intrude on an individual's private life and at the same time entail the processing of personal data, for instance a request by a national authority to access personal data from telecommunications providers, dawn raids or individualised ticketing for football games. The Working Party therefore emphasises the importance of the concepts of necessity and proportionality in adopting new or reviewing existing law enforcement measures.

The Opinion provides that, based on case law of the European Court for Human Rights with regard to interference with the protection of private and family life, any interference must satisfy the following 3 criteria:

  • All law enforcement measures that may intrude on the right to protection of personal data must have a legal basis. This legal basis must set out the type of measures an authority can take, the degree of discretion an authority has and must provide adequate legal safeguards of the right to personal data protection.
  • The measures must be in pursuit of a legitimate aim, such as interests of national security, public safety, economic well-being of a country, prevention or detection of disorder or a crime, protection of health or morals.
  • The measures must be necessary in a democratic society.

The Working Party furthermore considered case law of the Court of Justice of the European Union ("ECJ"). In particular, it reiterated the ECJ finding that limitations to fundamental rights must: (i) be provided for by law; (ii) respect the essence of those rights; (iii) be necessary in accordance with the principle of proportionality; and (iv) meet the objectives of general interest or the need to protect the rights and freedoms of others.

Considering that protection of privacy and data protection are necessarily linked, the Opinion made several recommendations to consider when proposing, implementing or reevaluating measures in the area of freedom, security and justice:

Pressing social need

It is important to identify the pressing social need and determine the seriousness of the issue. In addition, the time that has passed between the offence and the measures should be as short as possible. The Opinion explains that Member States have a margin of appreciation in adopting suitable measures.

Proportionality

The proportionality principle requires clear aims specific to the purpose. Therefore the measures that already exist must be taken into account, and may need to be reviewed. Measures should be adequate without being excessive. A balance needs to be struck ensuring that individuals do not have their data processed without just cause and that personal data are not retained longer than necessary.

Relevant and sufficient reasons

Proposed measures must be based on evidence-based research, statistics, forecasts, etc.

The Working Party believes its recommendations will result in better protection for individuals against infringements by third parties and the State of personal data protection rights. Hence, while the Opinion is addressed at legislators, it may also help individuals and companies in protecting their rights against illegitimate interference by public authorities. For instance: which private documents may be accessed or copied during dawn raids?

The full text of the Opinion can be consulted here.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.