{"id":3010,"date":"2016-11-22T18:42:09","date_gmt":"2016-11-22T18:42:09","guid":{"rendered":"http:\/\/wiki.davelevy.info\/?p=3010"},"modified":"2024-01-17T14:49:00","modified_gmt":"2024-01-17T14:49:00","slug":"privacy-in-the-uk","status":"publish","type":"post","link":"https:\/\/davelevy.info\/wiki\/privacy-in-the-uk\/","title":{"rendered":"Privacy in the UK"},"content":{"rendered":"<p>Some notes and links pertaining to the GDPR, <!--more-->here&#8217;s the text of the Law.<\/p>\n<blockquote><p><a href=\"https:\/\/web.archive.org\/web\/20180131231006\/http:\/\/ec.europa.eu\/justice\/data-protection\/reform\/files\/regulation_oj_en.pdf\">REGULATION (EU) 2016\/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCILof 27 April 2016on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) <\/a><\/p><\/blockquote>\n<h3>The ICO<\/h3>\n<ol>\n<li><a href=\"https:\/\/web.archive.org\/web\/20170722145813\/https:\/\/iconewsblog.wordpress.com\/2016\/10\/31\/how-the-ico-will-be-supporting-the-implementation-of-the-gdpr\/\">https:\/\/iconewsblog.wordpress.com\/2016\/10\/31\/how-the-ico-will-be-supporting-the-implementation-of-the-gdpr\/<\/a><\/li>\n<li><a href=\"https:\/\/web.archive.org\/web\/20180602174808\/https:\/\/ico.org.uk\/media\/1624219\/preparing-for-the-gdpr-12-steps.pdf\">https:\/\/ico.org.uk\/media\/1624219\/preparing-for-the-gdpr-12-steps.pdf<\/a><\/li>\n<li><a href=\"https:\/\/ico.org.uk\/media\/for-organisations\/documents\/1595\/pia-code-of-practice.pdf\">https:\/\/ico.org.uk\/media\/for-organisations\/documents\/1595\/pia-code-of-practice.pdf<\/a><\/li>\n<\/ol>\n<h3>ISO<\/h3>\n<ol>\n<li><a href=\"http:\/\/www.iso.org\/iso\/iso_catalogue\/catalogue_tc\/catalogue_detail.htm?csnumber=45123\">ISO\/IEC 29100:2011 Information technology &#8212; Security techniques &#8212; Privacy framework<\/a><\/li>\n<\/ol>\n<h3>eugdpr.org<\/h3>\n<ol>\n<li><a href=\"https:\/\/web.archive.org\/web\/20230118084034\/https:\/\/eugdpr.org\/\">http:\/\/www.eugdpr.org\/<\/a>, claims to be a resource to educate the public about the main elements of the General Data Protection\u00a0Regulation (GDPR)<\/li>\n<\/ol>\n<h3>The EU<\/h3>\n<ol>\n<li><a href=\"https:\/\/web.archive.org\/web\/20180102085047\/http:\/\/ec.europa.eu:80\/justice\/data-protection\/international-transfers\/adequacy\/index_en.htm\">http:\/\/ec.europa.eu\/justice\/data-protection\/international-transfers\/adequacy\/index_en.htm<\/a><\/li>\n<li>This article, entitled <a title=\"Permalink to Impact of the European General Data Protection Regulation (GDPR) on Adequacy and 5 Tips to Weather the Changes\" href=\"http:\/\/www.privacyandcybersecuritylaw.com\/impact-of-the-european-general-data-protection-regulation-gdpr-on-adequacy-and-5-tips-to-weather-the-changes\">Impact of the European General Data Protection Regulation (GDPR) on Adequacy and 5 Tips to Weather the Changes<\/a> at &#8220;Privacy and <a class=\"zem_slink\" title=\"Computer security\" href=\"http:\/\/en.wikipedia.org\/wiki\/Computer_security\" target=\"_blank\" rel=\"wikipedia noopener\">Cyber Security<\/a> Law, argues that none of the adequacy decisions can be assumed to stand since the criteria are stricter or at least different in the 2016 Law.<\/li>\n<\/ol>\n<h3>The Article 29 Working Party<\/h3>\n<ol>\n<li><a href=\"http:\/\/ec.europa.eu\/newsroom\/just\/item-detail.cfm?item_id=50083\">Article 29 Working Party<\/a> at europa.eu<\/li>\n<li><a href=\"https:\/\/web.archive.org\/web\/20171202232018\/http:\/\/ec.europa.eu\/justice\/data-protection\/article-29\/documentation\/opinion-recommendation\/files\/2016\/wp238_en.pdf\">A29WP on the US Privacy Regime<\/a>, they have some improvements they&#8217;d like to see<\/li>\n<\/ol>\n<h3>The EEA<\/h3>\n<p>(I spoke to the ICO helpline which said that Iceland would be a permitted target for transfer. This page, <a href=\"http:\/\/www.efta.int\/eea\/eea-agreement\/eea-basic-features\">The Basic Features of the EEA Agreement<\/a>, describes the EEA and makes it clear that Data Protection is a single market issue. Iceland is in!<\/p>\n<h3>The European Council<\/h3>\n<ol>\n<li><a href=\"http:\/\/www.coe.int\/t\/dghl\/standardsetting\/dataprotection\/TPD_documents\/T-PD(2012)04Rev4_E_Convention%20108%20modernised%20version.pdf\">Convention 108 of the European Council<\/a>, text.<\/li>\n<li><a href=\"http:\/\/www.coe.int\/en\/web\/data-protection\/home\">Council of Europe&#8217;s Data Protection home page<\/a><\/li>\n<li><a href=\"http:\/\/www.coe.int\/t\/dghl\/standardsetting\/dataprotection\/Modernisation_en.asp\">http:\/\/www.coe.int\/t\/dghl\/standardsetting\/dataprotection\/Modernisation_en.asp<\/a><\/li>\n<li><a href=\"http:\/\/www.coe.int\/t\/dghl\/standardsetting\/dataprotection\/TPD_documents\/T-PD(2012)04Rev4_E_Convention%20108%20modernised%20version.pdf\">http:\/\/www.coe.int\/t\/dghl\/standardsetting\/dataprotection\/TPD_documents\/T-PD(2012)04Rev4_E_Convention%20108%20modernised%20version.pdf<\/a><\/li>\n<\/ol>\n<h3>The USA<\/h3>\n<ol>\n<li><a href=\"http:\/\/arstechnica.co.uk\/tech-policy\/2015\/10\/europes-highest-court-strikes-down-safe-harbour-data-sharing-between-eu-and-us\/\">ARS Technica reports on the CJEU striking down Safe Harbour<\/a><\/li>\n<li>I <a href=\"http:\/\/blog.davelevy.info\/2015\/12\/05\/safe-harbour\/\">review the Safe Harbour ruling<\/a> on my blog<\/li>\n<li>I <a href=\"https:\/\/www.linkedin.com\/pulse\/us-safe-harbour-6-months-later-david-levy\">review the Safe Harbour ruling<\/a> at Linkedin, and <a href=\"https:\/\/web.archive.org\/web\/20201025071124\/https:\/\/citihub.com\/insights\/our-blog\/not-so-safe-harbour\/\">Citihub<\/a>.<\/li>\n<li><a href=\"https:\/\/www.privacyshield.gov\/Program-Overview\">The Privacy Shield<\/a> by the US Federal Government.<\/li>\n<li><a href=\"http:\/\/europa.eu\/rapid\/press-release_IP-16-2461_en.htm\">A press release on the EU declaring the US Privacy Shield to be adequate<\/a> and <a href=\"https:\/\/web.archive.org\/web\/20171202121520\/http:\/\/ec.europa.eu\/justice\/data-protection\/files\/privacy-shield-adequacy-decision_en.pdf\">the text of<\/a> the declaration<\/li>\n<li>The Register <a href=\"http:\/\/www.theregister.co.uk\/2016\/07\/26\/europe_gives_privacy_shield_one_year\/\">on the A29WP objections<\/a> to the Privacy Shield<\/li>\n<\/ol>\n<h3>India<\/h3>\n<ol>\n<li><a href=\"https:\/\/web.archive.org\/web\/20171123024325\/http:\/\/ec.europa.eu\/justice\/data-protection\/document\/studies\/files\/final_report_india_en.pdf\">Report to the Commission on the state of India&#8217;s DP Laws.<\/a><\/li>\n<li><a href=\"https:\/\/ccgnludelhi.wordpress.com\/2016\/04\/21\/the-new-data-protection-directive-and-its-impact-on-india\/\">Commentary from the Delhi Law University on India&#8217;s preparedness for EU designation as safe for personal data.<\/a><\/li>\n<\/ol>\n<h3>Australia<\/h3>\n<ol>\n<li><a href=\"https:\/\/web.archive.org\/web\/20171123024310\/http:\/\/ec.europa.eu\/justice\/data-protection\/document\/studies\/files\/new_privacy_challenges\/final_report_country_report_b2_australia.pdf\">http:\/\/ec.europa.eu\/justice\/data-protection\/document\/studies\/files\/new_privacy_challenges\/final_report_country_report_b2_australia.pdf<\/a>, are not deemed adequate<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Some notes and links pertaining to the GDPR,<\/p>\n","protected":false},"author":1,"featured_media":3011,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_share_on_mastodon":"0"},"categories":[140],"tags":[1007,1073,141,678],"class_list":["post-3010","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-politics","tag-european-union","tag-gdpr","tag-politics-2","tag-privacy"],"share_on_mastodon":{"url":"","error":""},"jetpack_featured_media_url":"https:\/\/davelevy.info\/wiki\/wp-content\/uploads\/2016\/11\/privacy-w650.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts\/3010","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/comments?post=3010"}],"version-history":[{"count":11,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts\/3010\/revisions"}],"predecessor-version":[{"id":10193,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts\/3010\/revisions\/10193"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/media\/3011"}],"wp:attachment":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/media?parent=3010"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/categories?post=3010"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/tags?post=3010"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}