The EU has approved new data protection rules to boost online privacy, streamline legislation between the 28 member states and boost police and security cooperation.
The rules will for the first time create a strong data protection law for Europe’s 500 million citizens, replacing an outdated patchwork of national rules that only allowed for small fines in cases of violation.
The rules were adopted at the plenary, as no amendments or requests for rejections were received.
The Parliament’s chief negotiator, Jan Philipp Albrecht, hailed the move as a “huge step forward for fundamental rights in the EU”.
The rules include a “right to be forgotten” that means consumers can ask for non-essential information to be deleted from web searches, such as those of Google.
The security of European citizens should never be ensured at the expense of their rights and freedoms
They also state that individuals must give their “clear and affirmative consent” before private data is processed by companies or governments. This point became important after leaks two years ago showed allegedly widespread US government snooping on European data such as phone calls and e-mails.
The new rules also allow for the streamlining of data transfers for policing and judicial purposes, helping to improve security in the wake of the November 13 attacks in Paris, which killed 130 people, and last month’s suicide bombings in Brussels, which left 32 dead.
Privacy has become a hot topic amid pressure by companies to get information on consumers, as well as the needs of security services to have as much data as possible on potential suspects involved in extremist attacks.
The European Parliament’s president, Martin Schulz, said that “the security of European citizens should never be ensured at the expense of their rights and freedoms”.
But he welcomed the new rules as “crucial steps” in the digital age when the privacy of consumers has come under ever greater threat. Albrecht said firms breaching EU data protection rules could be fined as much as four per cent of annual turnover, which could amount to billions of dollars.
The rules should become official within a two-year span.