21st Century Learning and Teaching

'Data Protection' Package: a historic agreement
15-12-2015
On 15 December 2015, the Luxembourg Presidency of the Council of the European Union reached an informal agreement in trialogues with the European Parliament on the 'Data Protection' Package which will set out new European rules on privacy in the digital age.

The agreement reached by the Luxembourg Presidency will have to be confirmed at the level of the Council of the EU by the 28 Member States, and will be addressed by a Coreper meeting to be held before 21 December 2015.

The 'Data Protection' Package, under negotiation since the European Commission put forward the proposal in January 2012, includes a Regulation establishing the general framework for the protection of personal data and a Directive on the protection of personal data processed for the purpose of law enforcement.

Following the adoption of general approach on the Regulation in the JHA Council of June 2015 and the adoption of a general approach on the Directive in the JHA Council of October 2015, the co-legislators ─ the European Parliament and Council of the European Union acting under the Luxembourg Presidency ─ have been engaged in intense negotiations in order to reach an agreement before the end of 2015.

Félix Braz, Luxembourg's Minister for Justice and President of the Council, declared: 'It is a fundamental agreement with significant consequences. This reform not only strengthens the rights of citizens, but also adapts the rules to the digital age for companies, whilst reducing the administrative burden. They are ambitious and forward-looking texts. We can have full confidence in the result.'

Learn more:

https://gustmees.wordpress.com/2013/12/21/privacy-in-the-digital-world-shouldnt-we-talk-about-it/

Das Bundesministerium des Inneren schreibt auf seiner Webseite:

„Betreiber Kritischer Infrastrukturen aus den Bereichen Energie, Informationstechnik und Telekommunikation, Transport und Verkehr, Gesundheit, Wasser, Ernährung sowie Finanz- und Versicherungswesen müssen damit künftig einen Mindeststandard an IT-Sicherheit einhalten und erhebliche IT-Sicherheitsvorfälle an das Bundesamt für Sicherheit in der Informationstechnik (BSI) melden.

“
In dem verabschiedeten IT-Sicherheitsgesetz steht außerdem auch, dass Unternehmen mit Bußgeldern rechnen müssen, wenn sie Hackerangriffe nicht melden. Die geplanten Strafen können sich auf bis zu 100.000 Euro belaufen, wenn „die betreffende Störung tatsächlich zu einem Ausfall oder einer Beeinträchtigung der Funktionsfähigkeit der Kritischen Infrastruktur geführt hat“.