Recital 48a (new)

2 would add wording.

1. 489 +Addition Axel VossEPP · ITRE–LIBE “The free movement of personal data within the Union and the protection of natural persons are objectives of equal rank of this Regulation. Where a…” numbered 48a

   (48a)The free movement of personal data within the Union and the protection of natural persons are objectives of equal rank of this Regulation. Where a provision of this Regulation is open to more than one interpretation in respect of processing privileged under Article 10a, preference is to be given to the interpretation that gives effect to both objectives. The privilege rests on an exchange: the controller or processor obtains a presumption of compliance and relief from documentation duties, and in return makes data available for objectives of general interest; that exchange establishes, in the assessment under Article 52(1) of the Charter, the proportionality of the privilege as a whole. The extent of the data to be made available should be proportionate to the nature and scale of the processing and to the size and capacity of the controller or processor. Standards applied in the market, including international standards, may afford safeguards equivalent to those of approved codes of conduct and certification mechanisms; the Board should include a standard in its list where compliance with the standard is independently verifiable and monitored and where its safeguards afford an equivalent level of protection, and should remove it where those conditions cease to be met. The ordinary commercial activities of a micro, small or medium-sized enterprise do not include the making available of personal data against remuneration as its principal activity. Article 10a provides a basis in Union law for the purposes of points (g) and (j) of Article 9(2); whether the processing is necessary remains to be assessed in the individual case, and the essence of the right to data protection is to be respected in every application of the Article. Specific and substantiated indications require concrete elements relating to the processing in question; the assertion of an infringement does not suffice, and full proof is not required. Standardised information fulfils the purpose of Articles 13 and 14 where it enables data subjects to identify the controller, understand the purposes of the processing and exercise their rights. For transfers to third countries, the presumption leaves intact the requirement that data subjects enjoy a level of protection essentially equivalent to that guaranteed within the Union. The rights of data subjects do not depend on the commitment; its withdrawal ends the privilege for the future and leaves obligations already incurred unaffected. The powers of supervisory authorities and the rights and remedies of data subjects shall remain unaffected.

   Justification

   This amendment creates an incentive model for data use serving general-interest objectives, such as intra-group administration, SME operations, research, archiving and statistics. Privileged status is limited to actors that make a data-sharing commitment and follow recognised safeguards, including codes, certification, BCRs or listed standards. The rebuttable presumption rewards accountable governance without lowering protection, excludes gatekeepers and VLOPs/VLOSEs, and covers high-risk processing only after a DPIA.

   Tabled by

   Axel Voss

   Group

   EPP

   Targets

   Digital Omnibus proposal Recital 48a (new)

   Document

   ITRE–LIBE amendments 401–526 to the draft report

   Source

   Official text, pages 76–77

   Printed header

   Recital 48 a (new)

   Links

   Link to this amendment
   Cite this amendment

2. 490 +Addition Bart Groothuis +9Renew · ITRE–LIBE “The incident reporting obligations under Union cybersecurity and digital legislation impose a significant administrative burden on entities…” numbered 48a

   (48a)The incident reporting obligations under Union cybersecurity and digital legislation impose a significant administrative burden on entities especially because they have divergent timelines, deadlines, reporting thresholds, and other divergent reporting obligations. A harmonised approach is therefore necessary.

   Tabled by

   Bart Groothuis, Ivars Ijabs, Morten Løkkegaard, Sophie Wilmès, Nikola Minchev, Svenja Hahn, Andreas Glück, Katri Kulmuni, João Cotrim De Figueiredo, Ana Vasconcelos

   Group

   Renew

   Targets

   Digital Omnibus proposal Recital 48a (new)

   Document

   ITRE–LIBE amendments 401–526 to the draft report

   Source

   Official text, page 78

   Printed header

   Recital 48 a (new)

   Links

   Link to this amendment
   Cite this amendment