Article 32f
Amendments as tabled
Six amendments, each tabled separately · ITRE–LIBE amendments 527–776 to the draft report
769 ~Alternative Damian BoeselagerGreens/EFA · ITRE–LIBE “(This amendment applies throughout the text. Adopting it will necessitate corresponding changes throughout.)”
Duties of
recogniseddata altruism organisations (This amendment applies throughout the text. Adopting it will necessitate corresponding changes throughout.)- Tabled by
- Damian Boeselager on behalf of the Verts/ALE Group
- Group
- Greens/EFA
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – title
770 +Addition Elena Sancho Murillo +6S&D · ITRE–LIBE “Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of…” numbered 4a
(4a) In Article 32f, the following paragraph is inserted:
Recognised data altruism organisations shall publish an annual transparency report describing the categories of data collected, the objectives of general interest pursued, the categories of data users receiving access, any third-country transfers or access, the safeguards applied, the number of withdrawals of consent or permission, information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.'
Justification
Going back to wording on current Digital Governance Act following the EDPB and the EDPS recommendation to maintain an annual overview of the categories of all natural and legal persons that were allowed to process data could be required and an overview of the sources of revenue of the recognised data altruism organisation to ensure effective oversight.
- Tabled by
- Elena Sancho Murillo, Marina Kaljurand, Brando Benifei, José Cepeda, Lina Gálvez, Francisco Assis, Alex Agius Saliba
- Group
- S&D
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 4a
771 +Addition Michael McNamara +4Renew · ITRE–LIBE “Recognised data altruism organisations shall keep full and accurate records concerning: (a) natural or legal persons that were given the possibility…” numbered 5a
(5a)Recognised data altruism organisations shall keep full and accurate records concerning:
(a)natural or legal persons that were given the possibility to process data held by that recognised data altruism organisation, and their contact details;
(b)the date or duration of the processing of personal data or use of non-personal data;
(c)the purpose of the processing as declared by the natural or legal person that was given the possibility of processing;
(d)the fees paid by natural or legal persons processing the data, if any;
(e)a summary description of the objectives of general interest pursued by such data processing and the description of the technical means used for it, including a description of the techniques used to preserve privacy and data protection.
- Tabled by
- Michael McNamara, Irena Joveva, Oihane Agirregoitia Martínez, Veronika Cifrová Ostrihoňová, Christophe Grudler
- Group
- Renew
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Source
- Official text, page 172
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 5a (new)
772 +Addition Julie Rechagneux +7ECR, PfE · ITRE–LIBE “Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of…” numbered 5a
(5a)Recognised data altruism organisations shall implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them. Where the data are processed or shared in pseudonymised or anonymised form, they shall apply state-of-the-art privacy-preserving and privacy-enhancing techniques to that effect.
Justification
Recognised data altruism organisations collect and make available data voluntarily provided for objectives of general interest, and thereby handle data whose exposure entails significant risks for the natural and legal persons concerned. In addition to the duty to inform data holders after the event, laid down in paragraph 4, such organisations should be required to take preventive measures. This provision requires them to implement appropriate technical and organisational measures to prevent the re-identification of pseudonymised data, personal data breaches, and any unlawful acquisition, use, disclosure or transfer of the data made available to them, and to apply state-of-the-art privacy-preserving and privacy-enhancing techniques where the data are processed or shared in pseudonymised or anonymised form. This reinforces the protection of data subjects and data holders and strengthens trust in data altruism, in line with the principles of integrity and confidentiality laid down in Regulation (EU) 2016/679.
- Tabled by
- Julie Rechagneux, Mélanie Disdier, Aleksandar Nikolic, Pierre-Romain Thionnet, Alexandre Varaut, Fabrice Leggeri, Marion Maréchal, Christophe Bay
- Group
- ECR, PfE
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Source
- Official text, page 173
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 5a (new)
773 +Addition Mary KhanESN · ITRE–LIBE “Consent or permission must be given separately, voluntarily and in an informed and unambiguous manner for each purpose, data category and data user.…” numbered 5a
(5a)Consent or permission must be given separately, voluntarily and in an informed and unambiguous manner for each purpose, data category and data user. Refusal to give consent or permission shall not result in any disadvantage. It must be as easy to withdraw consent or permission as it is to give it.
- Tabled by
- Mary Khan
- Group
- ESN
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 5 a (new)
774 +Addition Michael McNamara +4Renew · ITRE–LIBE “Recognised data altruism organisations shall draw up and transmit to the relevant competent authority for the registration of data altruism…” numbered 5b
(5b)Recognised data altruism organisations shall draw up and transmit to the relevant competent authority for the registration of data altruism organisations an annual activity report which shall contain at least the following:
(a)categories of natural and legal persons that were allowed to process data it holds;
(b)information on sources of revenue of the recognised data altruism organisation, in particular all revenue from allowing access to the data, and on expenditure.
- Tabled by
- Michael McNamara, Irena Joveva, Oihane Agirregoitia Martínez, Veronika Cifrová Ostrihoňová, Christophe Grudler
- Group
- Renew
- Document
- ITRE–LIBE amendments 527–776 to the draft report
- Source
- Official text, page 174
- Printed header
- Article 1 – paragraph 1 – point 18 / Regulation (EU) 2023/2854 / Article 32f – paragraph 5b (new)