Menu principal du site

• by word

• by document number

• by date

• by OJ reference

• by CELEX number

• more options...

• Treaties
• International agreements
• Legislation in force
• Consolidated legislation
• Preparatory acts
• Case-law
• Parliamentary questions

• Budget of the European Union
• ECICS
• The institutions' registers
• TARIC
• EU Pesticides Database
• EU legislation on statistics

• Summaries of EU Legislation
• The ABC of European Union law

• Legislative drafting
• Statistics on EU legislation
• Types of documents in EUR-Lex

Personal Data Protection

The European policy on personal data protection seeks to strike a balance between a high level of protection for the privacy of individuals and the free movement of personal data within the EU.

For this reason, there are strict limits on the collection and use of personal data, and each EU country is required to set up an independent national data-protection body.

The EU has set a number of objectives for improved data protection using various information and communication technologies, and is planning measures to achieve these objectives.

On 25th of January 2012, the European Commission proposed a comprehensive reform of the EU's 1995 data protection rules to strengthen online privacy rights and boost Europe's digital economy.

• Legislative instruments
• Preparatory acts
• Other acts

Legislative instruments

• 32011D0061
  

  2011/61/EU: Commission Decision of 31 January 2011 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the State of Israel with regard to automated processing of personal data (notified under document C(2011) 332) Text with EEA relevance

  Official Journal L 027 , 01/02/2011 P. 0039 - 0042

• 32011D0547
  

  2011/547/EU: Council Decision of 12 September 2011 on the launch of automated data exchange with regard to Vehicle Registration Data (VRD) in Romania

  Official Journal L 242 , 20/09/2011 P. 0008 - 0008

• 32011D0715
  

  2011/715/: Council Decision of 27 October 2011 on the launch of automated data exchange with regard to DNA data in Latvia

  Official Journal L 285 , 01/11/2011 P. 0024 - 0024

• 32011R1179
  

  Commission Implementing Regulation (EU) No 1179/2011 of 17 November 2011 laying down technical specifications for online collection systems pursuant to Regulation (EU) No 211/2011 of the European Parliament and of the Council on the citizens’ initiative

  Official Journal L 301 , 18/11/2011 P. 0003 - 0009

• 32002D1247
  

  Decision No 1247/2002/EC of the European Parliament, of the Council and of the Commission of 1 July 2002 on the regulations and general conditions governing the performance of the European Data-protection Supervisor's duties

  Official Journal L 183 , 12/07/2002 P. 0001 - 0002

• 12007P008
  

  Charter of Fundamental Rights of the European Union - TITLE II - FREEDOMS - Article 8 - Protection of personal data

  Official Journal 303 , 14/12/2007 P. 0004 - 0004

• 12008E016
  

  Consolidated version of the Treaty on the Functioning of the European Union - PART ONE: PRINCIPLES - TITLE II: PROVISIONS HAVING GENERAL APPLICATION - Article 16 (ex Article 286 TEC)

  Official Journal 115 , 09/05/2008 P. 0055 - 0055

• 31995L0046
  

  Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data

  Official Journal L 281 , 23/11/1995 P. 0031 - 0050

• 32001D0497
  

  2001/497/EC: Commission Decision of 15 June 2001 on standard contractual clauses for the transfer of personal data to third countries, under Directive 95/46/EC (Text with EEA relevance) (notified under document number C(2001) 1539)

  Official Journal L 181 , 04/07/2001 P. 0019 - 0031

• 32011H0136
  

  2011/136/EU: Commission Recommendation of 1 March 2011 guidelines for the implementation of data protection rules in the Consumer Protection Cooperation System (CPCS)

  Official Journal L 057 , 02/03/2011 P. 0044 - 0053

• 32003G0228(01)
  

  Council Resolution of 18 February 2003 on a European approach towards a culture of network and information security

  Official Journal C 048 , 28/02/2003 P. 0001 - 0002

• 32002L0058
  

  Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications)

  Official Journal L 201 , 31/07/2002 P. 0037 - 0047

• 32008D0049
  

  2008/49/EC: Commission Decision of 12 December 2007 concerning the implementation of the Internal Market Information System (IMI) as regards the protection of personal data (notified under document number C(2007) 6306) (Text with EEA relevance )

  Official Journal L 013 , 16/01/2008 P. 0018 - 0023

• 32002X0327(01)
  

  Council Act of 28 February 2002 amending the Council Act of 12 March 1999 adopting the rules governing the transmission of personal data by Europol to third States and third bodies

  Official Journal C 076 , 27/03/2002 P. 0001 - 0002

• 32009D0917
  

  Council Decision 2009/917/JHA of 30 November 2009 on the use of information technology for customs purposes

  Official Journal L 323 , 10/12/2009 P. 0020 - 0030

• 32010D0087
  

  2010/87/: Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council (notified under document C(2010) 593) (Text with EEA relevance)

  Official Journal L 039 , 12/02/2010 P. 0005 - 0018

• 31999F0330
  

  Council Act of 12 March 1999 adopting the rules governing the transmission of personal data by Europol to third States and third bodies

  Official Journal C 88 , 30/03/1999 P. 0001 - 0003

• 32009D1010
  

  Decision of the Management Board of Europol of 4 June 2009 on the conditions related to the processing of data on the basis of Article 10(4) of the Europol Decision

  Official Journal L 348 , 29/12/2009 P. 0001 - 0002

• 31992D0242
  

  92/242/EEC: Council Decision of 31 March 1992 in the field of security of information systems

  Official Journal L 123 , 08/05/1992 P. 0019 - 0025

• 32005Q0319(01)
  

  Rules of Procedure on the processing and protection of personal data at Eurojust (Text adopted unanimously by the college of Eurojust during the meeting of 21 October 2004 and approved by the Council on 24 February 2005)

  Official Journal C 068 , 19/03/2005 P. 0001 - 0010

• 32008R0767
  

  Regulation (EC) No 767/2008 of the European Parliament and of the Council of 9 July 2008 concerning the Visa Information System (VIS) and the exchange of data between Member States on short-stay visas (VIS Regulation)

  Official Journal L 218 , 13/08/2008 P. 0060 - 0081

• 32008F0977
  

  Council Framework Decision 2008/977/JHA of 27 November 2008 on the protection of personal data processed in the framework of police and judicial cooperation in criminal matters

  Official Journal L 350 , 30/12/2008 P. 0060 - 0071

• 32009H0387
  

  Commission Recommendation of 12 May 2009 on the implementation of privacy and data protection principles in applications supported by radio-frequency identification (notified under document number C(2009) 3200)

  Official Journal L 122 , 16/05/2009 P. 0047 - 0051

• 32009H0329
  

  Commission Recommendation of 26 March 2009 on data protection guidelines for the Internal Market Information System (IMI) (notified under document number C(2009) 2041) (Text with EEA relevance)

  Official Journal L 100 , 18/04/2009 P. 0012 - 0028

Preparatory acts

• 52012DC0009
  

  COMMUNICATION FROM THE COMMISSION TO THE EUROPEAN PARLIAMENT, THE COUNCIL, THE EUROPEAN ECONOMIC AND SOCIAL COMMITTEE AND THE COMMITTEE OF THE REGIONS Safeguarding Privacy in a Connected World A European Data Protection Framework for the 21st Century

• 52010DC0609
  

  COMMUNICATION FROM THE COMMISSION TO THE EUROPEAN PARLIAMENT, THE COUNCIL, THE ECONOMIC AND SOCIAL COMMITTEE AND THE COMMITTEE OF THE REGIONS A comprehensive approach on personal data protection in the European Union

• 52011DC0225
  

  REPORT FROM THE COMMISSION TO THE COUNCIL AND THE EUROPEAN PARLIAMENT Evaluation report on the Data Retention Directive (Directive 2006/24/EC)

• 52011XX1213(01)
  

  Opinion of the European Data Protection Supervisor on the proposal for a regulation of the European Parliament and of the Council concerning customs enforcement of intellectual property rights

  Official Journal C 363 , 13/12/2011 P. 0001 - 0005

• 52011PC0758
  

  Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL establishing for the period 2014 to 2020 the Rights and Citizenship Programme

• 52002SC0280
  

  Recommendation for a Council Decision on the vote to be taken by Member States within the competent bodies of the Council of Europe, on behalf of the European Community, in favour of adopting the draft Recommendation on the protection of personal data collected and processed for insurance purposes, and of authorising the publication of its Explanatory Memorandum

• 51997AP0361
  

  Decision on the joint text approved by the Conciliation Committee for a European Parliament and Council Directive concerning the processing of personal data and the protection of privacy in the telecommunications sector (C4- 0571/97 00/0288(COD))

  Official Journal C 371 , 08/12/1997 P. 0174

• 51995AP0120
  

  Decision on the common position established by the Council with a view to the adoption of a European Parliament and Council Directive on the protection of individuals with regard to the processing of personal data and on the free movement of such data (C4-0051/95 - 00/0287(COD)) (Codecision procedure: second reading)

  Official Journal C 166 , 03/07/1995 P. 0105

• 52010XG0504(01)
  

  The Stockholm Programme — An open and secure Europe serving and protecting citizens

  Official Journal C 115 , 04/05/2010 P. 0001 - 0038

• 52010DC0385
  

  COMMUNICATION FROM THE COMMISSION TO THE EUROPEAN PARLIAMENT AND THE COUNCIL Overview of information management in the area of freedom, security and justice

• 52010SC1122
  

  COMMISSION STAFF WORKING DOCUMENT IMPACT ASSESSMENT Accompanying document to the Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on attacks against information systems, and repealing Council Framework Decision 2005/222/JHA {COM(2010) 517 final} {SEC(2010) 1123 final}

• 52009IP0194
  

  Strengthening security and fundamental freedoms on the Internet European Parliament recommendation of 26 March 2009 to the Council on strengthening security and fundamental freedoms on the Internet (2008/2160(INI))

  Official Journal C 117 E , 06/05/2010 P. 0206 - 0213

• 52011AE0999
  

  Opinion of the European Economic and Social Committee on the Communication from the Commission to the European Parliament, the Council, the Economic and Social Committee and the Committee of the Regions — A comprehensive approach on personal data protection in the European Union COM(2010) 609 final

  Official Journal C 248 , 25/08/2011 P. 0123 - 0129

• 52010XX1230(02)
  

  Opinion of the European Data Protection Supervisor on the Communication from the Commission on the global approach to transfers of Passenger Name Record (PNR) data to third countries

  Official Journal C 357 , 30/12/2010 P. 0007 - 0011

• 52010XX1229(02)
  

  Opinion of the European Data Protection Supervisor on the proposal for a Council Decision on the conclusion of the Agreement between the European Union and the United States of America on the processing and transfer of Financial Messaging Data from the European Union to the United States for purposes of the Terrorist Finance Tracking Program (TFTP II)

  Official Journal C 355 , 29/12/2010 P. 0010 - 0015

• 52011XX1213(01)
  

  Opinion of the European Data Protection Supervisor on the proposal for a regulation of the European Parliament and of the Council concerning customs enforcement of intellectual property rights

  Official Journal C 363 , 13/12/2011 P. 0001 - 0005

Other acts

• 62009CA0509
  

  Joined Cases C-509/09 and C-161/10: Judgment of the Court (Grand Chamber) of 25 October 2011 (references for preliminary rulings from the Bundesgerichtshof, Tribunal de grande instance de Paris — Germany, France) — eDate Advertising GmbH v X, Olivier Martinez, Robert Martinez v MGN Limited (Regulation (EC) No 44/2001 — Jurisdiction and the enforcement of judgments in civil and commercial matters — Jurisdiction ‘in matters relating to tort, delict or quasi-delict’ — Directive 2000/31/EC — Publication of information on the internet — Adverse effect on personality rights — Place where the harmful event occurred or may occur — Law applicable to information society services)

  Official Journal C 370 , 17/12/2011 P. 0009 - 0010

• C2006/178/05
  

  Case C-475/04: Judgement of the Court (Sixth Chamber) of 1 June 2006 — Commission of the European Communities v Hellenic Republic (Failure of a Member State to fulfil obligations — Directive 2002/58/EC — Electronic communications — Processing of personal data — Protection of privacy — Protection of natural persons — Failure to transpose within the prescribed period)

  Official Journal C 178 , 29/07/2006 P. 0003 - 0004

• C2004/007/04
  

  Judgment of the Court of 6 November 2003 in Case C-101/01 (Reference for a preliminary ruling from the Göta hovrätt): Bodil Lindqvist (Directive 95/46/EC — Scope — Publication of personal data on the internet — Place of publication — Definition of transfer of personal data to third countries — Freedom of expression — Compatibility with Directive 95/46 of greater protection for personal data under the national legislation of a Member State)

  Official Journal C 007 , 10/01/2004 P. 0003 - 0004

• 92002E3440
  

  WRITTEN QUESTION E-3440/02 by Marco Cappato (NI) to the Council. Transfer of personal data between Europe and the USA.

  Official Journal 222 E , 18/09/2003 P. 0071 - 0072

• 92003E0871
  

  WRITTEN QUESTION P-0871/03 by Bart Staes (Verts/ALE) to the Commission. Exchanges of personal data between airlines and the CIA.

  Official Journal 222 E , 18/09/2003 P. 0239 - 0241

• C2003/171/03
  

  Judgment of the Court of 20 May 2003 in Joined Cases C-465/00, C-138/01 and C-139/01 (Reference for a preliminary ruling from the Verfassungsgerichtshof and Oberster Gerichtshof): Rechnungshof (C-465/00) v Österreichischer Rundfunk and Others and between Christa Neukomm (C-138/01), Joseph Lauermann (C-139/01) and Österreichischer Rundfunk (Protection of individuals with regard to the processing of personal data — Directive 95/46/EC — Protection of private life — Disclosure of data on the income of employees of bodies subject to control by the Rechnungshof)

  Official Journal C 171 , 19/07/2003 P. 0003 - 0004

• 92002E3392
  

  WRITTEN QUESTION E-3392/02 by Astrid Thors (ELDR) to the Commission. Unsolicited advertising in Windows, protection of personal data in telecommunications networks.

  Official Journal 155 E , 03/07/2003 P. 0148 - 0149

• 92002E1724
  

  WRITTEN QUESTION E-1724/02 by Bart Staes (Verts/ALE) to the Commission. Electronic identity cards and the protection of personal data.

  Official Journal 052 E , 06/03/2003 P. 0097 - 0099

• 92002E0108
  

  WRITTEN QUESTION P-0108/02 by Kathalijne Buitenweg (Verts/ALE) to the Commission. Safeguards when supplying personal data to third states and authorities.

  Official Journal 277 E , 14/11/2002 P. 0019 - 0020

• 92000E0673
  

  WRITTEN QUESTION E-0673/00 by Cristiana Muscardini (UEN) and Roberta Angelilli (UEN) to the Commission. Transfer of personal data and respect for privacy.

  Official Journal 374 E , 28/12/2000 P. 0130 - 0131

• 92002E1068
  

  WRITTEN QUESTION E-1068/02 by Glyn Ford (PSE) to the Commission. Passports, biometric data and data protection.

  Official Journal 110 E , 08/05/2003 P. 0010 - 0011

• 92001E3712
  

  WRITTEN QUESTION E-3712/01 by Jonas Sjöstedt (GUE/NGL) to the Commission. Interpretation of journalistic purposes in the EU data protection directive.

  Official Journal 147 E , 20/06/2002 P. 0226 - 0227

• 62009TA0082
  

  Case T-82/09: Judgment of the General Court of 23 November 2011 — Dennekamp v Parliament (Access to documents — Regulation (EC) No 1049/2001 — Documents relating to the affiliation of certain Members of the European Parliament to the additional pension scheme — Refusal to grant access — Exception relating to the protection of privacy and the integrity of the individual — Article 8(b) of Regulation (EC) No 45/2001 — Transfer of personal data)

  Official Journal C 013 , 14/01/2012 P. 0011 - 0011

• 62010CN0360
  

  Case C-360/10: Reference for a preliminary ruling from the Rechtbank van eerste aanleg te Brussel (Belgium) lodged on 19 July 2010 — Belgische Vereniging van Auteurs, Componisten en Uitgevers (Sabam) v Netlog NV

  Official Journal C 288 , 23/10/2010 P. 0018 - 0019