and jus-bit

As is well known in Madrid November 4 to 6 was held the 31st International Conference on Privacy, which involved the members and industry experts.

At the end of the conference was adopted the resolution " International Standards on the Protection of Personal Data and Privacy "currently only available in English.

The resolution is adopted, with the largest reserves of better insight, leave immediately reveal the need for common standards published in the area of ​​privacy that are not constrained by membership in one or the other State. In essence, the proponents adopted the resolution is based on a preliminary part, which includes a proposal as follows:

a) Define a set of principles and rights ensuring effective and consistent privacy protection at the international level with regard to the processing of personal data;
b) The facilitation of international flows of personal data necessary in a globalized world.

The preliminary part also provides definitions of terms used with respect to "processing" explaining that this term refers to any operation or set of operations, automated or otherwise, which is performed upon personal data, such as collection, storage, use, disclosure or deletion.

The second part provides 6 principles and the third concerns the legality of treatment. Part IV provides for the rights of the data, and Part V of the security. Part VI concerns of compliance and monitoring.

Finally, the resolution states:

In this perspective, the processing of personal data in public and private sector would be completed in a more uniform approach internationally:

a. fairly, lawfully and proportionately in relation to the specific, explicit and legitimate purposes;

b. on the basis of policy transparency, adequately inform data subjects and without any arbitrary discrimination against them;

c. ensure the accuracy, confidentiality and data security, and the legality of the treatment, and the rights of holders of access, rectification, cancellation and opposition against the data processing;

d. implementation of the principles of responsibility and obligation, even if the treatments that are performed by service providers on behalf of the controller;

e. guarantees the provision of more appropriate when the data are sensitive;

f. ensure that personal data transferred to the international level, have the level of protection provided by this set of standards,

g. under the control of an independent and impartial supervision with adequate powers and resources in connection with the duty to cooperate with each other;

h. in a new and modern framework of proactive measures, such as those oriented in particular to prevent and detect violations and based on the appointment of privacy officers, and efficient audit and evaluation of impact on privacy.

The same resolution also refers to the following international conferences for verification activities.

(Unofficial translation)