Vital to protect our digital economy
ONE year ago, ahead of the European Data Protection Day 2012, the European Commission proposed a root-and-branch reform of the EU’s data protection rules to make them fit for the 21st century. One year on, it’s easy to see why clear and modernised rules are needed.
New rules are needed which both protect citizens’ rights and facilitate business in the digital age. The Lisbon Treaty provides a legal basis for strengthened data protection safeguards for citizens.
A key objective of the proposals, therefore, is to increase individuals’ control over their personal data, thereby boosting confidence and trust in the digital economy.
We live in a digital world, in which personal data has enormous economic value. Just look at the figures: In 1993, the internet carried only 1% of all telecommunicated information; by 2007, this figure was more than 97%.
In 2011, the European market for cloud computing services had a value of €3.5bn for software products and €1.1bn for hardware products. Estimates for 2014 predict that this market will grow to €11bn. This is exponential growth. With more than 1bn people worldwide connected to smartphones, an increasing variety of data can now be linked to individual identities.
The insights that can be derived from linking previously separate bits of data have become essential for business and for innovation.
Europe needs to take advantage of this new computing and information-sharing landscape. We need rules that don’t penalise companies for working cross-border. We need a solid legislative framework that will protect citizens and at the same time allow companies to take advantage of Europe’s digital single market, with 500m potential customers.
Some estimates show that EU GDP could grow by a further 4% by 2020 if the EU takes the necessary steps to create a modern digital single market.
These new business models depend on collecting, understanding and moving personal data. That is why the European Commission, the European Parliament, and the Council under the Irish Presidency of the EU, are currently spearheading a reform of the EU’s data protection rules which date back to 1995 — pre-internet times.
Our goal is to make the EU common market for goods and services, more accessible to businesses who process data and improve the trust and confidence of consumers who use their services.
The proposed reforms will do three things to help business to innovate and contribute to growth:
*First — it will cut costs and increase legal certainty by replacing the current patchwork of laws in Europe with a single uniform set of rules for all 27 EU countries. We are cutting red tape by introducing a one-stop shop for businesses to deal with regulators. In the future, companies will only have to deal with the data protection authorities in the EU country in which they are based: One interlocutor, not 27.
*Second, we should never forget that violations of data protection rules can have an enormous cost. Getting companies to think ahead about the need for data protection safeguards will reduce the risk. Making sure customers are notified fast when their data is hacked will generate trust. More people will do business online: good for growth and good for jobs. This is common sense.
*Third, the rules provide clarity for international data transfers. Personal data can be collected in Berlin and processed in Bangalore. The rules will improve the system of binding corporate rules to make these exchanges less burdensome and more secure.
The EU data protection reforms were discussed by justice ministers and members of the European Parliament in Dublin two weeks ago.
They received strong support, helping to accelerate the pace for getting this important reform agreed before the end of this year.
The message is clear: A uniform and modern data protection law is vital to secure trust and generate growth in the digital single market.
Viviane Reding is vice-president of the European Commission in charge of justice. Alan Shatter is the Minister for Justice. This article was written to mark International Data Protection Day






