European Union Justice Commissioner Viviane Reding has announced new proposals to the EU’s data protection laws that are designed to help individuals maintain control over of their personal data.

 

The EU’s Data Privacy Directive has not been updated in more than 10 years. 
 

The proposals include “the right to be forgotten,” which would force companies to deter the user data of those who request it. Companies also would be required to report data breaches within 24 hours, where feasible. The proposed changes also introduce the concept of “data portability,” which would allow an individual to access the data that a company is holding on  her and transfer that data from one service provider to another. 
 

Data breaches would lead to penalties of up to €1 million (USD$1.3 million), or up to 2 percent of a company’s annual global revenue.

 

Reding says, “The protection of personal data is a fundamental right for all Europeans, but citizens do not always feel in full control of their personal data. My proposals will help build trust in online services because people will be better informed about their rights and in more control of their information.” She adds, “The reform will accomplish this while making life easier and less costly for businesses. A strong, clear and uniform legal framework at EU level will help to unleash the potential of the Digital Single Market and foster economic growth, innovation and job creation. “
 

The proposal would establish a single set of rules, saving businesses €2.3 billion (USD$ 3 billion), she says. Each EU member country also would have to establish a national data protection authority.
 

Businesses with more than 250 employees would have to appoint a data protection officer. The rules established by the law would apply to any company handling personal data in the EU market, regardless of the country where they are based.
 

The proposals have been passed on to the European Parliament and to EU member states for discussion. If adopted, they would take affect two years later.