Articles

The Dutch House of Representatives requests Privacy Impact Assessment for new legislation

The Dutch House of Representatives requests Privacy Impact Assessment for new legislation

The Dutch House of Representatives requests Privacy Impact Assessment for new legislation

30.04.2015

On 11 November 2014, the motion Segers/Oosenbrug on Privacy Impact Assessments was adopted by the House of Representatives [“the House”]. The motion was proposed in connection with a legislative proposal, namely 34000 VII Budget Memorandum of Interior and Kingdom Relations 2015. The House expects a so-called Privacy Impact Assessment [“PIA”] to be performed by the government when proposed legislation may have an impact on the processing of personal data. If the PIA is not performed, it will be up to the government to explain why the PIA is missing.

A PIA is a tool designed to help with setting out privacy risks in the development of new policies and relevant legislation. Questionnaires and test models are examples which can be used. The purpose behind performing a PIA is to put measures in place to reduce or eliminate privacy risks at an early stage.

A “Key Model Privacy Impact Assessment Civil Service” has been in place within the government since 2013. This model requires the government to perform a PIA while developing new legislation or policy related to the installation of large data files or the construction of new IT systems.

The model has to be taken into account and considered in the Explanatory Memorandum of the legislation concerned. The House wants to introduce an obligatory PIA for all new legislation likely to have an impact on the processing of personal data. In practice, the broadly defined motion will lead to PIAs being undertaken on a regular basis. Minister Plasterk of Interior and Kingdom Relations indicated that the motion supports government policy. He did point out that the application of the current key model will be evaluated in the summer of 2015.

The minister is not required to actually implement the adopted motion. Nevertheless, he will have to inform the House via the annual budget whether or not he has taken action in respect of the motion.

The call for a PIA by the government is in line with the proposed European privacy regulation. The new Regulation in article 33, expected to be agreed on at European level in the course of 2015, imposes an obligation to perform a PIA by companies and governments if the intended data processing “present[s] specific risks to the rights and freedoms of data subjects by virtue of their nature, their scope or their purposes.”

Currently, there are already some prior tests in place. In addition to the opinion of the Council of State, the government is required to ask the Data Protection Authority [“DPA”] for advice on proposed legislation that is fully or largely related to data processing under article 51(2) Dutch Data Protection Act.

The added value of a PIA lies in the fact that the privacy impact of new legislation is critically evaluated at an early stage of the legislative process. The broadly defined motion means, however, that more proposals may be subject to a PIA, when compared with the amount of times the DPA is requested to advise at present.

The wording of the motion is not clear on whether “new legislation” only applies to laws, orders of Councils or even ministerial regulations. One thing is obvious: the privacy aspects of laws and regulations may look forward to increasing scrutiny and developments in the near future.

Source: https://zoek.officielebekendmakingen.nl/dossier/33727/kst-34000-VII-21.html

Click here for a PDF version of the 51st edition of our ICT Law Newsletter.

Team

Related news

02.07.2019 NL law
Debate night: HR Analytics: opportunity or threat?

Seminar - On 2 July 2019, Stibbe's Digital Economy Group will host a debate night in Amsterdam on the hot topic of HR analytics. During Stibbe's debate night, speakers from the world of business, politics, science and law will exchange views on HR analytics, how they can be used in practice, and their development in the context of employment and privacy law.

Read more

06.06.2019 BE law
TMT Roundtable: Getting a handle on software quality

Roundtable - Erik Valgaeren, TMT Partner at Stibbe Brussels, and his team organize a roundtable on software quality in our Brussels office on June 6th, 2019. Software quality is a recurring theme in many matters handled by our TMT team. Whether our assistance relates to preparing tender documents, contracting effectively, assessing proper performance or allocating ownership and accountability in challenging IT projects, questions concerning software quality always arise.

Read more

06.06.2019 NL law
Masterclass: Alcohol and drug testing in the workplace

Masterclass - Stibbe will host a masterclass entitled 'Alcohol and drug testing in the workplace' on 6 June in Amsterdam. During this masterclass, employment law expert Johan Zwemmer and privacy experts Frederiek Fernhout and Judica Krikke will discuss the Dutch Data Protection Authority's general prohibition of these tests and discuss whether and how employers should implement.

Read more

07.06.2019 BE law
Part three - GDPR and public law: To retroact or not?

Articles - Since the General Data Protection Regulation (“GDPR”) became applicable almost one year ago, multiple questions have arisen about its interaction with other fields of law. In this three-part blog series of “GDPR and public law”, we discuss three capita selecta of the interaction of GDPR with public law and government. In this blog we discuss the retroactive application of GDPR.

Read more

06.06.2019 NL law
Masterclass: Alcohol- en drugstesten op de werkvloer

Masterclass - Stibbe in Amsterdam organiseert op 6 juni de masterclass 'Alcohol- & drugstesten op de werkvloer'. Tijdens deze masterclass bespreken arbeidsrechtexpert Johan Zwemmer en privacydeskundigen Frederiek Fernhout en Judica Krikke het algemene verbod van de Autoriteit Persoonsgegevens op deze testen voor werkgevers en leggen zij onder meer uit hoe hiermee moet worden omgegaan.

Read more

Our website uses functional cookies for the functioning of the website and analytic cookies that enable us to generate aggregated visitor data. We also use other cookies, such as third party tracking cookies - please indicate whether you agree to the use of these other cookies:

Privacy – en cookieverklaring