On the proposal for a regulation of the European Parliament and of the Council laying down measures for a high level of public sector interoperability across the Union (Interoperable Europe Act)
LIBE-AD-746882
Committee on Civil Liberties, Justice and Home Affairs · Rapporteur: Cyrus Engerer
Written by a language model from the full text only; every figure comes from the text. The paragraph links open the paragraph a statement rests on — check the text itself before relying on it.
The Committee on Civil Liberties, Justice and Home Affairs proposes amendments to the proposed Interoperable Europe Act, which sets up measures for public sector interoperability across the Union.¶¶ It wants new recitals stating that interoperability measures must respect data protection rules and that free and open source technologies are encouraged for transparency.¶¶ It would rename "regulatory sandboxes" as "innovative sandboxes" and require supervision by national supervisory authorities or the European Data Protection Supervisor when personal data are processed.¶¶¶ It would limit participation to one year, require detailed information on personal data processing, and add conditions including that data are not used for other purposes.¶¶¶ It would delete the provision that rules on artificial intelligence prevail in case of conflict.¶
Committee position. The committee proposes amendments to strengthen data protection in the proposed Interoperable Europe Act, including renaming sandboxes, adding supervisory roles, limiting participation to one year, and imposing strict conditions on personal data processing.¶¶¶
Key points
- Calls on the Committee on Industry, Research and Energy to take the amendments into account.¶
- Proposes a new recital stating that interoperability measures should respect data protection rules.¶
- Proposes a new recital encouraging free and open source technologies to enhance transparency on personal data processing.¶
- Renames "regulatory sandboxes" as "innovative sandboxes" and requires supervision by national supervisory authorities or the European Data Protection Supervisor when personal data are processed.¶¶¶
- Requires the Commission to consult the European Data Protection Supervisor thoroughly before authorising a sandbox that processes personal data.
- Requires requests for sandboxes to specify the purpose of processing, actors and roles, data categories, sources and retention period.
- Limits participation in a sandbox to one year from its establishment, removing the possibility of extension.¶
- Requires sandbox plans to describe specific issues, guidance expected, collaboration modalities, and reasons for processing personal data.¶¶¶
- Allows personal data processing only if strictly necessary and proportionate, with access limited to duly authorised persons in an isolated environment.¶¶
- Requires that processing does not affect data subjects' rights and that data are not processed for purposes other than those for which they were initially collected.¶¶
- Deletes the provision that artificial intelligence rules prevail in case of conflict.¶
Who is affected
- Public sector bodies participating in innovative sandboxes, which must ensure data protection safeguards.¶¶¶
- National supervisory authorities and the European Data Protection Supervisor, given supervisory roles over sandboxes processing personal data.
- Data subjects, whose rights must not be affected and whose data cannot be used for other purposes.¶¶