ICO: ‘Don’t jump gun on EU laws’

The Information Commissioner’s Office is urging caution over the proposed shake-up of European data laws – set to be revealed in January – following widespread reports that it could wreak havoc with businesses’ privacy policies, especially those operating online.
In a blog post, ICO deputy commissioner David Smith said it was still early days, although he called on brand owners to get involved, adding: “The Commission would welcome a higher level of engagement from those representing European business and citizens’ interests. Time is running out but the Commission are willing to listen and there may still be an opportunity to have your say before their proposals are published.”
The main question-mark, according to Smith, is whether it will be a new directive or regulation. A regulation is binding across all states, whereas a directive allows member states the freedom to interpret the ruling in different ways. Whatever the case, Smith said the “changes to the law are likely to take at least a couple of years [after they are unveiled] to agree and a timetable for implementation will then be required”.
The UK data watchdog has already stressed that it does not believe the “right to be forgotten” – one of the key measures of the proposed changes – is enforceable, with Culture Minister Ed Vaizey in agreement.
Smith added: “What we don’t want to see though are unnecessary burdens on businesses. We want a framework that is clear about the standards we expect businesses to achieve, but leaves them freedom to decide how to do so.”

Related stories
EU data law to balloon email costs
EU data row grows as ICO wades in
Vaizey: EU plans ‘unenforceable’
New laws threaten online ‘havoc’