Documents between United States companies or government relating to the formation of the GDPR

La demande est réussie.

Dear European Data Protection Supervisor,

Under the right of access to documents in the EU treaties, as developed in Regulation 1049/2001, I am requesting documents which contain the following information:

Any correspondence between your office and companies or government officials of the United States of America relating to any consultations during the policy formation of the General Data Protection Regulation 2016/679.

Yours faithfully,

James Wood

European Data Protection Supervisor, Contrôleur européen de la protection des données

4 Attachments

Dear Mr Wood,

 

We acknowledge the receipt of your request which was registered on 11
December 2018. In accordance with Article 7(1) of Regulation (EC) No
1049/2001 regarding public access to European Parliament, Council and
Commission documents, you will receive a reply within 15 working days (by
11 January 2019).

 

Your case has been registered with case number 2018-1063.

 

Please note that your personal data will only be processed for the
purposes of replying to your request and in accordance with the data
protection statement set out below. You can find the full version of our
data protection notice on access to documents requests on our [1]website.

 

You have lodged your application via the AskEU.org website. Please note
that this is a private website, which has no link with any institution of
the European Union. The European Data Protection Supervisor is not
accountable for any technical issues or problems linked to the use of this
system.

 

Yours sincerely,

 

 

 

 

 [2]cid:image001.png@01D08819.F93340B0 EDPS Secretariat 

Tel. +32 2
283 19
00 | Fax +32
2 283 19 50

 

[3]Description: Description:
Email [4][EDPS request email]

European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1040 Brussels

[5]Description: [7]Description: Description:
Description:   Website [8]www.edps.europa.eu
Twitter [6]@EU_EDPS

 

This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.

 

 

 

 

According to Articles 11 and 12 of Regulation (EC) 45/2001 on the
protection of individuals with regard to the processing of personal data
by the Community institutions and bodies and on the free movement of such
data, please be informed that your personal data (your contact details)
are processed by the EDPS, when proportionate and necessary, for the
purpose of handling your request. The legal base for this processing
operation is Article5(a). of Regulation (EC) 45/2001, the provisions on
the tasks and duties of the EDPS in the same Regulation and Article 52 of
the EDPS Rules of Procedure. Of course all is also based on your consent. 
The data processed are submitted by yourself. Your data might be
transferred to other EU institutions and bodies or to any third parties
only where necessary to ensure the appropriate handling of your request.
Your data will be stored by the EDPS in electronic and paper files for a
maximum of ten years. You have the right of access to the personal data we
hold regarding you and to rectify it if necessary. Any such request should
be addressed to the EDPS at [9][EDPS request email]. Further rules on
exercising your rights can be found in Art. 13 of the EDPS implementing
rules concerning the Data Protection Officer:
[10]https://secure.edps.europa.eu/EDPSWEB/we...

You can also lodge an appeal to the EDPS as supervisory authority under
article 11(f)(iii). In this case the EDPS will make sure that a different
department than that acting as controller would be in charge of your
appeal.

 

 

 

 

 

Personal Data Protection Statement

According to Articles 15 and 16 of Regulation (EU) 2018/1725 on the
protection of natural persons with regard to the processing of personal
data by the Union institutions, bodies, offices and agencies and on the
free movement of such data, please be aware that your personal data will
be processed by the EDPS, where proportionate and necessary, for the
purpose of answering your request. The legal base for this processing
operation is Regulation (EC) 1049/2001 and Recital 5 of Decision
1247/2002/EC of the European Parliament, of the Council and of the
Commission. Subject to applicable rules under EU legislation, the personal
data relating to you, as provided in your request, are used solely for the
purpose of replying to your request. EDPS staff members dealing with the
request will have access to the case file containing your personal data on
a need-to-know basis. Your personal data are not disclosed outside the
EDPS. Your personal data will be stored electronically for a maximum of
ten years after the closure of the case, or as long as the EDPS is under a
legal obligation to do so. You have the right to access your personal data
held by the EDPS and to obtain the rectification thereof, if necessary.
Any such request should be addressed to the EDPS at
[11][EDPS request email]. You may contact the data protection officer of
the EDPS ([12][email address]), if you have any remarks or
complaints regarding the way we process your personal data.

 

 

References

Visible links
1. https://edps.europa.eu/sites/edp/files/p...
4. mailto:[EDPS request email]
6. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
8. http://www.edps.europa.eu/
http://www.edps.europa.eu/
9. mailto:[EDPS request email]
10. https://secure.edps.europa.eu/EDPSWEB/we...
11. mailto:[EDPS request email]
12. mailto:[email address]

European Data Protection Supervisor, Contrôleur européen de la protection des données

4 Attachments

Dear Mr Wood,

 

We refer to your email dated 11 December 2018 with which you made a
request for access to documents, registered on the same day with case
number 2018-1063.

 

Your application is currently being handled. However, we will not be in a
position to complete the handling of your application within the time
limit of 15 working days, which expires today.

 

An extended time limit is needed as the documents you requested originate
from third parties, which have been consulted.

 

Therefore, we have to extend the time limit by 15 working days, in
accordance with Article 7(3) of Regulation (EC) 1049/2001 regarding public
access to documents. The new time limit expires on 1 February 2019.

 

We apologise for this delay and any inconvenience this may cause.

 

Yours sincerely,

 

 [1]cid:image001.png@01D08819.F93340B0 EDPS Secretariat 

Tel. +32 2
283 19
00 | Fax +32
2 283 19 50

 

[2]Description: Description:
Email [3][EDPS request email]

European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1040 Brussels

[4]Description: [6]Description: Description:
Description:   Website [7]www.edps.europa.eu
Twitter [5]@EU_EDPS

 

This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.

 

 

 

Personal Data Protection Statement

According to Articles 15 and 16 of Regulation (EU) 2018/1725 on the
protection of natural persons with regard to the processing of personal
data by the Union institutions, bodies, offices and agencies and on the
free movement of such data, please be aware that your personal data will
be processed by the EDPS, where proportionate and necessary, for the
purpose of answering your request. The legal base for this processing
operation is Regulation (EC) 1049/2001 and Recital 5 of Decision
1247/2002/EC of the European Parliament, of the Council and of the
Commission. Subject to applicable rules under EU legislation, the personal
data relating to you, as provided in your request, are used solely for the
purpose of replying to your request. EDPS staff members dealing with the
request will have access to the case file containing your personal data on
a need-to-know basis. Your personal data are not disclosed outside the
EDPS. Your personal data will be stored electronically for a maximum of
ten years after the closure of the case, or as long as the EDPS is under a
legal obligation to do so. You have the right to access your personal data
held by the EDPS and to obtain the rectification thereof, if necessary.
Any such request should be addressed to the EDPS at
[8][EDPS request email]. You may contact the data protection officer of the
EDPS ([9][email address]), if you have any remarks or complaints
regarding the way we process your personal data.

 

References

Visible links
3. mailto:[EDPS request email]
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/
8. mailto:[EDPS request email]
9. mailto:[email address]

European Data Protection Supervisor, Contrôleur européen de la protection des données

28 Attachments

Dear Mr Wood,

 

Please find attached a scanned version of a letter sent to you be email
only, as well as the documents you requested.

 

Kind regards,

 

[1]cid:image001.png@01D08819.F93340B0 EDPS Secretariat

Tel.
+32
2
283
19
00
|
Fax
+32
2
283
19
50

 

[2]Description: Description:
Email[3][EDPS request email]

European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1040 Brussels

[4]Description: [6]Description: Description:
Description: Website[7]www.edps.europa.eu
Twitter[5]@EU_EDPS

 

This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.

 

References

Visible links
3. mailto:[EDPS request email]
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/