# Official Journal C 116/2014

| | ISSN 1977-091X |
| --- | --- |
| Official Journal
  of the European Union | C 116 |
| | |
| English edition | Information and Notices | Volume 5716 April 2014 |

ISSN 1977-091X

Official Journal

of the European Union

C 116

English edition

Information and Notices

Volume 5716 April 2014

---

| Notice No | Contents | page |
| --- | --- | --- |
| | II   Information |
| | INFORMATION FROM EUROPEAN UNION INSTITUTIONS, BODIES, OFFICES AND AGENCIES |
| | European Commission |
| 2014/C 116/01 | Non-opposition to a notified concentration (Case COMP/M.7104 — Crown Holdings/Mivisa) (
  1
  ) | 1 |

Notice No

Contents

page

II   Information

INFORMATION FROM EUROPEAN UNION INSTITUTIONS, BODIES, OFFICES AND AGENCIES

European Commission

2014/C 116/01

Non-opposition to a notified concentration (Case COMP/M.7104 — Crown Holdings/Mivisa) (
  1
  )

1

1

| | IV   Notices |
| --- | --- |
| | NOTICES FROM EUROPEAN UNION INSTITUTIONS, BODIES, OFFICES AND AGENCIES |
| | European Commission |
| 2014/C 116/02 | Euro exchange rates | 2 |
| 2014/C 116/03 | Explanatory Notes to the Combined Nomenclature of the European Union | 3 |
| | European Data Protection Supervisor |
| 2014/C 116/04 | Executive Summary of the Opinion of the European Data Protection Supervisor on the Communication from the Commission to the European Parliament and the Council on Rebuilding Trust in EU-US Data Flows and on the Communication from the Commission to the European Parliament and the Council on the Functioning of the Safe Harbour from the Perspective of EU Citizens and Companies Established in the EU(The full text of this Opinion can be found in English, French and German on the EDPS website (www.edps.europa.eu)) | 4 |
| | NOTICES FROM MEMBER STATES |
| 2014/C 116/05 | Commission notice pursuant to Article 17(5) of Regulation (EC) No 1008/2008 of the European Parliament and of the Council on common rules for the operation of air services in the Community — Invitation to tender in respect of the operation of scheduled air services in accordance with public service obligations (
  1
  ) | 8 |

IV   Notices

NOTICES FROM EUROPEAN UNION INSTITUTIONS, BODIES, OFFICES AND AGENCIES

European Commission

2014/C 116/02

Euro exchange rates

2

2014/C 116/03

Explanatory Notes to the Combined Nomenclature of the European Union

3

European Data Protection Supervisor

2014/C 116/04

Executive Summary of the Opinion of the European Data Protection Supervisor on the Communication from the Commission to the European Parliament and the Council on Rebuilding Trust in EU-US Data Flows and on the Communication from the Commission to the European Parliament and the Council on the Functioning of the Safe Harbour from the Perspective of EU Citizens and Companies Established in the EU(The full text of this Opinion can be found in English, French and German on the EDPS website (www.edps.europa.eu))

(The full text of this Opinion can be found in English, French and German on the EDPS website (www.edps.europa.eu))

4

NOTICES FROM MEMBER STATES

2014/C 116/05

Commission notice pursuant to Article 17(5) of Regulation (EC) No 1008/2008 of the European Parliament and of the Council on common rules for the operation of air services in the Community — Invitation to tender in respect of the operation of scheduled air services in accordance with public service obligations (
  1
  )

1

8

| | |
| --- | --- |
| | (1)   Text with EEA relevance |

---

(1)   Text with EEA relevance

1

| EN | |
| --- | --- |

EN

---

II Information

INFORMATION FROM EUROPEAN UNION INSTITUTIONS, BODIES, OFFICES AND AGENCIES

European Commission

| 16.4.2014 | EN | Official Journal of the European Union | C 116/1 |
| --- | --- | --- | --- |

16.4.2014

EN

Official Journal of the European Union

C 116/1

---

Non-opposition to a notified concentration

(Case COMP/M.7104 — Crown Holdings/Mivisa)

(Text with EEA relevance)

2014/C 116/01

On 14 March 2014, the Commission decided not to oppose the above notified concentration and to declare it compatible with the internal market. This decision is based on Article 6(1)(b) in conjunction with Article 6(2) of Council Regulation (EC) No 139/2004 (1). The full text of the decision is available only in English language and will be made public after it is cleared of any business secrets it may contain. It will be available:

| — | in the merger section of the Competition website of the Commission (http://ec.europa.eu/competition/mergers/cases/). This website provides various facilities to help locate individual merger decisions, including company, case number, date and sectoral indexes, |
| --- | --- |

—

in the merger section of the Competition website of the Commission (http://ec.europa.eu/competition/mergers/cases/). This website provides various facilities to help locate individual merger decisions, including company, case number, date and sectoral indexes,

| — | in electronic form on the EUR-Lex website (http://eur-lex.europa.eu/en/index.htm) under document number 32014M7104. EUR-Lex is the online access to European law. |
| --- | --- |

—

in electronic form on the EUR-Lex website (http://eur-lex.europa.eu/en/index.htm) under document number 32014M7104. EUR-Lex is the online access to European law.

---

(1)  OJ L 24, 29.1.2004, p. 1.

---

IV Notices

NOTICES FROM EUROPEAN UNION INSTITUTIONS, BODIES, OFFICES AND AGENCIES

European Commission

| 16.4.2014 | EN | Official Journal of the European Union | C 116/2 |
| --- | --- | --- | --- |

16.4.2014

EN

Official Journal of the European Union

C 116/2

---

Euro exchange rates (1)

15 April 2014

2014/C 116/02

1 euro =

| | Currency | Exchange rate |
| --- | --- | --- |
| USD | US dollar | 1,3803 |
| JPY | Japanese yen | 140,62 |
| DKK | Danish krone | 7,4662 |
| GBP | Pound sterling | 0,82510 |
| SEK | Swedish krona | 9,0902 |
| CHF | Swiss franc | 1,2162 |
| ISK | Iceland króna | |
| NOK | Norwegian krone | 8,2295 |
| BGN | Bulgarian lev | 1,9558 |
| CZK | Czech koruna | 27,459 |
| HUF | Hungarian forint | 307,23 |
| LTL | Lithuanian litas | 3,4528 |
| PLN | Polish zloty | 4,1868 |
| RON | Romanian leu | 4,4690 |
| TRY | Turkish lira | 2,9369 |
| AUD | Australian dollar | 1,4697 |
| CAD | Canadian dollar | 1,5171 |
| HKD | Hong Kong dollar | 10,7028 |
| NZD | New Zealand dollar | 1,5932 |
| SGD | Singapore dollar | 1,7283 |
| KRW | South Korean won | 1 437,09 |
| ZAR | South African rand | 14,5027 |
| CNY | Chinese yuan renminbi | 8,5868 |
| HRK | Croatian kuna | 7,6207 |
| IDR | Indonesian rupiah | 15 770,39 |
| MYR | Malaysian ringgit | 4,4777 |
| PHP | Philippine peso | 61,424 |
| RUB | Russian rouble | 49,7226 |
| THB | Thai baht | 44,555 |
| BRL | Brazilian real | 3,0621 |
| MXN | Mexican peso | 18,0012 |
| INR | Indian rupee | 83,1389 |

Currency

Exchange rate

USD

US dollar

1,3803

JPY

Japanese yen

140,62

DKK

Danish krone

7,4662

GBP

Pound sterling

0,82510

SEK

Swedish krona

9,0902

CHF

Swiss franc

1,2162

ISK

Iceland króna

NOK

Norwegian krone

8,2295

BGN

Bulgarian lev

1,9558

CZK

Czech koruna

27,459

HUF

Hungarian forint

307,23

LTL

Lithuanian litas

3,4528

PLN

Polish zloty

4,1868

RON

Romanian leu

4,4690

TRY

Turkish lira

2,9369

AUD

Australian dollar

1,4697

CAD

Canadian dollar

1,5171

HKD

Hong Kong dollar

10,7028

NZD

New Zealand dollar

1,5932

SGD

Singapore dollar

1,7283

KRW

South Korean won

1 437,09

ZAR

South African rand

14,5027

CNY

Chinese yuan renminbi

8,5868

HRK

Croatian kuna

7,6207

IDR

Indonesian rupiah

15 770,39

MYR

Malaysian ringgit

4,4777

PHP

Philippine peso

61,424

RUB

Russian rouble

49,7226

THB

Thai baht

44,555

BRL

Brazilian real

3,0621

MXN

Mexican peso

18,0012

INR

Indian rupee

83,1389

---

(1)  Source: reference exchange rate published by the ECB.

---

| 16.4.2014 | EN | Official Journal of the European Union | C 116/3 |
| --- | --- | --- | --- |

16.4.2014

EN

Official Journal of the European Union

C 116/3

---

Explanatory Notes to the Combined Nomenclature of the European Union

2014/C 116/03

Pursuant to the second indent of Article 9(1)(a) of Council Regulation (EEC) No 2658/87 (1), the Explanatory Notes to the Combined Nomenclature of the European Union (2) are hereby amended as follows:

On page 59, the following text is inserted before the Explanatory note to heading ‘1101 00 Wheat or meslin flour’:

| ‘Additional note 2 | As regards coconut, Additional note 2 to this chapter applies only to flour, meal and powder of coconut. Shredded desiccated coconut is classified under subheading 0801 11 00 and does not fall under the scope of heading 1106 even when it fulfils the criteria set out in point (b) of Additional note 2 to this chapter.
  Shredded desiccated coconut is presented in slices, small fragments or thin strips. Coconut flour, meal or powder consists of fine particles.’ |
| --- | --- |

‘Additional note 2

As regards coconut, Additional note 2 to this chapter applies only to flour, meal and powder of coconut. Shredded desiccated coconut is classified under subheading 0801 11 00 and does not fall under the scope of heading 1106 even when it fulfils the criteria set out in point (b) of Additional note 2 to this chapter.

Shredded desiccated coconut is presented in slices, small fragments or thin strips. Coconut flour, meal or powder consists of fine particles.’

---

(1)  Council Regulation (EEC) No 2658/87 of 23 July 1987 on the tariff and statistical nomenclature and on the Common Customs Tariff (OJ L 256, 7.9.1987, p. 1).

1

(2)  OJ C 137, 6.5.2011, p. 1.

2

---

European Data Protection Supervisor

| 16.4.2014 | EN | Official Journal of the European Union | C 116/4 |
| --- | --- | --- | --- |

16.4.2014

EN

Official Journal of the European Union

C 116/4

---

Executive Summary of the Opinion of the European Data Protection Supervisor on the Communication from the Commission to the European Parliament and the Council on ‘Rebuilding Trust in EU-US Data Flows’ and on the Communication from the Commission to the European Parliament and the Council on ‘the Functioning of the Safe Harbour from the Perspective of EU Citizens and Companies Established in the EU’

(The full text of this Opinion can be found in English, French and German on the EDPS website (www.edps.europa.eu))

2014/C 116/04

I.   Introduction

I.1.   Consultation of the EDPS

| 1. | On 27 November 2013, the Commission adopted the Communication from the Commission to the European Parliament and the Council on ‘Rebuilding Trust in EU-US Data Flows’ (1) (hereinafter: ‘the Communication on rebuilding trust’). This Communication is accompanied by a Report on the Findings by the EU Co-chairs of the ad hoc EU-US Working Group on Data Protection (hereinafter ‘the Report’ and ‘the Working Group’). |
| --- | --- |

1.

On 27 November 2013, the Commission adopted the Communication from the Commission to the European Parliament and the Council on ‘Rebuilding Trust in EU-US Data Flows’ (1) (hereinafter: ‘the Communication on rebuilding trust’). This Communication is accompanied by a Report on the Findings by the EU Co-chairs of the ad hoc EU-US Working Group on Data Protection (hereinafter ‘the Report’ and ‘the Working Group’).

| 2. | On the same date, the Commission adopted a Communication from the Commission to the European Parliament and the Council on ‘the Functioning of the Safe Harbour from the Perspective of EU Citizens and Companies Established in the EU’ (2) (hereinafter ‘the Communication on Safe Harbour’). |
| --- | --- |

2.

On the same date, the Commission adopted a Communication from the Commission to the European Parliament and the Council on ‘the Functioning of the Safe Harbour from the Perspective of EU Citizens and Companies Established in the EU’ (2) (hereinafter ‘the Communication on Safe Harbour’).

| 3. | The EDPS welcomes that he was given the possibility to provide informal comments to the Commission before the adoption of the above-mentioned documents. These documents were adopted by the Commission in the aftermath of the revelations about the surveillance programmes carried out by US intelligence services. Considering the impact of these surveillance programmes on individuals’ rights to privacy and to the protection of their personal data in the EU, he has decided to adopt this Opinion on his own initiative. |
| --- | --- |

3.

The EDPS welcomes that he was given the possibility to provide informal comments to the Commission before the adoption of the above-mentioned documents. These documents were adopted by the Commission in the aftermath of the revelations about the surveillance programmes carried out by US intelligence services. Considering the impact of these surveillance programmes on individuals’ rights to privacy and to the protection of their personal data in the EU, he has decided to adopt this Opinion on his own initiative.

I.2.   Objective and scope of the Commission documents

a)   The Communication on rebuilding trust and the Report

| 4. | The Communication proposes a way forward following the revelations on large-scale US intelligence collection programmes (hereinafter ‘the programmes’ or ‘the revealed programmes’) and their impact on trust between the EU and the US. It does not refer to revelations on the conduct of similar activities and/or collaboration with the US by EU Member States or by other third countries. |
| --- | --- |

4.

The Communication proposes a way forward following the revelations on large-scale US intelligence collection programmes (hereinafter ‘the programmes’ or ‘the revealed programmes’) and their impact on trust between the EU and the US. It does not refer to revelations on the conduct of similar activities and/or collaboration with the US by EU Member States or by other third countries.

| 5. | The Report collates the findings of the EU Co-chairs of the ad-hoc EU-US Working Group on Data Protection that was created further to the Coreper meeting of 18 July 2013 to establish the facts about the programmes and their impact on fundamental rights in the EU and personal data of EU citizens. It analyses the US legal framework (3), how the collection and further processing of data takes place (4) and the existing oversight and redress mechanisms. |
| --- | --- |

5.

The Report collates the findings of the EU Co-chairs of the ad-hoc EU-US Working Group on Data Protection that was created further to the Coreper meeting of 18 July 2013 to establish the facts about the programmes and their impact on fundamental rights in the EU and personal data of EU citizens. It analyses the US legal framework (3), how the collection and further processing of data takes place (4) and the existing oversight and redress mechanisms.

| 6. | The Report mentions a ‘second track’ that was also established during the Coreper meeting of 18 July 2013. It states that, under that ‘second track’ EU institutions may raise with the US authorities questions relating to the alleged surveillance of EU institutions and diplomatic missions, whilst Member States may discuss with the US authorities, in a bilateral format, matters relating to their national security. |
| --- | --- |

6.

The Report mentions a ‘second track’ that was also established during the Coreper meeting of 18 July 2013. It states that, under that ‘second track’ EU institutions may raise with the US authorities questions relating to the alleged surveillance of EU institutions and diplomatic missions, whilst Member States may discuss with the US authorities, in a bilateral format, matters relating to their national security.

| 7. | The Report also states that this division set some limitations to the discussion in the Working Group and the information provided therein. The EDPS has not been provided with any information on the ‘second track’ or on the creation of a parallel working group in this regard. The Commission is therefore requested to inform the EDPS about the findings of the ‘second track’, in particular as regards the alleged surveillance of EU institutions and diplomatic missions. |
| --- | --- |

7.

The Report also states that this division set some limitations to the discussion in the Working Group and the information provided therein. The EDPS has not been provided with any information on the ‘second track’ or on the creation of a parallel working group in this regard. The Commission is therefore requested to inform the EDPS about the findings of the ‘second track’, in particular as regards the alleged surveillance of EU institutions and diplomatic missions.

b)   The Communication on Safe Harbour

| 8. | The Communication on Safe Harbour analyses the functioning of the Safe Harbour, identifies shortcomings and proposes possible improvements. It acknowledges the increasing amount of data transferred between the EU and the US and the growing number of companies adhering to the Safe Harbour principles. After recalling the structure and the functioning of the Safe Harbour, the Commission insists on the need to improve the enforcement of the principles on adhering companies and their subcontractors. According to the Communication, this would require that the Safe Harbour principles are incorporated in adhering companies’ privacy policies more effectively and are made available to the public. The FTC should enforce their compliance more proactively. Besides, data protection authorities should participate in raising awareness of Safe Harbour in the EU and in particular on the existence of the EU data protection panel. The Commission also gives solutions to improve alternative dispute resolution mechanisms. |
| --- | --- |

8.

The Communication on Safe Harbour analyses the functioning of the Safe Harbour, identifies shortcomings and proposes possible improvements. It acknowledges the increasing amount of data transferred between the EU and the US and the growing number of companies adhering to the Safe Harbour principles. After recalling the structure and the functioning of the Safe Harbour, the Commission insists on the need to improve the enforcement of the principles on adhering companies and their subcontractors. According to the Communication, this would require that the Safe Harbour principles are incorporated in adhering companies’ privacy policies more effectively and are made available to the public. The FTC should enforce their compliance more proactively. Besides, data protection authorities should participate in raising awareness of Safe Harbour in the EU and in particular on the existence of the EU data protection panel. The Commission also gives solutions to improve alternative dispute resolution mechanisms.

| 9. | Regarding access to data transferred in the framework of the Safe Harbour scheme and further processed by US authorities, the Commission insists that it should be limited to what is strictly necessary and proportionate. It also requires that the use of limitations to privacy policies to meet national security, public interest or law enforcement requirements be carefully monitored so that it does not undermine the protection afforded. It also encourages adhering companies to be transparent on these limitations and their effect on the confidentiality of communications to raise citizens’ awareness. |
| --- | --- |

9.

Regarding access to data transferred in the framework of the Safe Harbour scheme and further processed by US authorities, the Commission insists that it should be limited to what is strictly necessary and proportionate. It also requires that the use of limitations to privacy policies to meet national security, public interest or law enforcement requirements be carefully monitored so that it does not undermine the protection afforded. It also encourages adhering companies to be transparent on these limitations and their effect on the confidentiality of communications to raise citizens’ awareness.

I.3.   Scope and aim of the present Opinion

| 10. | The present Opinion focuses on the Communication on rebuilding trust, and within that context also on the Communication on Safe Harbour. In consequence, it does not comment directly on revelations regarding EU Member States, be it in collaboration with the US or on their own; or on surveillance activities by third countries other than the US. |
| --- | --- |

10.

The present Opinion focuses on the Communication on rebuilding trust, and within that context also on the Communication on Safe Harbour. In consequence, it does not comment directly on revelations regarding EU Member States, be it in collaboration with the US or on their own; or on surveillance activities by third countries other than the US.

| 11. | The Opinion starts by commenting on the general approach of the Communication on rebuilding trust. Part II briefly analyses the applicability of the relevant legal framework and its consequences, including comments on the Communication on Safe Harbour. Since the Article 29 Working Party (5) is currently examining the applicable EU and international legal framework, the present Opinion does not go in detail in this part. Part III addresses the Commission’s recommendations on the future steps to be taken. |
| --- | --- |

11.

The Opinion starts by commenting on the general approach of the Communication on rebuilding trust. Part II briefly analyses the applicability of the relevant legal framework and its consequences, including comments on the Communication on Safe Harbour. Since the Article 29 Working Party (5) is currently examining the applicable EU and international legal framework, the present Opinion does not go in detail in this part. Part III addresses the Commission’s recommendations on the future steps to be taken.

I.4.   Comments on the approach of the Communication on rebuilding trust

| 12. | The Communication focuses on the fact that trust between the EU and the US as strategic partners has been negatively affected by the revelations on the programmes and needs to be restored. The EDPS welcomes this acknowledgement. |
| --- | --- |

12.

The Communication focuses on the fact that trust between the EU and the US as strategic partners has been negatively affected by the revelations on the programmes and needs to be restored. The EDPS welcomes this acknowledgement.

| 13. | However, the programmes, whose existence is in some cases clearly confirmed by the Report (6) affect not only trust, but also legal rights as laid down in EU and Council of Europe primary and secondary law, in particular the rights of privacy and data protection. They also show the large scale of foreign intelligence collection that is actually taking place under the US legal framework (7), as interpreted by the US Supreme Court (8). The report also confirms the lack of safeguards, protections, rights, oversight and redress possibilities available for EU citizens under the US framework (9). |
| --- | --- |

13.

However, the programmes, whose existence is in some cases clearly confirmed by the Report (6) affect not only trust, but also legal rights as laid down in EU and Council of Europe primary and secondary law, in particular the rights of privacy and data protection. They also show the large scale of foreign intelligence collection that is actually taking place under the US legal framework (7), as interpreted by the US Supreme Court (8). The report also confirms the lack of safeguards, protections, rights, oversight and redress possibilities available for EU citizens under the US framework (9).

| 14. | As repeatedly underlined by the Commission, citizens’ and businesses’ trust in internet communications depends on the availability of effective technical protection tools for privacy, and more specifically the confidentiality of communications. This need has also been recognized in the US Review Group on Intelligence and Communications Technologies (10) which made several recommendations to restore the trust in encryption tools and commercial software, as well as in the functioning of rapid mechanisms to fix software vulnerabilities. The weakening of trust in these systems has been considered one of the most damaging effects of the recent discussions about signal intelligence operations by some of the most recognized security experts (11). In view of the importance of effective cybersecurity for Europe, a response to this technical and political challenge should be developed at EU level, based on an initiative by the Commission. |
| --- | --- |

14.

As repeatedly underlined by the Commission, citizens’ and businesses’ trust in internet communications depends on the availability of effective technical protection tools for privacy, and more specifically the confidentiality of communications. This need has also been recognized in the US Review Group on Intelligence and Communications Technologies (10) which made several recommendations to restore the trust in encryption tools and commercial software, as well as in the functioning of rapid mechanisms to fix software vulnerabilities. The weakening of trust in these systems has been considered one of the most damaging effects of the recent discussions about signal intelligence operations by some of the most recognized security experts (11). In view of the importance of effective cybersecurity for Europe, a response to this technical and political challenge should be developed at EU level, based on an initiative by the Commission.

| 15. | In section 3 of the Communication, the Commission addresses the future steps that need to be taken to restore trust in data transfers between the EU and the US. The EDPS welcomes this section, which focuses on the improvement of the existing legal framework and proposes new instruments. However, the Commission does not address how applicable national, EU and Council of Europe instruments have been affected by the programmes. The EDPS considers that the impact on existing legal instruments should have received more attention in the Communication. |
| --- | --- |

15.

In section 3 of the Communication, the Commission addresses the future steps that need to be taken to restore trust in data transfers between the EU and the US. The EDPS welcomes this section, which focuses on the improvement of the existing legal framework and proposes new instruments. However, the Commission does not address how applicable national, EU and Council of Europe instruments have been affected by the programmes. The EDPS considers that the impact on existing legal instruments should have received more attention in the Communication.

IV.   Concluding remarks

| 79. | The EDPS welcomes the measures considered by the Commission, but highlights that the revealed surveillance activities of US intelligence agencies not only affect trust in EU-US data flows. They also have an impact on the existing and enforceable rights of EU citizens to respect for privacy and to the protection of their personal data. These rights are enshrined in both EU and Council of Europe primary and secondary law. Therefore, the EDPS regrets that the Communication on rebuilding trust has not given more attention to the impact on existing legal instruments. |
| --- | --- |

79.

The EDPS welcomes the measures considered by the Commission, but highlights that the revealed surveillance activities of US intelligence agencies not only affect trust in EU-US data flows. They also have an impact on the existing and enforceable rights of EU citizens to respect for privacy and to the protection of their personal data. These rights are enshrined in both EU and Council of Europe primary and secondary law. Therefore, the EDPS regrets that the Communication on rebuilding trust has not given more attention to the impact on existing legal instruments.

| 80. | The EDPS would favour on several points that the Commission be more ambitious when defining the next steps to be taken and finds that:






  — | A correct application and enforcement of the current European data protection legal framework is not only required by law, but would also be an essential contribution to restoring trust. This also applies to the instruments regulating international transfers between the EU and the US, including the existing Safe Harbour principles. |
| --- | --- | --- |

80.

The EDPS would favour on several points that the Commission be more ambitious when defining the next steps to be taken and finds that:

—

A correct application and enforcement of the current European data protection legal framework is not only required by law, but would also be an essential contribution to restoring trust. This also applies to the instruments regulating international transfers between the EU and the US, including the existing Safe Harbour principles.

| — | The Commission should recall that exceptions or restrictions to fundamental rights allowed for national security purposes are only justified and permissible if they are strictly necessary, proportionate and in line with the jurisprudence of the ECtHR and the Court of Justice. |
| --- | --- |

—

The Commission should recall that exceptions or restrictions to fundamental rights allowed for national security purposes are only justified and permissible if they are strictly necessary, proportionate and in line with the jurisprudence of the ECtHR and the Court of Justice.

| — | The EDPS entirely agrees that consolidation and improvement of the EU data protection framework requires a swift adoption of the data protection reform proposals with adequate substance so as to provide for stronger, more effective and more consistent protection of personal data and privacy within the full scope of EU law. This should also provide for adequate protection of data in the case of their further use for law enforcement purposes and international conflicts of jurisdictions. |
| --- | --- |

—

The EDPS entirely agrees that consolidation and improvement of the EU data protection framework requires a swift adoption of the data protection reform proposals with adequate substance so as to provide for stronger, more effective and more consistent protection of personal data and privacy within the full scope of EU law. This should also provide for adequate protection of data in the case of their further use for law enforcement purposes and international conflicts of jurisdictions.

| — | The Safe Harbour principles should be reviewed and strengthened along the lines indicated by the Commission. The EDPS recommends setting up stricter deadlines within which these actions must be taken, including adequate follow up in case of any remaining deficiencies. |
| --- | --- |

—

The Safe Harbour principles should be reviewed and strengthened along the lines indicated by the Commission. The EDPS recommends setting up stricter deadlines within which these actions must be taken, including adequate follow up in case of any remaining deficiencies.

| — | Data protection safeguards applying to EU-US law enforcement cooperation have to be reinforced. Current negotiations on an ‘umbrella agreement’ should not legitimise massive data transfers of data but comply with the existing data protection framework and with the outcome of its current review process. In particular, effective redress mechanisms should be accessible to all data subjects, regardless of their nationality. This should in due course also apply to existing international agreements, where necessary on the basis of appropriate transition clauses. |
| --- | --- |

—

Data protection safeguards applying to EU-US law enforcement cooperation have to be reinforced. Current negotiations on an ‘umbrella agreement’ should not legitimise massive data transfers of data but comply with the existing data protection framework and with the outcome of its current review process. In particular, effective redress mechanisms should be accessible to all data subjects, regardless of their nationality. This should in due course also apply to existing international agreements, where necessary on the basis of appropriate transition clauses.

| — | The Commission should support efforts by the US Administration and US Congress to enact a general privacy act, providing for strong safeguards and adequate oversight, in particular in areas where any substantial protection of privacy is currently lacking. |
| --- | --- |

—

The Commission should support efforts by the US Administration and US Congress to enact a general privacy act, providing for strong safeguards and adequate oversight, in particular in areas where any substantial protection of privacy is currently lacking.

| — | The negotiations currently taking place to adopt a TTIP should not have an adverse impact on the protection of personal data of citizens. At the same time, the Commission should consider setting a common goal of gradual development towards greater interoperability of legal frameworks for privacy and data protection, to which goal the US might contribute as just mentioned above. |
| --- | --- |

—

The negotiations currently taking place to adopt a TTIP should not have an adverse impact on the protection of personal data of citizens. At the same time, the Commission should consider setting a common goal of gradual development towards greater interoperability of legal frameworks for privacy and data protection, to which goal the US might contribute as just mentioned above.

| — | The international promotion of privacy standards should include:






  i. | promoting full consistency of new international instruments with the European data protection framework; |
| --- | --- | --- |

—

The international promotion of privacy standards should include:

i.

promoting full consistency of new international instruments with the European data protection framework;

| ii. | promoting the adhesion of third countries, and in particular the US, to Council of Europe Convention 108; |
| --- | --- |

ii.

promoting the adhesion of third countries, and in particular the US, to Council of Europe Convention 108;

| iii. | supporting the adoption of an international instrument requiring the respect of data protection standards by intelligence activities. This could be adopted at UN level on the basis of Article 17 of the ICCPR. |
| --- | --- |

iii.

supporting the adoption of an international instrument requiring the respect of data protection standards by intelligence activities. This could be adopted at UN level on the basis of Article 17 of the ICCPR.

| — | Surveillance activities should at all times be obliged to respect the rule of law and the principles of necessity and proportionality in a democratic society. Legal frameworks at all relevant levels should therefore be clarified and where necessary supplemented. These frameworks should include appropriate and sufficiently strong oversight mechanisms. |
| --- | --- |

—

Surveillance activities should at all times be obliged to respect the rule of law and the principles of necessity and proportionality in a democratic society. Legal frameworks at all relevant levels should therefore be clarified and where necessary supplemented. These frameworks should include appropriate and sufficiently strong oversight mechanisms.

| — | EU institutions and all relevant entities in the Member States are, as data controllers, also directly responsible for ensuring effective IT security. This involves carrying out a data security risk assessment at the appropriate level. It also requires encouraging research on encryption mechanisms and raising data controllers and citizens’ awareness on privacy risks of the products sold or used, and requiring that developers use concrete design methods to avoid or, at least, reduce these risks. The EU should lead education initiatives on security of data processed on the internet. |
| --- | --- |

—

EU institutions and all relevant entities in the Member States are, as data controllers, also directly responsible for ensuring effective IT security. This involves carrying out a data security risk assessment at the appropriate level. It also requires encouraging research on encryption mechanisms and raising data controllers and citizens’ awareness on privacy risks of the products sold or used, and requiring that developers use concrete design methods to avoid or, at least, reduce these risks. The EU should lead education initiatives on security of data processed on the internet.

Done at Brussels, 20 February 2014.

Peter HUSTINX

European Data Protection Supervisor

---

(1)  COM(2013) 846 final.

1

(2)  COM(2013) 847 final.

2

(3)  In particular the Constitution, as interpreted by the Supreme Court; Section 702 of the Foreign Intelligence Surveillance Act of 1978 (FISA) (as amended by the 2008 FISA Amendments Act, 50 U.S.C. § 1881a); and Section 215 of the USA PATRIOT Act 2001 (which also amended FISA, 50 U.S.C. 1861) and Executive Order 12333.

3

(4)  On the basis of the information provided by the US in the Working Group and declassified documents, including opinions of the Foreign Intelligence Surveillance Court (hereinafter ‘FISC’) and publicly available documents such as the Attorney General’s Guidelines for Domestic FBI Operations.

4

(5)  The Article 29 Data Protection Working Party, set up under Directive 95/46/EC, has an advisory status and acts independently. It is composed of representatives of EU national Data Protection Authorities, the EDPS and the Commission.

5

(6)  See p. 5, 10 and 26 of the Report, which, on the basis of declassified opinions of the Foreign Intelligence Surveillance Court, confirms that ‘US intelligence agencies have recourse to methods of collection under Section 702 that have a wide reach, such as the PRISM collection of data from internet service providers or through the “upstream collection” of data that transits through the US’.

6

(7)  The US confirmed that there are other legal bases for intelligence collection where the data of non-US persons may be acquired, but did not provide details on the legal authorities and procedures applicable. Not all the relevant legal bases were disclosed to the WG (see p. 13 of the Report).

7

(8)  See p. 4-12 of the Report.

8

(9)  See p. 26-27 of the Report.

9

(10)  ‘Liberty and Security in a Changing World’, Report and Recommendations of The President’s Review Group on Intelligence and Communications Technologies, in particular Recommendations 25, 29 and 30. http://www.whitehouse.gov/sites/default/files/docs/2013-12-12_rg_final_report.pdf

10

(11)  B Schneier, C Soghoian in report of 6 September 2013, http://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-codes-security; B. Preneel: ISSE 2013 closing keynote: ‘The Cryptographic Year in Review’ http://homes.esat.kuleuven.be/~preneel/preneel_isse13.pdf

11

---

NOTICES FROM MEMBER STATES

| 16.4.2014 | EN | Official Journal of the European Union | C 116/8 |
| --- | --- | --- | --- |

16.4.2014

EN

Official Journal of the European Union

C 116/8

---

Commission notice pursuant to Article 17(5) of Regulation (EC) No 1008/2008 of the European Parliament and of the Council on common rules for the operation of air services in the Community

Invitation to tender in respect of the operation of scheduled air services in accordance with public service obligations

(Text with EEA relevance)

2014/C 116/05

| Member State | France |
| --- | --- |
| Route concerned | Le Puy-en-Velay (Loudes) – Paris (Orly) |
| Period of validity of the contract | from 14 January 2015 to 13 January 2019 |
| Deadline for submission of applications and tenders | 16 July 2014, before 12:00, Paris time (France) |
| Address from which the text of the invitation to tender and any relevant information and/or documentation relating to the public tender and the public service obligations can be obtained | Syndicat mixte de gestion de l’aérodrome départemental





  Le Puy-en-Velay – Loudes |
| 43320 Loudes |
| FRANCE |

Member State

France

Route concerned

Le Puy-en-Velay (Loudes) – Paris (Orly)

Period of validity of the contract

from 14 January 2015 to 13 January 2019

Deadline for submission of applications and tenders

16 July 2014, before 12:00, Paris time (France)

Address from which the text of the invitation to tender and any relevant information and/or documentation relating to the public tender and the public service obligations can be obtained

Syndicat mixte de gestion de l’aérodrome départemental

Le Puy-en-Velay – Loudes

43320 Loudes

FRANCE

For the attention of Mr Pascal Rey

Tel. +33 471086187

Fax +33 471086640

E-mail: direction@aerolepuy.fr

---