natgillin/translations-raw huggingface dataset:
Kommissionen vil løbende overvåge, hvordan EU's og USA's værn om privatlivets fred fungerer, for at vurdere, om USA fortsat sikrer et tilstrækkeligt beskyttelsesniveau for personoplysninger, der overføres under værnet fra EU til foretagender i USA.
Such a check is required, in any event, when the Commission acquires any information giving rise to a justified doubt in that regard [206].
Medlemsstaterne og Kommissionen underretter hinanden om tilfælde, hvor regeringsorganer i USA med lovbestemte beføjelser til at håndhæve overholdelsen af principperne i bilag II tilsyneladende ikke har indført effektive afslørings- og tilsynsmekanismer, der gør det muligt i praksis at identificere og sanktionere tilsidesættelser af principperne.
Therefore, the Commission will continuously monitor the overall framework for the transfer of personal data created by the EU-U.S. Privacy Shield as well as compliance by U.S. authorities with the representations and commitments contained in the documents attached to this decision.
Medlemsstaterne og Kommissionen underretter gensidigt hinanden om tilfælde, hvor de amerikanske myndigheder med ansvar for den nationale sikkerhed, retshåndhævelse eller andre offentlige interesser tilsyneladende griber ind i den enkeltes ret til beskyttelse af sine personoplysninger ud over, hvad der er strengt nødvendigt, og/eller hvor der tilsyneladende ikke er en effektiv retsbeskyttelse mod sådanne indgreb.
To facilitate this process, the U.S. has committed to inform the Commission of material developments in U.S. law when relevant to the Privacy Shield in the field of data protection and the limitations and safeguards applicable to access to personal data by public authorities.
Kommissionen skal senest et år fra datoen for meddelelse af denne afgørelse til medlemsstaterne og herefter hvert år evaluere konklusionen i artikel l, stk. 1, på grundlag af alle tilgængelige oplysninger, herunder oplysningerne modtaget som led i den årlige fælles evaluering, der henvises til i bilag I, II og VI.
Moreover, this decision will be subject to an Annual Joint Review which will cover all aspects of the functioning of the EU-U.S. Privacy Shield, including the operation of the national security and law enforcement exceptions to the Principles.
Kommissionen aflægger rapport om relevante resultater til det udvalg, der er nedsat ved artikel 31 i direktiv 95/46/EF.
In addition, since the adequacy finding may also be influenced by legal developments in Union law, the Commission will assess the level of protection provided by the Privacy Shield following the entry into application of the GDPR.
Kommissionen forelægger et udkast til foranstaltninger i overensstemmelse med den i artikel 31, stk. 2, i direktiv 95/46/EF fastsatte procedure med henblik på at suspendere, ændre eller ophæve nærværende afgørelse eller begrænse dens anvendelsesområde, herunder når der er tegn på:
To perform the Annual Joint Review referred to in Annexes I, II and VI, the Commission will meet with the Department of Commerce and FTC, accompanied, if appropriate, by other departments and agencies involved in the implementation of the Privacy Shield arrangements, as well as, for matters pertaining to national security, representatives of the ODNI, other Intelligence Community elements and the Ombudsperson.
at de amerikanske offentlige myndigheder ikke overholder de udredninger og tilsagn, der er anført i dokumenterne knyttet til denne afgørelse, herunder betingelserne og begrænsningerne for de amerikanske offentlige myndigheders adgang til personoplysninger overført under EU's og USA's værn om privatlivets fred med henblik på beskyttelsen af den nationale sikkerhed, retshåndhævelse og andre offentlige interesser
The participation in this meeting will be open for EU DPAs and representatives of the Article 29 Working Party.
at klager fra registrerede i EU systematisk ikke behandles effektivt, eller
In the framework of the Annual Joint Review, the Commission will request that the Department of Commerce provides comprehensive information on all relevant aspects of the functioning of the EU-U.S. Privacy Shield, including referrals received by the Department of Commerce from DPAs and the results of ex officio compliance reviews.
når ombudsmanden i værnet om privatlivets fred systematisk ikke reagerer rettidigt og behørigt på anmodninger fra registrerede i EU som påkrævet i bilag III, afsnit 4, litra e).
The Commission will also seek explanations concerning any questions or matters concerning the EU-U.S. Privacy Shield and its operation arising from any information available, including transparency reports allowed under the USA FREEDOM Act, public reports by U.S. national intelligence authorities, the DPAs, privacy groups, media reports, or any other possible source.
Kommissionen forelægger ligeledes et udkast til foranstaltninger, hvis de organer, der skal sikre, at EU's og USA's værn om privatlivets fred fungerer i USA, ikke samarbejder, og Kommissionen således ikke kan vurdere, om konklusionen i artikel 1, stk. 1, er berørt.
Moreover, in order to facilitate the Commission's task in this regard, the Member States should inform the Commission of cases where the actions of bodies responsible for ensuring compliance with the Principles in the United States fail to secure compliance and of any indications that the actions of U.S. public authorities responsible for national security or the prevention, investigation, detection or prosecution of criminal offenses do not ensure the required level of protection.
Artikel 5
On the basis of the annual joint review, the Commission will prepare a public report to be submitted to the European Parliament and the Council.
Medlemsstaterne træffer de nødvendige foranstaltninger for at efterkomme denne afgørelse.
SUSPENSION OF THE ADEQUACY DECISION
Artikel 6
Where, on the basis of the checks or of any other information available, the Commission concludes that the level of protection offered by the Privacy Shield can no longer be regarded as essentially equivalent to the one in the Union, or where there are clear indications that effective compliance with the Principles in the United States might no longer be ensured, or that the actions of U.S. public authorities responsible for national security or the prevention, investigation, detection or prosecution of criminal offenses do not ensure the required level of protection, it will inform the Department of Commerce thereof and request that appropriate measures are taken to swiftly address any potential non-compliance with the Principles within a specified, reasonable timeframe.
Denne afgørelse er rettet til medlemsstaterne.
If, after the expiration of the specified timeframe, the U.S. authorities fail to demonstrate satisfactorily that the EU-U.S.
Udfærdiget i Bruxelles, den 12. juli 2016.
Privacy Shield continues to guarantee effective compliance and an adequate level of protection, the Commission will initiate the procedure leading to the partial or complete suspension or repeal of this decision [207].
På Kommissionens vegne
Alternatively, the Commission may propose to amend this decision, for instance by limiting the scope of the adequacy finding only to data transfers subject to additional conditions.
Medlem af Kommissionen
In particular, the Commission will initiate the procedure for suspension or repeal in case of:
EFT L 281 af 23.11.1995, s. 31.
indications that the U.S. authorities do not comply with the representations and commitments contained in the documents annexed to this decision, including as regards the conditions and limitations for access by U.S. public authorities for law enforcement, national security and other public interest purposes to personal data transferred under the Privacy Shield;
Se udtalelse 4/2016 om udkastet til afgørelse om tilstrækkeligheden af EU's og USA's værn om privatlivets fred, som blev offentliggjort den 30. maj 2016.
failure to effectively address complaints by EU data subjects; in this respect, the Commission will take into account all circumstances having an impact on the possibility for EU data subjects to have their rights enforced, including, in particular, the voluntary commitment by self-certified U.S. companies to cooperate with the DPAs and follow their advice; or
Sag C-362/14, Maximillian Schrems mod Data Protection Commissioner (»Schrems«)), EU:C:2015:650, præmis 39.
failure by the Privacy Shield Ombudsperson to provide timely and appropriate responses to requests from EU data subjects.
Sag C-553/07, Rijkeboer, EU:C:2009:293, præmis 47, forenede sager C-293/12 og C-594/12, Digital Rights Ireland m.fl., EU:C:2014:238, præmis 53, sag C-131/12, Google Spain og Google, EU:C:2014:317, præmis 53, 66 og 74.
The Commission will also consider initiating the procedure leading to the amendment, suspension, or repeal of this decision if, in the context of the Annual Joint Review of the functioning of the EU-U.S.
Kommissionens beslutning 2000/520/EF af 26. juli 2000 i henhold til Europa-Parlamentets og Rådets direktiv 95/46/EF om tilstrækkeligheden af den beskyttelse, der opnås ved hjælp af safe harbour-principperne til beskyttelse af privatlivets fred og de dertil hørende hyppige spørgsmål fra det amerikanske handelsministerium (EFT L 215 af 28.8.2000, s. 7).
Privacy Shield or otherwise, the Department of Commerce or other departments or agencies involved in the implementation of the Privacy Shield, or, for matters pertaining to national security, representatives of the U.S. Intelligence Community or the Ombudsperson, fail to provide information or clarifications necessary for the assessment of compliance with the Principles, the effectiveness of complaint handling procedures, or any lowering of the required level of protection as a consequence of actions by U.S. national intelligence authorities, in particular as a consequence of the collection and/or access to personal data that is not limited to what is strictly necessary and proportionate.
Meddelelse fra Kommissionen til Europa-Parlamentet og Rådet om genopbygning af tilliden til datastrømmene mellem EU og USA, COM(2013) 846 final af 27.11.2013.
In this respect, the Commission will take into account the extent to which the relevant information can be obtained from other sources, including through reports from self-certified U.S. companies as allowed under the USA FREEDOM Act.
Meddelelse fra Kommissionen til Europa-Parlamentet og Rådet om, hvordan safe harbour-ordningen fungerer for så vidt angår EU-borgerne og virksomhederne i EU, COM(2013) 847 final af 27.11.2013.
The Working Party on the Protection of Individuals with regard to the Processing of Personal Data established under Article 29 of Directive 95/46/EC published its opinion on the level of protection provided by the EU-U.S. Privacy Shield [208], which has been taken into account in the preparation of this Decision.
Se f.eks. Rådet for Den Europæiske Union, endelig rapport fra EU-USA-Kontaktgruppen på Højt Plan om Informationsdeling og Beskyttelse af Privatlivets Fred og Personoplysninger, notat 9831/08 af 28. maj 2008, tilgængeligt på internettet på adressen: http://www.europarl.europa.eu/document/activities/cont/201010/20101019ATT88359/20101019ATT88359EN.pdf.
The European Parliament adopted a resolution on transatlantic data flows [209].
Rapport om resultaterne af EU's fælles formandskab for ad hoc-gruppen mellem EU og USA om databeskyttelse af 27.11.2013, tilgængelig på internettet på adressen: http://ec.europa.eu/justice/data-protection/files/report-findings-of-the-ad-hoc-eu-us-working-group-on-data-protection.pdf.
The measures provided for in this Decision are in accordance with the opinion of the Committee established under Article 31(1) of Directive 95/46/EC,
Se fodnote 3.
HAS ADOPTED THIS DECISION:
Schrems-dommen, præmis 97.
Article 1
Schrems-dommen, præmis 73-74.
For the purposes of Article 25(2) of Directive 95/46/EC, the United States ensures an adequate level of protection for personal data transferred from the Union to organisations in the United States under the EU-U.S. Privacy Shield.
Schrems-dommen, præmis 88-89.
The EU-U.S. Privacy Shield is constituted by the Principles issued by the U.S. Department of Commerce on 7 July 2016 as set out in Annex II and the official representations and commitments contained in the documents listed in Annexes I, III to VII.
Se bilag II, afsnit III, punkt 10.a.
For the purpose of paragraph 1, personal data are transferred under the EU-U.S. Privacy Shield where they are transferred from the Union to organisations in the United States that are included in the ‘Privacy Shield List’, maintained and made publicly available by the U.S. Department of Commerce, in accordance with Sections I and III of the Principles set out in Annex II.
I overensstemmelse med definitionen i afsnit I, punkt 8.c, bestemmer den dataansvarlige i EU formålet med samt metoderne til behandling af personoplysningerne.
Article 2
Det skal desuden tydeligt fremgå af aftalen med mandataren, om videreoverførsel er tilladt (jf. afsnit III, punkt 10.a.ii.2).
This Decision does not affect the application of the provisions of Directive 95/46/EC other than Article 25(1) that pertain to the processing of personal data within the Member States, in particular Article 4 thereof.
Det gælder ligeledes for overførslen fra EU af oplysninger om menneskelige ressourcer i forbindelse med ansættelsesforhold.
Article 3
Selv om principperne understreger, at EU-foretagendet er hovedansvarligt (jf. bilag II, afsnit III, punkt 9.d.i), præciseres det også, at foretagendets adfærd er underlagt de gældende regler i EU og/eller den pågældende medlemsstat og ikke principperne.
Whenever the competent authorities in Member States exercise their powers pursuant to Article 28(3) of Directive 95/46/EC leading to the suspension or definitive ban of data flows to an organisation in the United States that is included in the Privacy Shield List in accordance with Sections I and III of the Principles set out in Annex II in order to protect individuals with regard to the processing of their personal data, the Member State concerned shall inform the Commission without delay.
Jf. bilag II, afsnit III, punkt 9.a.i, 9.b.ii, 9.c.i og 9.d.i.
Article 4
Det gælder også behandling under anvendelse af udstyr, der befinder sig i EU, men anvendes af et foretagende, der er etableret uden for EU (jf. artikel 4, stk. 1, litra c), i direktiv 95/46/EF).
The Commission will continuously monitor the functioning of the EU-U.S. Privacy Shield with a view to assessing whether the United States continues to ensure an adequate level of protection of personal data transferred thereunder from the Union to organisations in the United States.
Fra den 25. maj 2018 finder den generelle forordning om databeskyttelse anvendelse for behandling af persondata, i) som foretages som led i aktiviteter, der udføres af et foretagende eller en dataansvarlig eller databehandler, der er etableret i Unionen (selv om behandlingen finder sted i USA), eller ii) om registrerede, der er i Unionen, som foretages af en dataansvarlig eller databehandler, der ikke er etableret i Unionen, hvis behandlingsaktiviteterne vedrører a) udbud af varer eller tjenester til sådanne registrerede i Unionen, uanset om betaling fra den registrerede er påkrævet, eller b) overvågning af sådanne registreredes adfærd, for så vidt deres adfærd finder sted i Unionen.
The Member States and the Commission shall inform each other of cases where it appears that the government bodies in the United States with the statutory power to enforce compliance with the Principles set out in Annex II fail to provide effective detection and supervision mechanisms enabling infringements of the Principles to be identified and punished in practice.
Jf. artikel 3, stk. 1 og 2, i Europa-Parlamentets og Rådets forordning (EU) 2016/679 af 27. april 2016 om beskyttelse af fysiske personer i forbindelse med behandling af personoplysninger og om fri udveksling af sådanne oplysninger og om ophævelse af direktiv 95/46/EF (generel forordning om databeskyttelse) (EUT L 119 af 4.5.2016, s. 1).
The Member States and the Commission shall inform each other of any indications that the interferences by U.S. public authorities responsible for national security, law enforcement or other public interests with the right of individuals to the protection of their personal data go beyond what is strictly necessary, and/or that there is no effective legal protection against such interferences.
Nærværende afgørelse er relevant for EØS.
Within one year from the date of the notification of this Decision to the Member States and on a yearly basis thereafter, the Commission will evaluate the finding in Article 1(1) on the basis of all available information, including the information received as part of the Annual Joint Review referred to in Annexes I, II and VI.
I henhold til aftalen om Det Europæiske Økonomiske Samarbejdsområde (EØS-aftalen) udvides Den Europæiske Unions indre marked til at omfatte de tre EØS-stater Island, Liechtenstein og Norge.
The Commission will report any pertinent findings to the Committee established under Article 31 of Directive 95/46/EC.
EU's bestemmelser om databeskyttelse, herunder direktiv 95/46/EF, er indeholdt i EØS-aftalen og er blevet indarbejdet i bilag XI til aftalen.
The Commission will present draft measures in accordance with the procedure referred to in Article 31(2) of Directive 95/46/EC with a view to suspending, amending or repealing this Decision or limiting its scope, among others, where there are indications:
Det Blandede EØS-Udvalg skal træffe beslutning om indarbejdelsen af denne afgørelse i EØS-aftalen.
that the U.S. public authorities do not comply with the representations and commitments contained in the documents annexed to this Decision, including as regards the conditions and limitations for access by U.S. public authorities for law enforcement, national security and other public interest purposes to personal data transferred under the EU-U.S. Privacy Shield,
Så snart denne afgørelse finder anvendelse for Island, Liechtenstein og Norge, vil EU's og USA's værn om privatlivets fred også dække disse tre lande, og alle henvisninger til EU og dets medlemsstater i pakken for værnet om privatlivets fred skal læses som omfattende Island, Liechtenstein og Norge.
of a systematic failure to effectively address complaints by EU data subjects, or
Jf. bilag II, afsnit III, punkt 6.e.
of a systematic failure by the Privacy Shield Ombudsperson to provide timely and appropriate responses to requests from EU data subjects as required by Section 4(e) of Annex III.
Særlige regler om yderligere garantier finder anvendelse på oplysninger om menneskelige ressourcer, der indsamles inden for rammerne af et ansættelsesforhold, jf. det supplerende princip om »oplysninger om menneskelige ressourcer« (se bilag II, afsnit III, punkt 9).
The Commission will also present such draft measures if the lack of cooperation of the bodies involved in ensuring the functioning of the EU-U.S.
Arbejdsgivere bør f.eks. respektere de ansattes ønsker om hemmeligholdelse af personoplysninger ved at give begrænset indsigt i personoplysninger, gøre visse oplysninger anonyme, eller anvende koder eller pseudonymer.
Privacy Shield in the United States prevents the Commission from determining whether the finding in Article 1(1) is affected.
Særligt skal foretagender samarbejde med og følge anbefalingerne fra databeskyttelsesmyndighederne i EU vedrørende sådanne oplysninger.
Article 5
Det gælder alle overførsler af oplysninger inden for rammerne af værnet om privatlivets fred, også oplysninger der er indsamlet i forbindelse med ansættelsesforhold.
Member States shall take all the measures necessary to comply with this Decision.
Et selvcertificeret foretagende i USA kan i princippet benytte oplysninger om menneskelige ressourcer til andre, ikke-ansættelsesrelaterede formål (f.eks. i forbindelse med markedsføring), men det skal overholde forbuddet mod uforenelig behandling og en sådan brug må udelukkende ske i overensstemmelse med principperne om oplysningspligt og valgfrihed.
Article 6
Forbuddet for det amerikanske foretagende mod at straffe den ansatte for at have truffet et sådant valg, herunder en eventuel begrænsning af ansættelsesmuligheder, vil sikre, at den ansatte trods det hierarkiske forhold og dennes naturlige afhængighed ikke er underlagt et pres og dermed frit kan træffe et reelt frit valg.
This Decision is addressed to the Member States.
Jf. bilag II, afsnit III, punkt 12.
Done at Brussels, 12 July 2016.
Se også det supplerende princip om »Indsigt« (bilag II, afsnit III, punkt 8).
For the Commission
Se bl.a. Equal Credit Opportunity Act (ECOA, 15 U.S.C. 1691 et seq.), Fair Credit Reporting Act (FRCA, 15 USC § 1681 et seq.) eller Fair Housing Act (FHA, 42 U.S.C. 3601 et seq.).
Member of the Commission
Ved overførsel af personoplysninger, der er blevet indsamlet i EU, vil aftaleforholdet med den registrerede (kunden) i de fleste tilfælde være indgået af — og derfor vil enhver beslutning baseret på automatiseret behandling typisk være truffet af — den dataansvarlige i EU, som skal overholde EU's bestemmelser om databeskyttelse.
OJ L 281, 23.11.1995, p. 31.
Det omfatter også de tilfælde, hvor behandlingen foretages af et foretagende, der indgår i værnet om privatlivets fred, og der fungerer som mandatar for den dataansvarlige i EU.
See Opinion 4/2016 on the EU-U.S. Privacy Shield draft adequacy decision, published 30 May 2016.
Se også det supplerende princip om »Bilæggelse af tvister og håndhævelse« (bilag II, afsnit III, punkt 11).
Case C-362/14, Maximillian Schrems v Data Protection Commissioner (‘Schrems’), EU:C:2015:650, paragraph 39.
Se også det supplerende princip om »Selvcertificering« (bilag II, afsnit III, punkt 6).
Case C-553/07, Rijkeboer, EU:C:2009:293, paragraph 47; Joined Cases C-293/12 and C-594/12, Digital Rights Ireland and Others, EU:C:2014:238, paragraph 53; Case C-131/12, Google Spain and Google, EU:C:2014:317, paragraphs 53, 66 and 74.
Se også det supplerende princip om »Kontrol (verifikation)« (bilag II, af snit III, punkt 7).
Commission Decision 2000/520/EC of 26 July 2000 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the safe harbour privacy principles and related frequently asked questions issued by the U.S. Department of Commerce (OJ L 215, 28.8.2000, p. 7).
Se også det supplerende princip om »Obligatoriske aftaler om videreoverførsel« (bilag II, afsnit III, punkt 10).
Communication from the Commission to the European Parliament and the Council Rebuilding Trust in EU-U.S. Data Flows, COM(2013) 846 final of 27 November 2013.
Eftersom det selvcertificerede foretagende i USA fortsat vil skulle overholde principperne, vil det have et stærkt incitament til at benytte instrumenter, som rent faktisk fungerer godt i praksis.
Communication from the Commission to the European Parliament and the Council on the Functioning of the Safe Harbour from the Perspective of EU Citizens and Companies established in the EU, COM(2013) 847 final of 27 November 2013.
Jf. bilag II, afsnit I, punkt 12.
See e.g. Council of the European Union, Final Report by EU-US High Level Contact Group on information sharing and privacy and personal data protection, Note 9831/08, 28 May 2008, available on the internet at: http://www.europarl.europa.eu/document/activities/cont/201010/20101019ATT88359/20101019ATT88359EN.pdf.
Registrerede har ikke ret til at modsætte sig, hvis personoplysningerne overføres til en tredjepart, der fungerer som mandatar og udfører opgaver på vegne af det amerikanske foretagende og i henhold til dets anvisninger.
Report on the Findings by the EU Co-chairs of the ad hoc EU-U.S. Working Group on Data Protection, 27 November 2013, available on the internet at: http://ec.europa.eu/justice/data-protection/files/report-findings-of-the-ad-hoc-eu-us-working-group-on-data-protection.pdf.
Det kræver dog, at der er indgået en aftale med mandataren, og at det amerikanske foretagende bærer ansvaret for at garantere den beskyttelse, der skal ydes i henhold til principperne, ved at udnytte dets anvisningsbeføjelser.
See footnote 3.
Omstændighederne varierer, afhængigt af om tredjeparten er en dataansvarlig eller en databehandler (mandatar).
Schrems, paragraph 97.