The proposed data protection Regulation replacing Directive 95/46/EC: A sound system for the protection of individuals

1. Introduction - setting the scene

2. A Regulation for general processing; a Directive for police and justice processing

3. Personal data and sensitive personal data (Art. 4 and 9 of the Regulation)

4. The actors: "controllers", "processors" and "subjects" (Art. 4 of the Regulation)

5. Reforming the Directive's fair information principles: important additions (Art. 5 and 6 of the Regulation)

6. Individual consent: clearer and more straightforward means (Art. 7 of the Regulation)

7. Updating the Directive's individual rights (Art. 11-20 of the Regulation) and introducing the right to be forgotten (Art. 17 of the Regulation)

8. The right to system interoperability "data portability" (Art. 18 of the Regulation)

9. National data protection authorities (Art. 46-56 of the Regulation)

10. The abolition of the obligation to notify (Art. 28 of the Regulation)

11. A generalized use of "personal data breach notifications"? (Art. 31-32 of the Regulation)

12. The role of 'soft law': Data Protection Impact Assessments (Art. 33 of the Regulation)

13. A new role for the Article 29 Working Party (that however keeps it away from 'adequacy' establishment) (Art. 64-72 of the Regulation)

14. Conclusion: a cause for celebration for human rights