Principles relating to personal data processing

1. Member States shall provide for the controller, taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of processing, as well as the risks of varying likelihood and severity for rights and freedoms of natural persons posed by the processing, both at the time of the determination of the means for processing and at the time of the processing itself, to implement appropriate technical and organisational measures, such as pseudonymisation, which are designed to implement data protection principles, such as ...[+++]data minimisation, in an effective manner and to integrate the necessary safeguards into the processing, in order to meet the requirements of this Directive and protect the rights of data subjects.

30. Stresses that the use of cloud services by public authorities, including by law enforcement authorities and EU institutions, requires special consideration and coordination between the Member States; recalls that data integrity and security must be guaranteed and unauthorised access, including by foreign governments and their intelligence services without a legal basis under Union or Member State law, prevented; stresses that this also applies to the specific processing activities of certain essential non-governmental services, in particular the processing of specific categories of personal data, such as by banks, insurance companies, pension funds, sch ...[+++]ools and hospitals; stresses, furthermore, that all of the aforementioned is of particular importance if data is being transferred (outside the European Union between different jurisdictions); takes the view, therefore, that public authorities, as well as non-governmental services and the private sector, should, as far as possible, rely on EU cloud providers when processing sensitive data and information until satisfactory global rules on data protection have been introduced, ensuring the security of sensitive data and of data bases held by public entities;

19. Notes the priority accorded in the ISS to fighting cybercrime; considers cybercrime to be a rising threat to the EU and an important enabler for other criminal activities; calls on the Commission to make sufficient funds available for the new European Cybercrime Centre and urges all the Member States to ratify the Council of Europe Convention on Cybercrime; recalls that the processing and collection of personal data as part of the ISS must always comply with EU data protection principles, particularly those of necessity, propor ...[+++]tionality and legality, and with EU legislation and the relevant Council of Europe conventions in this field; highlights the need to pay particular attention to children in the digital environment, and the importance of combating child pornography; supports the expansion of the Global Alliance against Child Sexual Abuse Online;

Europol shall observe those principles in the processing of personal data, inter alia, in respect of automated and non-automated data held in the form of data files, especially any structured set of personal data accessible in accordance with specific criteria.

This is crucial if we are to guarantee that the public’s fundamental right to privacy is respected, safeguarding the legal principle of fair and equal treatment for all citizens. Laws must be applied and interpreted according to the same criteria, providing the same level of data protection.