Name: Rosa

Family Name: BARCELO

Affiliation: European Data Protection Supervisor (EDPS)

Mail

Short BIO

Since September 2006 Rosa Barcelo is legal adviser to the European Data Protection Supervisor (EDPS). In the EDPS, she works both in the supervision and the policy teams. Rosa is responsible for, advising, among others, on privacy issues related to new technologies.

Prior to taking up this job, Rosa worked in the Data Protection Unit of the European Commission in Brussels where she was responsible, among others, for privacy issues related to new technologies, the US Safe Harbor agreement, BCRs and contractual arrangements for transferring personal data from the EU.

Rosa has also worked as a private lawyer in the Brussels offices of Morrison and Foerster and DLA Piper where she advised clients on European privacy and data protection, electronic commerce and technology law.

Rosa is the author of books and articles on data protection and Internet related topics and often lectures on the above topics.

Title of the presentation

… To notify or not to notify under the ePrivacy Directive & other questions

Abstract

The ePrivacy Directive sets forth an obligation to notify without undue delay national regulatory authorities and subscribers of any breach of security leading to the compromise of personal data. This presentation will discuss this new regulatory framework. In particular, it will focus on the scope of application of the obligation to notify, the concerned data subjects, the trigger (threshold) of the notice, the exceptions to the obligation to notify and the expected content and effects of the notification. It will also discuss other issues such as (i) what national security breach notification schemes may look like following the implementation of the ePrivacy Directive; (ii) the need for guidance or secondary legislation to complement the security breach regulatory framework and, (iii) possible effects of the notification on security breach in the possible review of the 95/46 Data Protection Directive.

On-line publications

APPLYING THE PROVISION ON NTERNATIONAL DATA TRANSFERTS TO A WIRED WORLD, Challenges of Privacy and Data Protection Law, Cahiers du Centre de Recherches Informatique et Droit, 2008, p. 369-378

TRANSFERENCIA INTERNACIONAL DE DATOS PERSONALES (with Veronica Perez-Asinari), Protección de Datos. Comentarios a la LOPD Y SU Reglamento de Desarrollo", Tirant lo Blanc, 2000 (in publication)

CPDP Conference Who is Who