Feeds

Israel to join list of 'adequate' data protection nations

EU personal company data can be transferred freely by end of year

Intelligent flash storage arrays

Israel will become just the seventh country to have its data protection laws approved by the European Union. The approval means that companies can transfer personal data to that country freely, without breaking EU law.

Uruguay's application for the same treatment has been backed by a technical committee but still requires political approval before making it on to the list of approved nations.

The Data Protection Directive generally prevents personal data being sent outside of the European Economic Area – except to countries whose data protection regimes are deemed to give "adequate" protection, unless the transfer can be justified by other means.

A European Commission list of countries (54-page / 349KB PDF) deemed to be adequate consists of Switzerland, Argentina, the Bailiwick of Guernsey, the Isle of Man, the Bailiwick of Jersey and Canada, as long as the recipient of the information is subject to the Canadian Personal Information Protection and Electronic Documents Act.

Data can also be transferred to the US if the organisation receiving the material subscribes to the US Department of Commerce's Safe Harbor Privacy Principles.

Israel will join the approved list in a month. Though the European Parliament has a month to scrutinise the decision, it cannot change it, a European Commission spokeswoman said.

"The draft Commission Decision on the adequate protection of personal data in the State of Israel has been adopted on 25 October in the comitology procedure (so called Article 31 Committee)," said the spokeswoman. "The European Parliament has one month of scrutiny. Its opinion is however not binding for the Commission."

"So after the expiry of the scrutiny period, the Commission decision is adopted via the normal written procedure. The adequacy of Israel should therefore be formally approved by the end of the year," she said.

Israel's inclusion on the list was opposed by Ireland in the aftermath of the use of eight Irish passports in an assassination carried out in Dubai. Israeli secret service Mossad was widely alleged to have been behind the action.

The Article 29 Working Party, which is made up of data protection watchdogs from the EU's 27 member states, has separately approved Uruguay's application (20-page / 85KB PDF) to join the list of nations with adequate data proteciton regimes.

That application was made in 2008 but the Working Party has only now approved the country's laws, following the commissioning of an academic report into its legislation.

Countries that outsource work which demands the transfer of personal data to countries outside of the EU must ensure that the material is protected.

If that country is not in the short list of "adequate" countries, then companies must use specially-drafted "model clauses" created by the EU in their contracts with companies. Failing that, they can use "binding corporate rules" to ensure that the data is protected.

Copyright © 2010, OUT-LAW.com

OUT-LAW.COM is part of international law firm Pinsent Masons.

Internet Security Threat Report 2014

More from The Register

next story
Doctor Who's Flatline: Cool monsters, yes, but utterly limp subplots
We know what the Doctor does, stop going on about it already
Facebook, Apple: LADIES! Why not FREEZE your EGGS? It's on the company!
No biological clockwatching when you work in Silicon Valley
'Cowardly, venomous trolls' threatened with TWO-YEAR sentences for menacing posts
UK government: 'Taking a stand against a baying cyber-mob'
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
The 'fun-nification' of computer education – good idea?
Compulsory code schools, luvvies love it, but what about Maths and Physics?
Ex-US Navy fighter pilot MIT prof: Drones beat humans - I should know
'Missy' Cummings on UAVs, smartcars and dying from boredom
Sysadmin with EBOLA? Gartner's issued advice to debug your biz
Start hoarding cleaning supplies, analyst firm says, and assume your team will scatter
Don't bother telling people if you lose their data, say Euro bods
You read that right – with the proviso that it's encrypted
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.