Protocol tot wijziging van het Verdrag tot bescherming van personen met betrekking tot de geautomatiseerde verwerking van persoonsgegevens

Partij

Frankrijk gewijzigd

• Ratificatie: 27-03-2023 (R)
• Voorbehoud / verklaring: Ja

• toegevoegd voorbehoud
  27-03-2023
  Article 9 of this Amending Protocol (Article 7 of Convention 108 as revised by the Protocol) lays down a general principle of notification of data breaches which may seriously interfere with the rights and fundamental freedoms of the data subjects. With reference to this provision, and with regard to the implementation of processing operations whose purposes are the protection of national security, defense and public safety, the French Republic declares that the legislator, within the framework of Law no. 78-17 of 6 January 1978 relating to data processing, files and freedoms, modified, expressly intended to exclude any notification to the supervisory authority in the event of data breaches occurring in a processing operation involving national defense and security . This obligation, provided for in Titles II and III of this law, has in fact not been extended by the legislator to its Title IV relating to processing involving State security and defense. French positive law is therefore understood as constituting an exception within the meaning and for the application of Article 14 of this amending Protocol (Article 11 of Convention 108 as revised by the Protocol), which allows exceptions to this obligation of notification set out in Article 9 of the same Protocol, in particular when they are provided for by law, they respect the essence of the fundamental rights and freedoms and they constitute a necessary and proportionate measure in a democratic society.

Partij

Moldavië toegevoegd

• Ondertekening: 09-02-2023
• Voorbehoud / verklaring: Nee
• Bezwaren: Nee

Partij

IJsland gewijzigd

• Ratificatie: 20-01-2023 (R)

Partij

Albanië

• Ondertekening: 28-01-2022
• Ratificatie: 22-07-2022 (R)

Andorra

• Ondertekening: 28-01-2019
• Ratificatie: 18-10-2022 (R)

Argentinië

• Ondertekening: 19-09-2019

Armenië

• Ondertekening: 02-10-2019
• Ratificatie: 25-01-2022 (R)

België

• Ondertekening: 10-10-2018

Bosnië en Herzegovina

• Ondertekening: 02-07-2020

Duitsland

• Ondertekening: 10-10-2018
• Ratificatie: 05-10-2021 (R)

Frankrijk

• Ondertekening: 10-10-2018

Griekenland

• Ondertekening: 06-09-2019

Hongarije

• Ondertekening: 09-01-2019

Ierland

• Ondertekening: 10-10-2018

IJsland

• Ondertekening: 21-11-2018

Italië

• Ondertekening: 05-03-2019
• Ratificatie: 08-07-2021 (R)

Kroatië

• Ondertekening: 22-03-2019
• Ratificatie: 18-12-2019 (R)

Letland

• Ondertekening: 10-10-2018

Liechtenstein

• Ondertekening: 07-12-2020

Luxemburg

• Ondertekening: 10-10-2018

Malta

• Ondertekening: 02-07-2020
• Ratificatie: 02-11-2020 (R)

Mauritius

• Ondertekening: 04-09-2020
• Ratificatie: 04-09-2020 (R)

Monaco

• Ondertekening: 10-10-2018

Nederlanden, het Koninkrijk der

• Ondertekening: 10-10-2018

Noord-Macedonië

• Ondertekening: 05-12-2019
• Ratificatie: 26-11-2021 (R)

Oostenrijk

• Ondertekening: 10-10-2018
• Ratificatie: 13-07-2022 (R)

Polen

• Ondertekening: 16-05-2019
• Ratificatie: 10-06-2020 (R)

Portugal

• Ondertekening: 10-10-2018

Roemenië

• Ondertekening: 26-06-2020
• Ratificatie: 09-03-2022 (R)

San Marino

• Ondertekening: 16-07-2019

Servië

• Ondertekening: 22-11-2019
• Ratificatie: 26-05-2020 (R)

Slovenië

• Ondertekening: 16-05-2019

Slowakije

• Ondertekening: 17-12-2019

Tsjechië

• Ondertekening: 10-10-2018

Tunesië

• Ondertekening: 24-05-2019

Uruguay

• Ondertekening: 10-10-2018
• Ratificatie: 05-08-2021 (R)

Verenigd Koninkrijk

• Ondertekening: 10-10-2018

Zweden

• Ondertekening: 10-10-2018

Zwitserland

• Ondertekening: 21-11-2019

Bulgarije

• Ondertekening: 10-10-2018
• Ratificatie: 10-12-2019 (R)
• Voorbehoud / verklaring: Ja
• Bezwaren: Nee

• voorbehoud
  10-10-2018
  The Republic of Bulgaria will apply this Protocol on a provisional basis in accordance with Article 37, paragraph 3, thereof. Date of effect of the declaration 1 February 2019.

  voorbehoud
  10-12-2019
  The Republic of Bulgaria will apply this Protocol on a provisional basis in accordance with Article 37, paragraph 3, thereof.

Cyprus

• Ondertekening: 09-01-2019
• Ratificatie: 21-09-2020 (R)
• Voorbehoud / verklaring: Ja
• Bezwaren: Nee

• voorbehoud
  21-09-2020
  Pending the entry into force of the Protocol and action pursuant to Article 37, paragraph 3, of the Protocol, the Republic of Cyprus declares that it will apply this Protocol on a provisional basis.

Estland

• Ondertekening: 10-10-2018
• Ratificatie: 16-09-2020 (R)
• Voorbehoud / verklaring: Ja
• Bezwaren: Nee

• voorbehoud
  16-09-2020
  In accordance with Article 37, paragraph 3, of the Protocol, the Republic of Estonia declares that it will apply the provisions of the Protocol on a provisional basis pending its entry into force.

Finland

• Ondertekening: 10-10-2018
• Ratificatie: 10-12-2020 (R)
• Voorbehoud / verklaring: Ja
• Bezwaren: Nee

• voorbehoud
  10-12-2020
  The Republic of Finland declares that, for the purpose of Article 3, paragraph 1, of the Convention, the processing of personal data in the public sector is interpreted as covering the processing by central government authorities, state, enterprises, municipal authorities, autonomous institutions governed by public law, agencies operating under Parliament or the Office of the President of the Republic, or the Evangelical Lutheran Church of Finland and the Orthodox Church of Finland or their parishes, parish unions and other bodies.

Litouwen

• Ondertekening: 10-10-2018
• Ratificatie: 23-01-2020 (R)
• Voorbehoud / verklaring: Ja
• Bezwaren: Nee

• voorbehoud
  23-01-2020
  The Seimas of the Republic of Lithuania, acting pursuant to Article 21 of the Protocol, declares that the State Data Protection Inspectorate is designated as a supervisory authority and, where personal data are processed for journalistic purposes and for purposes of academic, artistic or literary self-expression, the Inspector of Journalistic Ethics is designated as a supervisory authority. Pending the entry into force of the Protocol, the Seimas of the Republic of Lithuania, acting pursuant to Article 37 (3) of the Protocol, declares that the Republic of Lithuania will apply this Protocol on a provisional basis.

Noorwegen

• Ondertekening: 10-10-2018
• Voorbehoud / verklaring: Ja
• Bezwaren: Nee

• voorbehoud
  10-10-2018
  In accordance with Article 37, paragraph 3, of the Protocol, Norway will apply the provisions of the Protocol on a provisional basis. Date of effect of the declaration 1 February 2019.

Russische Federatie

• Ondertekening: 10-10-2018
• Voorbehoud / verklaring: Ja
• Bezwaren: Nee

• voorbehoud
  25-03-2022
  Depositary communication. Signatory considered to be suspended as from 16 March 2022.

Spanje

• Ondertekening: 10-10-2018
• Ratificatie: 28-01-2021 (R)
• Voorbehoud / verklaring: Ja
• Bezwaren: Nee

• voorbehoud
  28-01-2021
  The Permanent Representation of the Kingdom of Spain has the honour to communicate that if the Protocol amending the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (CETS No. 223) were to be ratified by the United-Kingdom and extended to Gibraltar, Spain would like to make the following declaration: 1. Gibraltar is a non-autonomous territory whose international relations come under the responsibility of the United Kingdom and which is subject to a decolonisation process in accordance with the relevant decisions and resolutions of the General Assembly of the United Nations. 2. The authorities of Gibraltar have a local character and exercise exclusively internal competences which have their origin and their foundation in a distribution and attribution of competences performed by the United Kingdom in compliance with its internal legislation, in its capacity as sovereign State of which the mentioned non-autonomous territory is dependent. 3. As a result, any participation of the Gibraltarian authorities in the application of this Protocol will be understood as carried out exclusively as part of the internal competences of Gibraltar and cannot be considered to modify in any way what was established in the two previous paragraphs. 4. The procedure foreseen in the Arrangements relating to Gibraltar authorities in the context of certain international treaties which were adopted by Spain and the United Kingdom on 19 December 2007, as well as the "Agreed Arrangements relating to Gibraltar authorities in the context of EU and EC instruments and related treaties", dated 19 April 2000, apply to this Protocol. 5. The application of the Protocol to Gibraltar should not be interpreted as an acknowledgment of any right or any situation regarding areas not covered by Article X of the Treaty of Utrecht of 13 July 1713, concluded between the Crowns of Spain and of the United Kingdom.

  voorbehoud
  28-04-2022
  With regard to the communication that the United Kingdom addressed to the Secretariat General of the Council of Europe on 29 July 2019, concerning the intention of the United Kingdom to extend to Gibraltar the application of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108), and notification of which was received by letter from the Secretary General dated 12 July 2019, Spain, recalling that it is a Party to the said Convention, as well as to the Additional Protocol (ETS No. 181) and to Protocol of amendment (CETS No. 223) thereof, wishes to recall the content of its Declaration of 5 March 2008 and to make the following statement: - Gibraltar is a non-autonomous territory whose international relations come under the responsibility of the United Kingdom and which is subject to a decolonisation process in accordance with the relevant decisions and resolutions of the General Assembly of the United Nations. - The authorities of Gibraltar have a local character and exercise exclusively internal competences which have their origin and their foundation in a distribution and attribution of competences performed by the United Kingdom in compliance with its internal legislation, in its capacity as sovereign State of which the mentioned non-autonomous territory is dependent. - As a result, any participation of the Gibraltarian authorities in the application of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data will be understood as carried out exclusively as part of the internal competences of Gibraltar and cannot be considered to modify in any way what was established in the two previous paragraphs. - The procedure foreseen in the Arrangements relating to Gibraltar authorities in the context of certain international treaties which were adopted by Spain and the United Kingdom on 19 December 2007 (as well as the Agreed Arrangements relating to Gibraltar authorities in the context of EU and EC instruments and related treaties, dated 19 April 2000), apply to this Convention and to the Protocols thereof. - The application to Gibraltar of this Convention and of the Protocols thereof should not be interpreted as an acknowledgment of any right or any situation regarding areas not covered by Article X of the Treaty of Utrecht of 13 July 1713, concluded between the Crowns of Spain and of the United Kingdom.