Difference between revisions of "Article 87 GDPR"

From GDPRhub
 
Line 191: Line 191:
 
== Commentary ==
 
== Commentary ==
  
National identification numbers as understood in article 87 are used as a unique and trustworthy method of identifying a particular person by state authorities so that public services might be provided while also respecting that person’s confidentiality<ref>The EU General Data Protection Regulation (GDPR), A commentary, edited by Christopher Kuner, Lee A. Bygrave and Christopher Dockse, Kuner p. 1226</ref>. States can choose whether they want to adopt a system of multiple numbers which could be used either by all state authorities for any public administration purpose, or could be used only for a specific sector or purpose.  
+
National identification numbers as understood in article 87 are used as a unique and trustworthy method of identifying a particular person by state authorities so that public services might be provided while also respecting that person’s confidentiality<ref>Van Eecke/Simkus, in Kuner et al., The EU General Data Protection Regulation (GDPR), Article 87 GDPR, p. 1226 (Oxford University Press 2020);</ref>. States can choose whether they want to adopt a system of multiple numbers which could be used either by all state authorities for any public administration purpose, or could be used only for a specific sector or purpose.  
  
 
Since there are no specific rules for National identifications numbers it is up to each state to determine the conditions under which the national ID numbers can be processed. The sensitivity of the issue, which is linked to the sensitive issue of state sovereignty as well as the complexity of the topic lead the legislators to decide to not unify and harmonize the issue among member states. Based on that the national identification number is not ibso facto characterized as sensitive data. As the state has the possibility to self-define the processes for data processing in this case, it has also the possibility to decide upon the characterization of these data as sensitive. This was also the rationale behind the antecedent of article 87 GDPR, article 8(7) DPD.  
 
Since there are no specific rules for National identifications numbers it is up to each state to determine the conditions under which the national ID numbers can be processed. The sensitivity of the issue, which is linked to the sensitive issue of state sovereignty as well as the complexity of the topic lead the legislators to decide to not unify and harmonize the issue among member states. Based on that the national identification number is not ibso facto characterized as sensitive data. As the state has the possibility to self-define the processes for data processing in this case, it has also the possibility to decide upon the characterization of these data as sensitive. This was also the rationale behind the antecedent of article 87 GDPR, article 8(7) DPD.  
  
De lege lata, the article provides that member states may choose to adopt measures on processing the national ID numbers. If the member state decides to adopt measures, then it also has to implement the appropriate safeguards to secure the protection of the citizens’ data<ref>The EU General Data Protection Regulation (GDPR), A commentary, edited by Christopher Kuner, Lee A. Bygrave and Christopher Dockse, Kuner p.1224</ref>.   
+
De lege lata, the article provides that member states may choose to adopt measures on processing the national ID numbers. If the member state decides to adopt measures, then it also has to implement the appropriate safeguards to secure the protection of the citizens’ data<ref>Van Eecke/Simkus, in Kuner et al., The EU General Data Protection Regulation (GDPR), Article 87 GDPR, p. 1224 (Oxford University Press 2020);</ref>.   
  
According to these the member states around Europe have adopted a different strategy to face this issue. They are mentioned indicatively, Belgium or Sweden which follow a system of general application as it was indicated by article 8(7) DPD<ref>The EU General Data Protection Regulation (GDPR), A commentary, edited by Christopher Kuner, Lee A. Bygrave and Christopher Dockse, Kuner p. 1225</ref> and Austria or Portugal which haven’t opted for a general application but they are limiting the use within one public sector.  
+
According to these the member states around Europe have adopted a different strategy to face this issue. They are mentioned indicatively, Belgium or Sweden which follow a system of general application as it was indicated by article 8(7) DPD<ref>Van Eecke/Simkus, in Kuner et al., The EU General Data Protection Regulation (GDPR), Article 87 GDPR, p. 1225 (Oxford University Press 2020);</ref> and Austria or Portugal which haven’t opted for a general application but they are limiting the use within one public sector.  
  
 
== References ==
 
== References ==

Latest revision as of 12:15, 14 May 2021

Article 87 - Processing of the national identification number
Gdpricon.png
Chapter 10: Delegated and implementing acts

Legal Text[edit | edit source]


Article 87 - Processing of the national identification number


Member States may further determine the specific conditions for the processing of a national identification number or any other identifier of general application. In that case the national identification number or any other identifier of general application shall be used only under appropriate safeguards for the rights and freedoms of the data subject pursuant to this Regulation.

Commentary[edit | edit source]

National identification numbers as understood in article 87 are used as a unique and trustworthy method of identifying a particular person by state authorities so that public services might be provided while also respecting that person’s confidentiality[1]. States can choose whether they want to adopt a system of multiple numbers which could be used either by all state authorities for any public administration purpose, or could be used only for a specific sector or purpose.

Since there are no specific rules for National identifications numbers it is up to each state to determine the conditions under which the national ID numbers can be processed. The sensitivity of the issue, which is linked to the sensitive issue of state sovereignty as well as the complexity of the topic lead the legislators to decide to not unify and harmonize the issue among member states. Based on that the national identification number is not ibso facto characterized as sensitive data. As the state has the possibility to self-define the processes for data processing in this case, it has also the possibility to decide upon the characterization of these data as sensitive. This was also the rationale behind the antecedent of article 87 GDPR, article 8(7) DPD.  

De lege lata, the article provides that member states may choose to adopt measures on processing the national ID numbers. If the member state decides to adopt measures, then it also has to implement the appropriate safeguards to secure the protection of the citizens’ data[2].

According to these the member states around Europe have adopted a different strategy to face this issue. They are mentioned indicatively, Belgium or Sweden which follow a system of general application as it was indicated by article 8(7) DPD[3] and Austria or Portugal which haven’t opted for a general application but they are limiting the use within one public sector.

References[edit | edit source]

  1. Van Eecke/Simkus, in Kuner et al., The EU General Data Protection Regulation (GDPR), Article 87 GDPR, p. 1226 (Oxford University Press 2020);
  2. Van Eecke/Simkus, in Kuner et al., The EU General Data Protection Regulation (GDPR), Article 87 GDPR, p. 1224 (Oxford University Press 2020);
  3. Van Eecke/Simkus, in Kuner et al., The EU General Data Protection Regulation (GDPR), Article 87 GDPR, p. 1225 (Oxford University Press 2020);