Article 94 GDPR: Difference between revisions

From GDPRhub
(merge category "GDPR" into "GDPR Articles")
(→‎Commentary: expanded a bit on the transition regulation under rec 171)
 
(3 intermediate revisions by 3 users not shown)
Line 185: Line 185:


== Legal Text ==
== Legal Text ==
<br /><center>'''Article 94 - Repeal of Directive 95/46/EC'''</center><br />
<br /><center>'''Article 94 - Repeal of Directive 95/46/EC'''</center>


<span id="1">1.  Directive 95/46/EC is repealed with effect from 25 May 2018.</span>
<span id="1">1.  Directive 95/46/EC is repealed with effect from 25 May 2018.</span>
Line 191: Line 191:
<span id="2">2.  References to the repealed Directive shall be construed as references to this Regulation. References to the Working Party on the Protection of Individuals with regard to the Processing of Personal Data established by Article 29 of Directive 95/46/EC shall be construed as references to the European Data Protection Board established by this Regulation.</span>
<span id="2">2.  References to the repealed Directive shall be construed as references to this Regulation. References to the Working Party on the Protection of Individuals with regard to the Processing of Personal Data established by Article 29 of Directive 95/46/EC shall be construed as references to the European Data Protection Board established by this Regulation.</span>


== Relevant Recitals==
==Relevant Recitals==
171
{{Recital/171 GDPR}}


== Commentary ==
== Commentary ==


Directive 95/46/EC was repealed with effect from 25 May 2018.
Article 94 GDPR repeals Directive&nbsp;95/46/EC and brings into effect the GDPR on the same date - 25 May 2018. Consequently, any data processing that took place from 25 May 2018 is no longer regulated by Directive&nbsp;95/46/EC, but by the GDPR. This provision is to be differentiated from [[Article 99 GDPR|Article 99(1) GDPR]], which entered the Regulation into force on 25 May 2016, generating a two-year transition period between the Regulation's entry into force and date of effect under Article 94 GDPR. <ref>''Kühling, Raab'', in Kühling, Buchner, GVO BDSG, Article 94 GDPR, margin numbers 2-4 (C. H. Beck 2020, 3<sup>rd</sup> edition).</ref>


In order to ensure the continuation of the data protection regulatory system, Article 94 provides that any reference to Directive 95/46/EC shall be replaced by a reference to the GDPR. The same logic is adopted for references to Working Party 29, which are henceforth to be understood as references to the EDPB. In addition, under Recital 171, all processing of personal data in existence at the time of application of the GDPR will have to be adapted to the new rules.
In order to ensure a sense of continuity within the regulatory framework, Article 94(2) GDPR provides that any reference to Directive&nbsp;95/46/EC shall be replaced by a reference to the GDPR. The same approach is adopted for references to Working Party 29, which from the date of effect are to be understood as references to the <span id="2">European Data Protection Board (</span>EDPB).  
 
Nonetheless, questions arise in relation to data processed before the Regulation's date of effect (25 May 2018). Recital 171 seeks to address such issues of transition. It establishes that processing operations which have been in place prior to the Regulation's date of effect must ensure that processing is compliant with the GDPR. In particular, Recital 171 notes that processing reliant on consent as a legal basis under Directive&nbsp;95/46/EC may continue to rely on the same consent given prior to the GDPR's date of effect. In practice, this provision establishes that it is not necessary for the data subject to give their consent once again following the Regulation's date of effect, so long as the conditions under which consent was originally given were compliant with the conditions outlined under the GDPR.  


== Decisions ==
== Decisions ==

Latest revision as of 09:40, 3 October 2023

Article 94 - Repeal of Directive 95/46/EC
Gdpricon.png
Chapter 10: Delegated and implementing acts

Legal Text


Article 94 - Repeal of Directive 95/46/EC

1. Directive 95/46/EC is repealed with effect from 25 May 2018.

2. References to the repealed Directive shall be construed as references to this Regulation. References to the Working Party on the Protection of Individuals with regard to the Processing of Personal Data established by Article 29 of Directive 95/46/EC shall be construed as references to the European Data Protection Board established by this Regulation.

Relevant Recitals

Recital 171: Repeal of Directive 95/46/EC and Transition Phase
Directive 95/46/EC should be repealed by this Regulation. Processing already under way on the date of application of this Regulation should be brought into conformity with this Regulation within the period of two years after which this Regulation enters into force. Where processing is based on consent pursuant to Directive 95/46/EC, it is not necessary for the data subject to give his or her consent again if the manner in which the consent has been given is in line with the conditions of this Regulation, so as to allow the controller to continue such processing after the date of application of this Regulation. Commission decisions adopted and authorisations by supervisory authorities based on Directive 95/46/EC remain in force until amended, replaced or repealed.

Commentary

Article 94 GDPR repeals Directive 95/46/EC and brings into effect the GDPR on the same date - 25 May 2018. Consequently, any data processing that took place from 25 May 2018 is no longer regulated by Directive 95/46/EC, but by the GDPR. This provision is to be differentiated from Article 99(1) GDPR, which entered the Regulation into force on 25 May 2016, generating a two-year transition period between the Regulation's entry into force and date of effect under Article 94 GDPR. [1]

In order to ensure a sense of continuity within the regulatory framework, Article 94(2) GDPR provides that any reference to Directive 95/46/EC shall be replaced by a reference to the GDPR. The same approach is adopted for references to Working Party 29, which from the date of effect are to be understood as references to the European Data Protection Board (EDPB).

Nonetheless, questions arise in relation to data processed before the Regulation's date of effect (25 May 2018). Recital 171 seeks to address such issues of transition. It establishes that processing operations which have been in place prior to the Regulation's date of effect must ensure that processing is compliant with the GDPR. In particular, Recital 171 notes that processing reliant on consent as a legal basis under Directive 95/46/EC may continue to rely on the same consent given prior to the GDPR's date of effect. In practice, this provision establishes that it is not necessary for the data subject to give their consent once again following the Regulation's date of effect, so long as the conditions under which consent was originally given were compliant with the conditions outlined under the GDPR.

Decisions

→ You can find all related decisions in Category:Article 94 GDPR

References

  1. Kühling, Raab, in Kühling, Buchner, GVO BDSG, Article 94 GDPR, margin numbers 2-4 (C. H. Beck 2020, 3rd edition).