Q&As

Which national data protection laws apply?

read titleRead full title
Published on LexisPSL on 04/12/2013

The following Information Law Q&A provides comprehensive and up to date legal information covering:

  • Which national data protection laws apply?
  • What is the legislative basis for determining applicable law?
  • Is there any additional formal guidance as to applicable law?
  • Where do I start?
  • Are we established for data protection purposes in more than one Member State?
  • We have establishments in a number of Member States. Which law applies?

What is the legislative basis for determining applicable law?

The provisions of art 4(1) of Directive 95/46/EC govern the application of a member state's legislation to the processing of personal data. Under art 4(1)(a) and 4(1)(c) it is the location of the data controller or the location of equipment used by the data controller which often determines applicable law.

Of significance to those questions is the issue of the data controller's 'establishment'. Recital 19 of Directive 95/46/EC provides some guidance in this regard, indicating that an 'establishment on the territory of a Member State implies the effective and real exercise of activity through stable arrangements; whereas the legal form of such an establishment, whether simply branch or a subsidiary with a legal personality, is not the determining factor in this respect'.

Is there any additional formal guidance as to applicable law?

Continuing uncertainty

Related documents:

Popular documents