Skip to content

GDPR Assessment: Silence on Key Concerns of Critics at the Review Meeting

EU Commission to Assess Initial Year of GDPR Enforcement in Three Panels Discussion, Focusing on Effectiveness and Scope of Data Protection Regulation within and beyond the EU.

Unheard-of Discussions During the GDPR Evaluation by the Commission
Unheard-of Discussions During the GDPR Evaluation by the Commission

GDPR Assessment: Silence on Key Concerns of Critics at the Review Meeting

The European Commission is set to host an event on June 13, aiming to review the first year of the General Data Protection Regulation (GDPR). This landmark legislation, implemented last year, has sparked a wave of changes across Europe and beyond.

One of the key findings from the past year is a lack of awareness among Europeans about their own data protection rights. Only 57 percent of Europeans know that there is a public authority in their country in charge of protecting personal data. This figure varies significantly across countries, with France, Italy, and Belgium having 55, 50, and 47 percent of the population, respectively, never hearing about the GDPR.

The GDPR's aim was to empower consumers by giving them control over their personal data. However, the reality has been less ideal. Perceived control through a consent policy has led to mechanical agreement with lengthy terms and conditions, rather than true empowerment.

Despite the challenges, the GDPR has not deterred other nations from adopting similar data protection frameworks. Countries such as Japan, South Korea, and Thailand have announced plans to copy or closely follow the EU's GDPR, adapting it to their own contexts.

However, nations looking to implement similar data protection rules should be cautious about copying and pasting the GDPR to avoid its pitfalls. The GDPR has been a source of legal uncertainty, compliance costs, and obstacles to innovation for European businesses. Small and medium enterprises have been particularly impacted by the GDPR due to additional administrative burdens.

The event will feature three panels discussing enforcement effectiveness, data protection as a business opportunity, and individual use of new rights. The Commission can tout the law as a success, but the GDPR is failing to effectively empower consumers to gain control over their personal data. To address this, proposed solutions include establishing clearer legal bases for data processing, limiting automated police data analysis to cases with serious legal violations, and enhancing compliance enforcement to protect fundamental rights more effectively.

The voices of critics are often overlooked in the Brussels bubble, which at times resembles a parallel universe beyond which EU policymakers rarely seem to look. EU policy officials are likely to sing the praises of the GDPR, believing it is working as intended, but many stakeholders are voicing concerns over its ill effects.

The GDPR has led to an increase in privacy complaints and data breach notifications that national authorities, constrained by budgets, have struggled to address. Not all member states are in compliance with the GDPR, making it difficult for companies with customers in more than one country to navigate.

The event comes at a crucial time, providing an opportunity for reflection and discussion on the GDPR's first year. Brussels still has time to make needed adjustments to the GDPR to avoid replicating its pitfalls and to ensure that it effectively empowers consumers and protects their fundamental rights.

Read also:

Latest