---

Data Protection in the Areas of Police and Criminal Justice (EU Directive)

Our priority in negotiations will be to resist the application of the directive to all domestic processing—that is, data sent between two United Kingdom agencies. Although article 6a of protocol 21 means that this will not apply to us, we feel that it is important to remove this expansion as such data processing should not be the subject of European Union rules. We will seek to remove that for all European Union countries. As further examples, the proposal lays down new obligations for data controllers regarding the documentation and records that they must keep and the consultations that they must hold with the Information Commissioner's Office in order for the processing to be considered compliant with the rules. We also have reservations about the compulsory appointment of data protection officers, a role that will need to be filled ostensibly to ensure that data controllers fulfil the various obligations presented to them, including those that I just outlined. We already expect robust data protection governance as a matter of course in public authorities. However, we question the necessity of having the European Union telling us how to create, organise and run these arrangements. The more prescriptive and burdensome aspects of the directive are opposed by the Government and we will seek to remove or mitigate them during negotiations in the Council of the European Union. This is the beginning of a lengthy process of negotiating new data protection legislation, not the end. The UK will seek to influence negotiations in order to bring about outcomes that are more in line with our policy objectives, which is to end up with an effective but proportionate framework.