Selected European legislation

GDPR (General Data Protection Regulation) effective since 25. May 2018.

Directive 2000/31/EC of the European Parliament and of the Council of 8 June 2000 on certain legal aspects of information society services, in particular electronic commerce, in the Internal Market (Directive on electronic commerce)

Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) – this directive was amended by Directive 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC, and also by Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009 amending Directive 2002/22/EC on universal service and users’ rights relating to electronic communications networks and services, Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector and Regulation (EC) No 2006/2004 on cooperation between national authorities responsible for the enforcement of consumer protection laws.

Regulation 611/2013 of 24 June 2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications.

Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Council of Europe, CETS No. 108)

The Czech Republic ratified the Convention CETS No. 108 on 9 July 2001 and it entered into force in the Czech Republic on 1 November 2001.

Additional Protocol to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, regarding supervisory authorities and transborder data flows (Council of Europe, CETS No. 181)

The Czech Republic ratified the Additional Protocol CETS No. 181 on 24 September 2003 and it entered into force in the Czech Republic on 1 July 2004. In this occasion, the Czech Republic has declared that, according to Article 3(2)(c) of the Convention CETS No. 108, it will also apply this Convention to personal data files which are not processed automatically (see List of declarations made with respect to treaty No. 108)