In 2012, what would become a four-year process started: the creation of new European data protection rules. The General Data Protection Regulation would replace the European data protection rules from 1995 and enhance and harmonise data protection levels across Europe. An influential piece of legislation that touches on the lives of 50 millions of people and that creates the highest regional standard for data protection.
A lobbyist feeding frenzy
With so much at stake, civil society was preparing for strong push-back from companies. But we could never have dreamed just how dead set corporate lobbyists were on undermining citizens’ rights – or the lengths they would go to to achieve their goals. Former European Commissioner Viviane Reding said it was the most aggressive lobbying campaign she had ever encountered. The European Parliament was flooded with the largest lobby offensive in its political history.
As a member of European Digital RightsVisit the EDRi website (EDRi), an association of civil and human rights organisations from across Europe, we worked together and continued to fight back. Among other things we had to explain that data leaks are dangerous and need to be reported, and that it’s not acceptable to track and profile people without their consent. We were up against the combined resources of the largest multinational corporations and data-hungry governments, but we also had two things in our favor: the rapporteur Jan Philipp Albrecht and his team were adamant about safeguarding civil rights, and in 2013 the Snowden-revelations made politicians more keen on doing the same. Against all odds, we prevailed!
GDPR isn’t perfect, but it is a way forward
The General Data Protection Regulation that was adopted in 2016, and will be enforced starting May 25th, is far from perfect. As we pointed out in 2015GDPR: Lacking ambition, but saving the basics., we did however manage to save “the essential elements of data protection in Europe”, and now have a tool with which to hold companies and governments using your data to account. We are committed to doing just that. We will continue to fight for your privacy and speak out when and where it is necessary. And we’ll help you do the same.