In October 2018, Council of Europe passed the resolution to update Convention 108 (“Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data” which was adopted in 1981. It was long overdue as seen in the preamble “given the diversification, intensification, and globalisation of data processing and personal data flows” and “necessary to secure the human dignity and protection of the human rights and fundamental freedoms”

Principles (Similar to GDPR):

1. Lawfulness, fairness, and transparency (Article 5.1, 5.2, 5.4a, 8, )
2. Purpose Limitation (Article 5.4b)
3. Data Minimization (Article 5.4c)
4. Accuracy (Article 5.4d)
5. Storage Limitation (Article 5.4e)
6. Integrity and Confidentiality (Article 7)

Lawfulness of Processing:

1. Free, specific, informed and unambiguous consent

Data Subject Rights (Article 9):

1. Right to access
2. Right to object to Automated Decision Making
3. Right to object
4. Right to erasure
5. Right to rectification

Read more