Drones raise privacy concerns due to their ability to conduct surveillance and collect images. In Europe, privacy is protected under the European Convention on Human Rights and the EU has passed legislation like the Data Protection Directive and upcoming General Data Protection Regulation to govern how personal data can be collected and processed. The new Regulation will expand definitions and rights around personal data while imposing stricter rules on companies through measures like mandatory privacy impact assessments, data protection officers, and larger fines for violations.

1. Introduction: drones, privacy and data
protection
Avisa Considerati Drone Seminar, 3 September 2013
mr. dr. Bart W. Schermer
schermer@considerati.com
twitter: @bwschermer

2. Agenda: drones, privacy and data protection
• Privacy and drones
• Privacy and data protection in Europe
• The upcoming Data Protection Regulation

3. Privacy and drones

4. • Unmanned Aerial Vehicles (UAV)
-Military: combat drone (UCAV)
• Ground control station
• UAVs can fly autonomously or remotely controlled
• Equipped with sensors (camera)
Drones

5. Media on drones

6. Drones in the Legal Life Cycle™
High costs
Little influence on developments
Low costs
Big influence on developments
Behaviour &
Abuse
Technology &
Innovation
Societal
Issue
Law &
Policymaking
Policy
Execution
Compliance
Enforcement
& Litigation

7. Privacy concerns prompt regulatory intervention

8. • Privacy issues related to observation & surveillance with drones
• Privacy issues related to storage and use of images made by drones
• Use of drones for law enforcement purposes
• Use of drones for non-law enforcement purposes
Drones & Privacy

9. Privacy and data protection in Europe

10. Privacy in Europe: a taxonomy
Dimensions of privacy Privacy relations Privacy goals
Body
Home
Correspondence
Information (data)
Citizen ß à Government
Consumer ß à Business
Citizen ß à Citizen
Personal autonomy
Equal treatment
Protection from harm
Protection of private sphere
…

11. 11
big brother
11
Source: Banksy

12. EU privacy and data protection legislation

13. • UDHR - Article 12
• ECHR - Article 8
• Council of Europe Convention on data protection
• Directive 95/46/EC
• Directive 02/58/EC & 09/136/EC (telecoms)
• (General Data Protection Regulation)
Privacy and data protection

14. Article 8 ECHR
Article 8 – Right to respect for private and family life
1. Everyone has the right to respect for his private and family life, his home and his
correspondence.
2. There shall be no interference by a public authority with the exercise of this right
except such as is in accordance with the law and is necessary in a democratic
society in the interests of national security, public safety or the economic well-
being of the country, for the prevention of disorder or crime, for the protection of
health or morals, or for the protection of the rights and freedoms of others.

15. Have we
specified the
purposes for
data
processing?
Is this goal
legitimate?
Do we process
personal data
responsibly?
Legitimate purpose for data processing Legal requirements for
data processing
Structure and logic of EU data protection law (95/46/EC)

16. The EU Data Protection Regulation

17. • Data Protection Regulation (supersedes Directive 95/46/EC)
• Police and Criminal Justice Data Protection Directive
Two legislative instruments

18. • Broader definition of personal data
• Explicit consent
• Right to be ‘forgotten’
• Right to data portability
• Mandatory ‘privacy by design’
• Mandatory ‘data protection impact assessment’
• Mandatory DPO
• Data breach notification
• Very, very high administrative fines (www.privacychecker.eu)
Data Protection Regulation ‘highlights’

19. The legislative process (so far)
Commission
Consultation
Official
Proposal
Proposal discussed
In EU Council
LIBE
EMPL
ITRE
JURE
IMCO
Regulationadopted
2012 Autumn 2013? ???begin 2014?
CommissionCouncilEUParliament
Parliament
Position
European Council
preparations
First reading in EU Parliament
Council
position
mid 2014?
Parliament
2nd and 3rd reading
Council
Regulation
adopted
…

20. Contact
Bart Schermer
+ 31 61 343 3437
+ 31 20 737 0069
schermer@considerati.com
Address
Postbus 76949
1070 KE Amsterdam
Visiting Address
Meeuwenlaan 106 F
1021 JL Amsterdam
www.considerati.com
Contact details