EU strikes deal to give users more control over data

Brussels has already set global standards for personal data protection and privacy as well as building up its legal armoury to tackle the might of technology companies.

EU strikes deal to give users more control over data (illustration photo/ Source: freepik.com)

Negotiators from the European Council, which represents the 27 member states, and the European Parliament struck a deal late on Tuesday on the data act, first proposed by the bloc's executive arm in February 2022.

With the climbing use of internet-connected products, there has been an explosion in how much data is available and the EU says it wants to make sure European citizens wrestle control from companies.

Under the law, data sharing should be made easier between customers and companies, as well as with other firms. Previously, people's data has remained in the hands of businesses with little chance of users gaining access.

The new rules also include safeguards against unlawful data transfer by cloud service providers and make it easier to switch providers of data processing services, the council said in a statement.

"Once the data act enters into force, it will unlock the economic and societal potential of data and technologies and contribute to an internal market for data," said Sweden's minister for public administration Erik Slottner.

The EU's internal market commissioner, Thierry Breton, hailed the "milestone" agreement "reshaping the digital space".

He added on Twitter that the bloc was on the path to "a thriving data economy that is innovative & open — on our conditions".

The new data law was not welcomed by all, especially by the technology industry, while one consumer organisation described it as a "missed opportunity".

The Computer & Communications Industry Association (CCIA), a big tech lobby, warned the law "risks hampering data-driven innovation" and would "limit consumer choice".

Alexandre Roure, public policy director for CCIA Europe, said the EU's aim to encourage "data value creation can only be commended".

But he said the law was not "enough to enable responsible data sharing by companies, nor does it leave users free to decide how they want to use their exported data".

European Consumer Organisation deputy director general Ursula Pachl said the EU gave "too much flexibility to companies who can now prevent consumers from sharing data with other service providers on the basis it constitutes a trade secret, for example".

The data law will come into force from 2025 onwards.

The EU is also currently preparing the world's first comprehensive law to regulate artificial intelligence, and aims to approve the legislation by the end of the year.

Nuts and bolts of new personal data decree Last month the government in Vietnam finally issued Decree No.13/2023/ND-CP on personal data protection (PDP). The decree will take effect from July; however, micro, small, and medium-sized enterprises as well as startups (excluding data processing companies) are optionally exempted for two years.

Data security – A top priority for digital economy development Businesses, policymakers, and experts gathered at the Vietnam Security Summit 2023 on June 2 to discuss the importance of information security and how to effectively utilise it in the context of digital transformation and global uncertainties.

US fines Microsoft $20 million over child data violations Microsoft will pay $20 million to settle government charges that it collected personal information from children without their parents' consent, officials said Monday.

Data protection heads digital banking efforts Vietnamese authorities have been busy at work dismantling an illicit information network involving bank employees, as local lenders prioritise data protection and digital infrastructure for customer privacy and growth.