Avrupa Birliği Uygulamasında Genel Olarak ve Ceza Soruşturmaları Yönünden Kişisel Verilerin Korunması

Bu makalenin iki temel amacı vardır. Birincisi, Avrupa Birliği hukukunda kişisel verilerin korunmasıyla ilgili mevcut hukuki modeli incelemek; ikincisi de bu hukuki modelin cezai soruşturmalar ve kovuşturmalar üzerindeki etkilerini açıklamaktır. Her iki konu da mahremiyet hakkının korunması ile kamu güvenliği arasındaki denge gözetilerek incelenmiştir. Bu doğrultuda, makale iki ana bölümden oluşmaktadır. Birinci bölümde, AB hukukunda kişisel verilerin korunmasına dair hukuki modelin gelişimiyle ilgili eksiksiz bir anlatı sunmak açısından sırasıyla kaynak metinler incenmiş, geçmişte yürürlükte olan model açıklanmış ve kronolojik bir yöntemle mahkeme kararlarının temel aldığı esaslar anlatılmıştır. Bu minvalde öncelikle, Avrupa İnsan Hakları Sözleşmesi (AİHS), Avrupa Birliği Temel Haklar Şartı, Avrupa Birliği’nin İşleyişi Hakkındaki Antlaşma ve Lizbon Antlaşması’nın ilgili kısımları incelenmiş, sonrasında, Avrupa İnsan Hakları Mahkemesi (AİHM) ve Avrupa Birliği Adalet Divanı (ABAD) kararlarının temel aldığı esasları belirlemek amacıyla geçmişte yürürlükte olan 108 No’lu Avrupa Konseyi Sözleşmesi (Kişisel Verilerin Otomatik İşleme Tabi Tutulması Karşısında Bireylerin Korunması Sözleşmesi), 95/46/EC sayılı AB Konseyi ve AB Parlamentosu Direktifi, 2008/977/JHA sayılı Konsey Çerçeve Kararı ve ABAD kararı ile geçersiz kılınan Veri Saklama Direktifi gibi ikincil belgeler ele alınmış, her iki mahkemenin (AİHM ve ABAD) kararları kronolojik olarak irdelenmiştir.

DATA PROTECTION IN THE EUROPEAN UNION FRAMEWORK IN GENERAL AND IN CRIMINAL INVESTIGATIONS1

This article has two aims: to elaborate the current data protection framework in the European Union, and to illustrate data protection framework in the criminal investigations, both with specific reference to the balance between the protection of the right to privacy and national security. Accordingly, this article is divided into two main parts. The first part lays out the primary documents of current legislative framework, analyses the old model of EU data protection, and chronologically elaborates of court rulings, in order to produce a complete narrative of the development of data protection framework in the EU. Correspondingly, European Convention on Human Rights (ECHR), Charter of Fundamental Rights of the European Union (CFR), the Treaty on the Functioning of the European Union (TFEU) and the Treaty of Lisbon are primarily investigated. Secondly, Convention 108, Directive 95/46/EC, Council Framework Decision 2008/977/JHA and the invalidated Data Retention Directive are elaborated. Thirdly, European Court of Human Rights (ECtHR) and the Court of Justice of the European Union (CJEU) rulings and their role in the data protection model reform are chronologically explained.

PDF

___

2000/520/EC: Commission Decision of 26 July 2000 pursuant to Directive 95/46/EC of the European Parliament and of the council on the adequacy of the protection provided by the safe Harbour privacy principles and related frequently asked questions issued by the US Department of Commerce (notified under document number C [2000] 2441OJ L 215 CoE Police Data Recommendation Rec (87) [1987]
Convention No. 108 on data protection: Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data [1987] ETS No. 108
Council Decision 2002/187/JHA of 28 February 2002 setting up Eurojust with a view to reinforcing the fight against serious crime [2002] OJ 2002 L 63 Council Decision 2003/659/JHA of 18 June 2003 amending Decision
2002/187/JHA setting up Eurojust with a view to reinforcing the fight against serious crime [2003] OJ 2003 L 44
Council Decision 2008/615/JHA of 23 June 2008 on the stepping up of cross-border cooperation, particularly in combating terrorism and cross-border crime [2008] OJ L 210
Council Decision 2009/426/JHA of 16 December 2008 on the strengthening f Eurojust and amending Decision 2002/187/JHA setting up Eurojust with a view to reinforcing the fight against serious crime [2008] OJ 2009 L 138 Council Framework Decision 2006/960/JHA of 18 December 2006
on simplifying the exchange of information and intelligence between law enforcement authorities of the Member States of the European Union [2006] OJ L 386 OJ L 210
Council Framework Decision 2008/977/JHA of 27 November 2008 on the protection of personal data processed in the framework of police and judicial cooperation in criminal matters [2008] OJ L 350
Council of the European Union (2000), Council Decision 2000/642/JHA of 17 October 2000 concerning arrangements for cooperation between financial intelligence units of the Member States in respect of exchanging information [2000] OJ 2000 L 271 Council of the European Union (2009), Council Framework Decision 2009/315/JHA of 26 February 2009 on the organisation and content of the exchange of information extracted from the criminal record between Member States [2009] OJ 2009 L 93 Directive (EU) 2016/680 of the European Parliament and of the council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA [2016] OJ L 119 Directive 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC [2006] OJ L 105 Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data [1995] OJ L 281 European Data Protection Supervisor, “A Further Step Towards Comprehensive EU Data Protection,” EDPS Recommendations on the Directive for data protection in the police and justice sectors, [2015] Opinion 6/2015, 28 October European Data Protection Supervisor, “Annex to Opinion 6/2015: Comparative Table of Directive Texts with EDPS Recommendations” [2015] Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector [2002] OJ L 201 Explanatory Report to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, Strasbourg [1981] ETS 108 Proposal for a Directive of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data by competent authorities for the purposes of prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and the free movement of such data COM/2012/010 final –2012/0010 (COD) Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000, on the protection of individuals with regard to the processing of personal data by the Community Institutions and bodies and on the free movement of such data [2001] OJ L 008 Regulation (EC) No. 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the institutions and bodies of the Community and on the free movement of such data [2000] OJ 2001 L 8 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) [2016] OJ L/119 Regulation (EU) 2016/794 of the European Parliament and of the Council of 11 May 2016 on the European Union Agency for Law Enforcement Cooperation (Europol) and replacing and repealing Council Decisions 2009/371/JHA, 2009/934/JHA, 2009/935/JHA, 2009/936/JHA and 2009/968/ JHA [2016] OJ L135/53 Regulation (EU) 2016/794 of the European Parliament and of the Council of 11 May 2016 on the European Union Agency for Law Enforcement Cooperation (Europol) and replacing and repealing Council Decisions 2009/371/JHA, 2009/934/JHA, 2009/935/JHA, 2009/936/JHA and 2009/968/ JH [2009] OJ 2016 L 135 The Charter of Fundamental Rights of the European Union [2000] 2000/C 264/01 The Convention for the Protection of Human Rights and Fundamental Freedoms (European Convention on Human Rights, as amended) [1950] CETS No. 005 Treaty of European Union, Consolidated version [2012] OJ C 326 Treaty of Lisbon [2009] OJ C 306 Treaty on the Functioning of the European Union [2007] OJ C 326 European Data Protection Supervisor (2017), Necessity Toolkit, 11 April 2017 accessed on 22 May 2019 Art. 29 WP Opinion No 4/2007 on the concept of personal data (WP136 – 01248/07/EN) accessed on 20 May 2019 Christopher Kuner, “EU Data Transfer Regulation Post-Schrems”.18 German Law Journal 881 (2017) accessed on 4 May 2019 Douwe Korff, “EC Study on Implementation of Data Protection Directive 95/46/EC (2002)”, accessed on 15 May 2019 Elspeth Guild and Sergio Carrera, “The Political and Judicial Life of Metadata: Digital Rights Ireland and the Trail of the Data Retention Directive”, SAPIENT online CEPS Papers, 2014. accessed on 20 June 2019 Global Freedom of Expression Team of Columbia University, “Promusicae v Telefónica de Espana SAU, Case C-275/06”, accessed on 10 May 2019 González Fuster, “Beyond the GDPR, above the GDPR”, [2015] IPR accessed on 28 May 2019 Marko Milanovic, “ECtHR Judgement in Big Brother Watch v. UK”, EJIL: Talk! September 17, 2018 accessed on 28 May 2019 Note from Presidency to Council June 11, 2015, accessed on 18 May 2019 Press Release, European Commission, Commission Proposal on New Data Protection Rules to Boost EU Digital Single Market Supported by Justice Ministers, June 15, 2015, accessed on 18 May 2019 Privacy International, ‘Metadata’ 23 October 2017 accessed on 10 May 2019