Print

Sécurité de l’information

La sécurité de l’information est un moteur essentiel pour la protection de la vie privée et des données à caractère personnel. De plus, la plupart des organisations doivent faire face à un paysage en perpétuelle mutation affectant leurs activités. Les incertitudes engendrées par de tels changements auront une incidence sur la manière dont l'organisation doit réagir afin de s'assurer que ses informations sont dûment protégées. Par conséquent, un cadre spécifique permettant aux responsables de la sécurité de l'information de gérer les incertitudes susceptibles d'affecter, avec le temps, la sécurité des informations de leur organisation est nécessaire. Un tel cadre d'organisation spécifique est qualifié de processus de gestion des risques relatifs à la sécurité des systèmes d'information.

Il existe trois éléments généralement acceptés pour assurer de façon adéquate la sécurité de l’information :

  1. la confidentialité : afin que seules les bonnes personnes aient accès à l’information ;
  2. l’intégrité : afin que seules les bonnes personnes puissent actualiser les informations de façon adéquate ; et
  3. la disponibilité : les informations sont disponibles lorsqu’elles sont nécessaires.

Filters

26
Mar
2008

Eléments de sécurité et biométriques des passeports

Avis concernant la proposition de règlement modifiant le règlement (CE) n° 2252/2004 du Conseil établissant des normes pour les éléments de sécurité et les éléments biométriques intégrés dans les passeports et les documents de voyage délivrés par les Etats membres, JO C 200, 06.08.2008, p. 1

On 26 March 2008, the EDPS adopted an opinion on the Commission's proposal aiming at revising the 2004 Council Regulation that sets out minimum standards for security features and biometrics in passports and travel documents.

The EDPS welcomes the introduction of exemptions from giving fingerprints based on the age of the person or his/her inability to provide fingerprints. However, he still considers these exemptions as insufficient to remedy the imperfections of biometrics, such as the impact of misidentification or failure to enrol.
The EDPS' opinion includes the following recommendations:

  • fingerprints from children: the proposed six-year age limit should be considered as a provisional one, or brought in line with international practice (14 years). After three years, the age limit should be reviewed and defined by an in-depth study which is to identify the accuracy of the systems obtained under real conditions;
  • fingerprints from the elderly: an age limit for elderly, based on similar experiences already in place (79 years), should be introduced as an additional exemption;
  • principle of "one person-one passport": this principle should be applied only to children above the relevant age limit;
  • "breeder" documents: additional measures should be proposed to harmonise the production and the use of documents required in Member States to issue passports (“breeder” documents).

The EDPS recalls that exemptions should in no way stigmatize or discriminate individuals who will be exempt, because of their age as a precautionary principle or because they present obviously unreadable fingerprints

COM(2007) 619 final du 18.10.2007
Langues disponibles: anglais, français
16
Feb
2007

Office européen de police

Avis sur la proposition de décision du Conseil portant création de l'Office européen de police (Europol) (COM(2006) 817 final), JO C 255, 27.10.2007, p. 13

The objective of the proposal is not a major change in the mandate or the activities of Europol, but mainly to provide Europol with a new and more flexible legal basis. The proposal also contains substantive changes, so as to further improve Europol's functioning. It extends the mandate of Europol and it contains several new provisions, aiming to further facilitate the work of Europol, for instance on the exchange of data between Europol and other bodies of the EC/EU, like Olaf.. The proposal contains specific rules on data protection and data security, additional to the general legal framework on data protection for the third pillar that has not yet been adopted. Other changes will bring the position of Europol more in line with other bodies of the EU.
The EDPS-opinion suggests a number of improvements and concludes moreover that the Council Decision should not be adopted before the adoption by Council of a framework on data protection, guaranteeing an appropriate level of data protection.
Langues disponibles: Bulgarian, Czech, Danish, allemand, Estonian, Greek, anglais, Spanish, français, Italian, Latvian, Lithuanian, Hungarian, Maltese, Dutch, Polish, Portuguese, Romanian, Slovak, Slovenian, Finnish, Swedish
COM(2006) 817 final du 20.12.2006
Langues disponibles: anglais, français
16
Oct
2006

Titres de séjour

Avis sur la proposition modifiée de règlementdu Conseil modifiant le règlement (CE) no 1030/2002 établissant un modèle uniforme de titre de séjour pour les ressortissants de pays tiers, JO C 320, 28.12.2006, p. 21

Following the introduction of biometric features in European passports and Schengen visas, this proposal is the third one to rely on biometric data. The EDPS supports the proposal but stresses that the residence permit should not be seen as a travel document. Also, he underlines that the highest security standards need to be adopted.
If the safeguards recommended in the opinion are implemented, the EDPS does not oppose the use of biometric data which are justified by the enhancement of the security level and by facilitating the fight against illegal immigration and illegal residence. The EDPS welcomes the progress to have better respect for the principle of purpose limitation, but is concerned by the definition of authorities which have access to the data stored.

The EDPS supports the equal treatment of European citizens and third country residents whereby they have access to electronic services, such as e-government services. However, he recommends postponing the insertion of an additional chip for such services until a complete impact assessment study has been conducted.

Langues disponibles: Czech, Danish, allemand, Estonian, Greek, anglais, Spanish, français, Italian, Latvian, Lithuanian, Hungarian, Dutch, Polish, Portuguese, Slovak, Slovenian, Finnish, Swedish