Resolução da Assembleia da República n.º 107/2023
| Data de publicação | 31 Agosto 2023 |
| ELI | https://data.dre.pt/eli/resolassrep/107/2023/08/31/p/dre/pt/html |
| Data | 10 Janeiro 2018 |
| Gazette Issue | 169 |
| Section | Serie I |
| Órgão | Assembleia da República |
N.º 169 31 de agosto de 2023 Pág. 83
Diário da República, 1.ª série
ASSEMBLEIA DA REPÚBLICA
Resolução da Assembleia da República n.º 107/2023
Sumário: Aprova o Protocolo que Altera a Convenção do Conselho da Europa para a Proteção
das Pessoas relativamente ao Tratamento Automatizado de Dados de Caráter Pessoal.
Aprova o Protocolo que Altera a Convenção do Conselho da Europa para a Proteção
das Pessoas relativamente
ao Tratamento Automatizado de Dados de Caráter Pessoal
A Assembleia da República resolve, nos termos da alínea i) do artigo 161.º e do n.º 5 do
artigo 166.º da Constituição, aprovar o Protocolo que Altera a Convenção do Conselho da Europa
para a Proteção das Pessoas relativamente ao Tratamento Automatizado de Dados de Caráter
Pessoal, aberto à assinatura a 10 de outubro de 2018, cujo texto na versão autenticada, nas línguas
inglesa e portuguesa, se publica em anexo.
Aprovada em 19 de julho de 2023.
O Presidente da Assembleia da República, Augusto Santos Silva.
PROTOCOL AMENDING THE CONVENTION FOR THE PROTECTION OF INDIVIDUALS
WITH REGARD TO AUTOMATIC PROCESSING OF PERSONAL DATA
Strasbourg, 10.X.2018
Preamble
The member States of the Council of Europe and the other Parties to the Convention for the
Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108), opened
for signature in Strasbourg on 28 January 1981 (hereinafter referred to as “the Convention”):
Having regard to Resolution No. 3 on data protection and privacy in the third millennium
adopted at the 30th Council of Europe Conference of Ministers of Justice (Istanbul, Turkey,
24 -26 November 2010);
Having regard to the Parliamentary Assembly of the Council of Europe’s Resolution 1843 (2011)
on the protection of privacy and personal data on the Internet and online media and Resolution 1986
(2014) on improving user protection and security in cyberspace;
Having regard to Opinion 296 (2017) on the draft protocol amending the Convention for the
Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108) and
its explanatory memorandum, adopted by the Standing Committee on behalf of the Parliamentary
Assembly of the Council of Europe on 24 November 2017;
Considering that new challenges to the protection of individuals with regard to the processing
of personal data have emerged since the Convention was adopted;
Considering the need to ensure that the Convention continues to play its pre -eminent role in
protecting individuals with regard to the processing of personal data, and more generally in protecting
human rights and fundamental freedoms,
have agreed as follows:
Article 1
1 — The first recital of the preamble of the Convention shall be replaced by the following:
“The member States of the Council of Europe, and the other signatories hereto,”
N.º 169 31 de agosto de 2023 Pág. 84
Diário da República, 1.ª série
2 — The third recital of the preamble of the Convention shall be replaced by the following:
“Considering that it is necessary to secure the human dignity and protection of the human
rights and fundamental freedoms of every individual and, given the diversification, intensification and
globalisation of data processing and personal data flows, personal autonomy based on a person’s
right to control his or her personal data and the processing of such data;”
3 — The fourth recital of the preamble of the Convention shall be replaced by the following:
“Recalling that the right to protection of personal data is to be considered in respect of its
role in society and that it has to be reconciled with other human rights and fundamental freedoms,
including freedom of expression;”
4 — The following recital shall be added after the fourth recital of the preamble of the Convention:
“Considering that this Convention permits account to be taken, in the implementation of the
rules laid down therein, of the principle of the right of access to official documents;”
5 — The fifth recital of the preamble of the Convention shall be deleted. New fifth and sixth
recitals shall be added, which read as follows:
“Recognising that it is necessary to promote at the global level the fundamental values of res-
pect for privacy and protection of personal data, thereby contributing to the free flow of information
between people;
Recognising the interest of a reinforcement of international co -operation between the Parties
to the Convention,”
Article 2
The text of article 1 of the Convention shall be replaced by the following:
“The purpose of this Convention is to protect every individual, whatever his or her nationality or
residence, with regard to the processing of their personal data, thereby contributing to respect for
his or her human rights and fundamental freedoms, and in particular the right to privacy.”
Article 3
1 — Littera b of article 2 of the Convention shall be replaced by the following:
“b) ‘data processing’ means any operation or set of operations performed on personal data, such
as the collection, storage, preservation, alteration, retrieval, disclosure, making available, erasure,
or destruction of, or the carrying out of logical and/or arithmetical operations on such data;”
2 — Littera c of article 2 of the Convention shall be replaced by the following:
“c) where automated processing is not used, ‘data processing’ means an operation or set of
operations performed upon personal data within a structured set of such data which are accessible
or retrievable according to specific criteria;”
3 — Littera d of article 2 of the Convention shall be replaced by the following:
“d) ‘controller’ means the natural or legal person, public authority, service, agency or any other
body which, alone or jointly with others, has decision -making power with respect to data processing;”
4 — The following new littera e shall be added after littera d of article 2 of the Convention:
“e) ‘recipient’ means a natural or legal person, public authority, service, agency or any other
body to whom data are disclosed or made available;
Para continuar a ler
PEÇA SUA AVALIAÇÃO