Your rights matter: data protection and privacy · 2020. 6. 17. · copyright, permission must be sought directly from the copyright holders. Neither the European Union Agency for

FUN

DA

MEN

TAL

RIG

HTS

SU

RV

EY

YOUR RIGHTS MATTER: DATA PROTECTION AND PRIVACY―

1II

This publication was originally published in 2020 as part of the FRA Fundamental Rights Report 2020 (Annual report), available at: https://fra.europa.eu/en/publication/2020/fundamental-rights-report-2020

© European Union Agency for Fundamental Rights, 2020

Reproduction is authorised provided the source is acknowledged.

For any use or reproduction of photos or other material that is not under the European Union Agency for Fundamental Rights copyright, permission must be sought directly from the copyright holders.

Neither the European Union Agency for Fundamental Rights nor any person acting on behalf of the Agency is responsible for the use that might be made of the following information.

Luxembourg: Publications Office of the European Union, 2020

Print ISBN 978-92-9474-970-3 doi:10.2811/031862 TK-02-20-383-EN-C

PDF ISBN 978-92-9474-969-7 doi:10.2811/292617 TK-02-20-383-EN-N

Photos credits:

Cover page, page 4, page 14: © iStock/metamorworksPage 1: © iStock/tadamichiPage 3: © iStock/JirsakPage 6: © iStock/scanrail Page 9: © iStock/marchmeena29Page 11: © iStock/akinbostanci

About the survey

The Fundamental Rights Survey provides, for the first time, a comprehensive set of comparable data on people’s experiences and opinions concerning their fundamental rights. The survey focuses on everyday situations in areas including data protection, equal treatment, access to justice, consumer rights, crime victimisation, good administration and the importance of protecting rights.

This document only covers selected results related to data protection and technology. FRA will publish results on other areas in other reports and products.

The Fundamental Rights Survey interviewed just under 35,000 people aged 16 years and older in all EU Member States, North Macedonia and the United Kingdom. The survey design involves a combination of face-to-face and online data collection, as appropriate in each country, to reach a representative sample of the total population. Fieldwork took place from January 2019 to October 2019.

Data collection was carried out by Ipsos MORI on behalf of FRA, and in cooperation with Statistics Netherlands (CBS) in the Netherlands, the Centre des Technologies de l’Information de l’Etat (CTIE) in Luxembourg and Statistics Austria in Austria. Table 1 in the Annex provides an overview of the methodology used in each country.

https://fra.europa.eu/en/publication/2020/fundamental-rights-report-2020

1II

This document presents data from the FRA Fundamental Rights Survey. It includes data on opinions and experiences of people in the European Union (EU) linked to data protection and technology.

The European Commission requested the European Union Agency for Fundamental Rights (FRA) to prepare this document for their report on the application of the General Data Protection Regulation (GDPR, see Article 97 of the GDPR).

This document focuses on two main aspects: the way and willingness of people to share data about themselves, and their awareness about the EU data protection legal framework. Each section includes a short overview of relevant GDPR provisions, followed by the survey results.

This document should be cited as European Union Agency for Fundamental Rights (FRA) (2020), Your rights matter: Data protection and privacy, Fundamental Rights Survey.

About the survey

The Fundamental Rights Survey provides, for the first time, a comprehensive set of comparable data on people’s experiences and opinions concerning their fundamental rights. The survey focuses on everyday situations in areas including data protection, equal treatment, access to justice, consumer rights, crime victimisation, good administration and the importance of protecting rights.

This document only covers selected results related to data protection and technology. FRA will publish results on other areas in other reports and products.

The Fundamental Rights Survey interviewed just under 35,000 people aged 16 years and older in all EU Member States, North Macedonia and the United Kingdom. The survey design involves a combination of face-to-face and online data collection, as appropriate in each country, to reach a representative sample of the total population. Fieldwork took place from January 2019 to October 2019.

Data collection was carried out by Ipsos MORI on behalf of FRA, and in cooperation with Statistics Netherlands (CBS) in the Netherlands, the Centre des Technologies de l’Information de l’Etat (CTIE) in Luxembourg and Statistics Austria in Austria. Table 1 in the Annex provides an overview of the methodology used in each country.

https://fra.europa.eu/en/publication/2020/fundamental-rights-survey-data-protection

https://fra.europa.eu/en/publication/2020/fundamental-rights-survey-data-protection

32

Contents

SHARING DATA ONLINE .......................................................................................................................................3WHAT DOES THE GDPR SAY? .................................................................................................................................. 3WILLINGNESS TO SHARE DATA ONLINE AND ACTUAL PRACTICES ................................................................... 3DEGREE OF CONCERN ............................................................................................................................................... 5

PRACTICES AND EXPERIENCES WITH SHARING PERSONAL DATA ONLINE .........................................................6WHAT DOES THE GDPR SAY? .................................................................................................................................. 6AWARENESS OF PRIVACY AND LOCATION SETTINGS ON SMARTPHONES ...................................................... 6CONSENT TO DATA PROCESSING ............................................................................................................................ 9

AWARENESS OF THE GDPR, DATA PROTECTION LAWS AND AUTHORITIES ......................................................... 11WHAT DOES THE GDPR SAY? .................................................................................................................................. 11AWARENESS OF THE GDPR .................................................................................................................................... 12AWARENESS OF THE RIGHT TO ACCESS PERSONAL DATA ................................................................................. 12AWARENESS OF DATA PROTECTION AUTHORITIES ............................................................................................. 14

ANNEX ................................................................................................................................................................15

32

This section includes data on people’s willingness to share different types of personal data with public authorities and private companies. It also covers people’s concerns about possible misuse of their data.

WILLINGNESS TO SHARE DATA ONLINE AND ACTUAL PRACTICESThe Fundamental Rights Survey asked respondents about their willingness to share personal data with public administration and with private companies. The data covered in the survey include the respondent’s home address, citizenship, date of birth, sexual orientation, religion or belief, political views, fingerprints and facial images.

Question: “Which of the following types of personal information would you be willing to provide to use a service offered by a (1) private company or (2) public administration?” Multiple responses allowed: 1 Your home address, 2 Your citizenship, 3 Your date of birth, 4 Whether you’re straight, gay, lesbian or bisexual, 5 Your religion or belief, 6 Your political views, 7 A scan of your fingerprints for identity purposes, 8 Your facial image for identity purposes, 9 I would not be willing to provide any of the above.

Results: In the EU-27, more than one in five respondents (23 %) do not want to share any of these data with public administration, and 41 % do not want to share these data with private companies.

More than half of respondents would be willing to share basic personal data with public administration, including their home address (63 %), date of birth (62 %) and citizenship (58 %). This is considerably lower for private companies, where only slightly more than one third would be willing to share such data (date of birth 38 %, citizenship 37 % and home address 36 %). People are much less willing to share other data. People are least willing to share their political views (7 %) with public administration. Only about

SHARING DATA ONLINE

WHAT DOES THE GDPR SAY?

Lawfulness - Public administration and private companies must rely on legal grounds to collect personal data. The GDPR provides for six possible legal grounds for processing personal data. One of these legal grounds is consent. Individuals must indicate their willingness to share their personal data (Article 6 of the GDPR). Where special categories of data are processed – such as political views, religious beliefs, sexual orientation or biometric data for the purpose of uniquely identifying a natural person – additional conditions apply for the processing of such data (Article 9 of the GDPR).

54

one in 20 is willing to share their facial images (6 % - see Figure 1), political views (5 %) or fingerprint scan (4 %) with private companies.

The results vary strongly across countries. Figure 1 shows the percentages of people willing to share their facial images across the EU-27 countries, the United Kingdom and North Macedonia.

FIGURE 1: WILLINGNESS TO SHARE FACIAL IMAGES FOR IDENTITY WITH PUBLIC AUTHORITIES AND PRIVATE COMPANIES, BY COUNTRY

EU-27_2019

CY MT BE DK FR EL FI LU SK HU NL LV EE SI PT IE HR AT CZ ES BG SE LT IT DE PL RO UK MK

Public administrations Private companies

0

10

20

30

40

50

60

70

80

90

100

20

30

40

50

60

70

80

90

100

17

65

6 3

33

12 13 10 93 7 10 7 6 6 9 5 7 8 8 6 4 7 6 5 3 2 4 3 6 6 9

50

4136

33 33 30 3027

24 24 24 22 22 21 20 19 19 16 15 14 13 12 10 9 9 915 13

Notes: Question: Which of the following types of personal information would you be willing to provide to use a service offered by a (1) private company or (2) public administration? Your facial image; N = 26,045.

Source: FRA, Fundamental Rights Survey 2019 [Data collection in cooperation with CBS (NL), CTIE (LU) and Statistics Austria (AT)]

The percentage of people willing to share different types of personal data indicates how comfortable people generally are when sharing their data. Even though some people are not willing to share some of their personal data, they might still do so for various reasons.

54

DEGREE OF CONCERN

The Fundamental Rights Survey asked respondents, who use the internet, how concerned they are about third parties accessing personal information shared online.

Question: How concerned are you, if at all, that some of the information you share on the internet – including social media – might be accessed by any of the following without your knowledge or permission? (1) Your employers or any potential employers, (2) advertisers, (3) government, (4) law enforcement agencies, (5) criminals or fraudsters, (6) your country’s secret services / intelligence services, and (7) foreign governments. Respondents could indicate their degree of concern on a scale from 1 to 7, where 1 meant ‘Not at all concerned’ and 7 ‘Very concerned’.

Results: In the EU-27, most people who use the internet are concerned that criminals or fraudsters might access the personal information they share on the internet without their knowledge (55 %). 30 % are either not strongly concerned or not concerned at all. 14 % are not concerned about criminals accessing their data. People also tend to be concerned about access to information without knowledge or permission by advertisers and businesses (31 %), foreign governments (30 %) and their country’s intelligence services (26 %). Fewer people are concerned by law enforcement agencies (17 %) or employers (17 %) using their data (Figure 2).

FIGURE 2: DEGREE OF CONCERN ABOUT THIRD PARTIES ACCESSING PERSONAL INFORMATION SHARED ONLINE, EU-27

Your employer/Any potential

Law enforcement agencies

Government

Your countries secret services/ Intelligence services

Foreign goverments

Advertisers/ businesses

Criminals/ fraudsters

Not concerned Neither/nor Concerned Refused/don't know

46

45

39

37

35

26

14

36

36

41

36

33

42

30

17

17

20

26

30

31

55

0 10 20 30 40 50 60 70 80 90 100

Notes: Only respondents who use the internet; measured on a seven point scale: “Not concerned” includes respondents selecting the values 1 or 2, “Neither/nor” includes the values 3, 4 and 5 and “Concerned” the values 6 and 7; N = 19,612


76

The Fundamental Rights Survey asked respondents about their awareness of privacy online and how they manage it. The survey asked respondents who own a smartphone with internet access about their awareness of its privacy and location settings, if they read and understand the terms and conditions of online services, and whether they find it easy or hard to consent to terms and conditions when using online services.

AWARENESS OF PRIVACY AND LOCATION SETTINGS ON SMARTPHONESQuestions: [Only those respondents who have a smartphone that allows them to access the internet or social media]: Do you know how to check the privacy settings when using different apps on your smartphone? (1) Yes, on all apps, (2) Yes, on some apps, (3) No, (4) I don’t know what privacy settings are.

[Only those respondents who have a smartphone that allows them to access the internet or social media]: Do you know how to turn off the location settings on your smartphone? (1) Yes, (2) No, (3) I don’t know what location settings are.

PRACTICES AND EXPERIENCES WITH SHARING PERSONAL DATA ONLINE


Transparency – awareness of what is being done with personal data enables individuals to exercise their rights. Information about the intended processing should therefore be provided in a “concise, transparent, intelligible and easily accessible form” (Article 12 of the GDPR).

Right to be informed – not only the purposes and the legal basis for the processing should be communicated to individuals, but also a large range of information allowing them to fully understand the processing at stake and implement their rights. This includes being told about: the identity and contacts of the entity collecting their data; how long their data will be kept; the recipients or categories of recipients of the personal data; and whether the personal data will be transferred to a non-EU country or international organisation (Articles 13 and 14 of the GDPR).

Consent - Consent must be freely given, specific, informed and provide an unambiguous indication of an individual’s wishes signifying agreement to the processing of their personal data. Individuals have the right to change their mind and withdraw their consent, at any time. The GDPR clarifies that the request for consent shall be presented in “an intelligible and easily accessible form, using clear and plain language” (Article 7 of the GDPR).

Data protection by design and by default: technical and organisational measures should be implemented to ensure data protection by design and by default. Notably, by default settings should ensure that personal data are not made accessible without the individual’s intervention to an indefinite number of persons (Article 25 of the GDPR).

76

Results: The majority of people in the EU-27 (72 %) know about the privacy settings on their smartphones. However, less than half of the respondents (41 %) know the privacy settings on all their apps and 31 % only for some apps. Slightly more people know where to turn off the location settings (77 %).

There is a gender gap in the knowledge about the use of privacy and location settings. 21 % of men do not know how to check privacy settings, compared to 27 % of women. 23 % of women do not know how to turn off location settings, compared to 16 % of men.

FIGURE 3: AWARENESS OF PRIVACY AND LOCATION SETTINGS AMONG SMARTPHONE USERS, BY GENDER, EU-27 (%)

Yes, on all apps Yes, on some apps No Don't know0

10

20

30

40

50

60

Women Men Total

Privacy settings

3632

27

4

46

30

21

4

74

23

4

81

16

3

0

10

20

30

40

50

60

70

80

90

100

Yes No Don't know

Location settings

Women Men Total

Notes: Only respondents who have a smartphone; N = 17,918


98

FIGURE 4: AWARENESS OF PRIVACY AND LOCATION SETTINGS AMONG SMARTPHONE USERS BY COUNTRY (%)

Privacy settings

41 4230 30 32 32 32 32 32 33 34 36 36 37 37 41 41 41 42 42 43 44 45 47 48 53 54 54 59

46 46

31 31 49 46 47 42 44 38 3339 40 42 42

3442 35

2435 39

2331 28 29 29 28

25 2229 18

27 32

24 2319

16 16 21 16 2627

23 24 19 1923

19 2232

20 1432

22 23 22 16 22 18 1914

1921

20

0

10

20

30

40

50

60

70

80

90

100

Yes, on all apps Yes, on some apps No Don't know

CY DK FI SE LU CZ LT EE FR AT DE LV NL BE ES SI PT IT BG RO EL PL IE HU HR SK MT MK UK

Location settings

77 7866 70 71 72 73 74 75 76 76 77 77 78 79 81 81 82 82 83 83 83 84 85 85 86 86 86 87

7483

19 1927 25 26

1625 25 19 22 18 17 14

18 19 16 13 15 16 14 13 15 12 13 12 12 11 11 10

2015

0

10

20

30

40

50

60

70

80

90

100

Yes No Don't know

RO LV IT DK ES CY LT CZ MT PL SE BE EE IE PT HR SI FI LU FR SK DE NL AT HU EL BG MK UK

EU-2

8

EU-2

7_20

19

EU-2

8

EU-2

7_20

19

Notes: Only respondents who have a smartphone; N = 18,515


98

CONSENT TO DATA PROCESSINGQuestions: [Only those respondents who use the internet]: You may have been asked to approve or consent to your data being processed when using online services, websites or apps. Do you read these terms and conditions? (1) Yes, always, (2) Yes, sometimes, (3) No

[Only those respondents who at least sometimes read terms and conditions]: Would you say you understand the terms and conditions when you approve or consent to your data being used? (1) Yes, (2) No

[Only those respondents who use the internet]: Do you feel you can easily choose not to approve or consent to your data being used when using online services, websites or apps? (1) Yes, (2) No

Results: Overall, only one in five respondents in the EU says they always read the terms and conditions when using online services (22 %). 44 % read them sometimes and 33 % do not read the terms and conditions (1 % don’t know). The percentage of those not reading terms and conditions is especially high in Belgium and Cyprus (each 47 %) as well as in the United Kingdom (48 %). In contrast, in Estonia 22 % of people do not read the terms and conditions. Among those who read the terms and conditions, at least sometimes, 27 % do not understand them. Half of the respondents do not find it easy to consent to personal data usage through online services (49 %). Overall, there are no major gender differences for these questions for the EU-27.

FIGURE 5: READING TERMS AND CONDITIONS WHEN USING ONLINE SERVICES BY COUNTRY (%)

22 218 9 10 10 11 12 12 13 14 15 16 18 21 22 23 24 24 25 27 27 29 29 30 30 32

39 4027

10

44 44

49 51 47 44 42 4456

3949

60

3945

51

3542

49 4838

43 41 4249 46 46

34

34 35

34

41

33 3443 39 43 45 47 45

31

4737

24

4436

25

4131

27 2536

29 32 2822 25 24

3224 24

3748

0

10

20

30

40

50

60

70

80

90

100

Yes, always Yes, sometimes No Don't know

SE NL LU DK CY AT FI BE FR DE IE PT MT ES LT SI LV HR RO IT SK EE CZ PL HU EL BG MK UK

EU-2

8

EU-2

7_20

19

Notes: Only respondents who use the internet; N = 20,279


1110

FIGURE 6: UNDERSTANDING TERMS AND CONDITIONS WHEN USING ONLINE SERVICES, BY COUNTRY (%)

Public administrations Private companies

72 71

4754 57 58 59 61 62 64 66 66 69 69 70 73 76 76 77 78 79 79 79 81 81 82 82 86 87

73

55

27 28

52 44 42 40 40 39 38 35 34 32 30 30 30 26 23 23 20 21 21 19 19 18 17 16 16 14 12

23

44

Yes No Don't know

AT SE FI DK LU FR NL CY DE BE LV ES IE IT HU RO LT CZ SK EE HR SI PT MT BG EL PL MK UK

0

10

20

30

40

50

60

70

80

90

100

EU-2

8

EU-2

7_20

19

Notes: Only respondents who read terms and conditions sometimes or always; N = 13,206


FIGURE 7: FINDING IT EASY TO CONSENT TO PERSONAL DATA USAGE THROUGH ONLINE SERVICES BY COUNTRY (%)

49 48

7567 63 67 65 63 61 62 59 63 61 58 53 56

48 52 50 47 47 4538 39 38 36 34

27 23

5142

49 50

2427 30

30 31 32 32 34 3636 37 40

41 41

4145 47 49 52 53

61 61 61 62 63 72 77

46 57

0

10

20

30

40

50

60

70

80

90

100

Yes No Don't know

EE PT MT SK SI BG LV EL CY CZ PL RO HR HU LT IE IT ES FI SE BE DE NL LU DK AT FR MK UK

EU-2

8

EU-2

7_20

19

Notes: Only respondents who use the internet; N = 20,279


1110

AWARENESS OF THE GDPR, DATA PROTECTION LAWS AND AUTHORITIES


Awareness – each Member State must provide for one or more independent public authorities responsible for monitoring the GDPR’s application, and for promoting “public awareness and understanding of the risks, rules, safeguards and rights in relation to processing” (Article 57 of the GDPR).

Right of access – the rights of individuals depend on their capacity to know which data are being collected, who collects the data, how the data will be processed, and for how long. Public administration and private entities are required to communicate this information to any individuals requesting it (Article 15 of the GDPR).

1312

AWARENESS OF THE GDPR Question: Have you heard of the General Data Protection Regulation – GDPR? (1) Yes, (2) No

Results: Overall, 69 % of people in the EU-27 have heard about the General Data Protection Regulation (GDPR). Men are slightly more aware of the GDPR (71 %), compared to women (67 %).

FIGURE 8: AWARENESS OF THE GDPR BY COUNTRY (%)

69 70

38 3946 51 55 56 57 59 65 66 66 69 69 71 72 72 73 74 74 75 76 76 77

83 86 8695

29

79

31 30

62 5953 48 45 43 42 41 35 33 34 30 28 27 27 27 25 26 25 24 24 24 23 17 14 13

4

70

21

Yes No Don't know/prefer not to say

EE LT BE IT FR HU FI DK CY RO LU EL BG LV HR NL MT ES PT SK SE SI DE IE AT CZ PL MK UK0

10

20

30

40

50

60

70

80

90

100

EU-2

8

EU-2

7_20

19

Notes: N = 25,018


AWARENESS OF THE RIGHT TO ACCESS PERSONAL DATA

Question: Your personal data includes information about you such as your address or date of birth. Are you aware of any laws in [COUNTRY] that allow you to check what personal data has been collected about you by the following organisations? (a) Public administration – including local authorities, (b) A private company: (1) Yes, there is such a law, (2) No, there is no such law

Results: 60 % of respondents in the EU-27 are aware of a law that allows them to access their personal data held by public administrations. However, this decreases to 51 % for private companies. This means that only one in two people in the EU-27 are aware that they can access their data held by companies.

There is a gender gap in the awareness of data protection laws. Women are less aware compared to men. For both areas, public administration and private companies, women are less aware about their right to access their personal data. Figure 9 shows the awareness of the right to access personal data with respect to public administration and private companies.

1312

FIGURE 9: AWARENESS OF THE RIGHT TO ACCESS PERSONAL DATA AT PUBLIC ADMINISTRATION AND PRIVATE COMPANIES BY GENDER IN THE EU-27 (%)

Women Men Total

57

48

64

55

0

10

20

30

40

50

60

70

80

90

100

Public administration Private company

Notes: N = 24,354


FIGURE 10: AWARENESS OF THE RIGHT TO ACCESS PERSONAL DATA AT PUBLIC ADMINISTRATION AND PRIVATE COMPANIES BY COUNTRY (%)

60 62

3639

45 4649 49 51 52 53 54 54

60 62 64 64 64 65 65 6669 71 71 72

8287 87 87

41

79

51 53

3430

4236

38

46 46 4440 41 39

52 52 53

42

5549

52 51

64 65

57 56

6972

6873

29

71

0

10

20

30

40

50

60

70

80

90

100


CY RO PT HR HU EL ES SI BG LT LV BE IT IE EE MT CZ PL AT DE FR LU SK DK NL FI SE MK UK

60 62

3639

45 4649 49 51 52 53 54 54

60 62 64 64 64 65 65 6669 71 71 72

8287 87 87

41

79

51 53

3430

4236

38

46 46 4440 41 39

52 52 53

42

5549

52 51

64 65

57 56

6972

6873

29

71

0

10

20

30

40

50

60

70

80

90

100


EU-27_2019

EU-28

CY RO PT HR HU EL ES SI BG LT LV BE IT IE EE MT CZ PL AT DE FR LU SK DK NL FI SE MK UK

EU-2

8

EU-2

7_20

19

Notes: Respondents answering ‘Yes, there is such a law’; N = 25,018


1514

AWARENESS OF DATA PROTECTION AUTHORITIES

Question: Have you ever heard of any of the following? Please respond with the first thing that comes into your head. [NAME OF NATIONAL SUPERVISORY AUTHORITY FOR DATA PROTECTION – BASED ON ART. 51 OF REGULATION (EU) 2016/679]. In the survey, the name of the respective authority was used in each country (see Annex Table 2).

Results: 71 % of people in the EU-27 have heard about their national supervisory authority for data protection (DPA). Most respondents in Czechia have heard about their DPA (90 %). In Belgium, few people have heard about their DPA (44 %) and even fewer in the United Kingdom (35 %).

FIGURE 11: AWARENESS OF DATA PROTECTION AUTHORITIES BY COUNTRY (%)

BE HU RO DE CY MT PL IT PT EL FI LU LT NL LV SI BG FR SK ES IE DK HR EE SE AT CZ MK UK

7168

44

5258

64 66 67 67 68 68 69 71 71 74 77 77 79 80 80 81 82 84 85 85 86 87 87 90

61

35

0

10

20

30

40

50

60

70

80

90

100

EU-27_2019

EU-28

BE HU RO DE CY MT PL IT PT EL FI LU LT NL LV SI BG FR SK ES IE DK HR EE SE AT CZ MK UK

7168

44

5258

64 66 67 67 68 68 69 71 71 74 77 77 79 80 80 81 82 84 85 85 86 87 87 90

61

35

0

10

20

30

40

50

60

70

80

90

100

EU-2

8

EU-2

7_20

19

Notes: N = 25,018


1514

ANNEX

TABLE 1: METHODOLOGY BY COUNTRY

Country Sampling approach Mode of interview Fieldwork dates Number of interviews

Austria Random probability Online 09/04/19 – 09/05/19 1,233

Belgium Random probability Face to face 15/06/19 – 21/10/19 1,058

Bulgaria Random probability Face to face 15/02/19 – 23/04/19 1,016

Croatia Random probability Face to face 18/03/19 – 04/07/19 1,019

Cyprus Random probability Face to face 06/02/19 – 22/06/19 1,005

Czechia Random probability Face to face 22/03/19 – 06/06/19 1,074

Denmark Random probability Online 14/03/19 – 07/05/19 1,173

Estonia Random probability Online 25/03/19 – 21/05/19 1,067

Finland Random probability Online 14/05/19 – 03/09/19 1,048

France Quota Online 21/06/19 – 27/08/19 2,987

Germany Quota Online 21/06/19 – 27/08/19 2,972

Greece Random probability Face to face 30/03/19 – 12/06/19 1,001

Hungary Random probability Face to face 29/03/19 – 02/07/19 993

Ireland Random probability Face to face 14/03/19 – 01/08/19 1,006

Italy Random probability Face to face 22/03/19 – 21/10/19 1,051

Latvia Random probability Face to face 07/05/19 – 02/08/19 1,034

Lithuania Random probability Face to face 23/04/19 – 08/08/19 1,008

Luxembourg Random probability Online 13/05/19 – 30/09/19 966

Malta Random probability Face to face 18/01/19 – 28/07/19 1,004

Netherlands Random probability Online 16/01/19 – 23/03/19 1,626

North Macedonia Random probability Face to face 15/03/19 – 15/05/19 1,027

Poland Random probability Face to face 19/02/19 – 08/06/19 1,000

Portugal Random probability Face to face 25/02/19 – 27/05/19 1,001

Romania Random probability Face to face 11/02/19 – 21/06/19 999

Slovakia Random probability Face to face 04/02/19 – 29/08/19 1,081

Slovenia Random probability Face to face 03/05/19 – 28/06/19 1,007

Spain Random probability Face to face 06/03/19 – 07/07/19 1,002

Sweden Random probability Online 18/04/19 – 13/06/19 1,155

United Kingdom Random probability Online 26/03/19 – 23/05/19 1,384

III16

TABLE 2: LIST OF DATA PROTECTION AUTHORITIES RESPONDENTS WERE ASKED ABOUT:

Country NATIONAL DATA PROTECTION SUPERVISOR

Austria Datenschutzbehörde

Belgium Commission de la protection de la vie privée (CPVP) (FR) / Commissie voor de bescherming van de persoonlijke levenssfeer (CBPL) (NL)

Bulgaria Комисията за защита на личните данни

Croatia Hrvatska Agencija za zaštitu osobnih podataka

Cyprus Γραφείο Επιτρόπου Προστασίας Δεδομένων Προσωπικού Χαρακτήρα

Czechia Úřad pro ochranu osobních údajů

Denmark Datatilsynet

Estonia Andmekaitse Inspektsioon (ET) / Инспекция по защите данных (RU)

Finland Tietosuojavaltuutetun toimisto (FI)/ Dataombudsmannens byrå (SE)

France Commission Nationale de l’Informatique et des Libertés - CNIL

Germany Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit

Greece Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα

Hungary Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)

Ireland Data Protection Commissioner / An Coimisinéir Cosanta Sonraí

Italy Garante per la protezione dei dati personali

Latvia Datu valsts inspekcija (LV) / Государственная инспекция данных (RU)

Lithuania Valstybinė duomenų apsaugos inspekcija

Luxembourg Commission Nationale pour la Protection des Données (FR) / Nationale Kommission für den Daten-schutz (DE)

Malta Office of the Data Protection Commissioner

Netherlands Autoriteit Persoonsgegevens

North Macedonia Дирекција за заштита на личните податоци / Oficerët për mbrojtjen e të dhënave personale

Poland Generalny Inspektor Ochrony Danych Osobowych (GIODO)

Portugal Comissão Nacional de Protecção de Dados (CNPD)

Romania Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Slovakia Úrad na ochranu osobných údajov Slovenskej republiky

Slovenia Informacijski pooblaščenec

Spain Agencia de Protección de Datos (ES) / l’Agència Espanyola de Protecció de Dades (CA)

Sweden Datainspektionen

United Kingdom Information Commissioner’s Office

III16

Both FRA’s Fundamental Rights Report 2020 and its opinions, available as a separate publication in the 24 EU official languages, can be accessed on the FRA website at:

— https://fra.europa.eu/en/publication/2020/fundamental-rights-report-2020

— https://fra.europa.eu/en/publication/2020/fundamental-rights-report-2020-fra-opinions

FUNDAMENTAL RIGHTS REPORT― 2020

REP

ORT

BASELINE TO ADD

1Ten years on: unlocking the Charter’s full potential

4Equality and non-discrimination

7Racism, xenophobia and related intolerance

9Roma integration

11Asylum, visas, migration, borders and integration

13Information society, privacy and data protection

15Rights of the Child

17Access to justice

19Developments in the implementation of the Convention on the Rights of Persons with Disabilities

FUNDAMENTAL RIGHTS REPORT― 2020

FRA

OPI

NIO

NS

The year 2019 brought both progress and setbacks in terms of fundamental rights protection. FRA’s Fundamental Rights Report 2020 reviews major developments in the field, identifying both achievements and remaining areas of concern. This publication presents FRA’s opinions on the main developments in the thematic areas covered, and a synopsis of the evidence supporting these opinions. In so doing, it provides a compact but informative overview of the main fundamental rights challenges confronting the EU and its Member States.

[FOCUS]

Getting in touch with the EU

In personAll over the European Union there are hundreds of Europe Direct information centres. You can find the address of the centre nearest you at: https://europa.eu/european-union/contact_en

On the phone or by emailEurope Direct is a service that answers your questions about the European Union. You can contact this service: — by freephone: 00 800 6 7 8 9 10 11

(certain operators may charge for these calls),— at the following standard number: +32 22999696 or— by email via: https://europa.eu/european-union/contact_en

Finding information about the EU

OnlineInformation about the European Union in all the official languages of the EU is available on the Europa website at: https:// europa.eu/european-union/index_en

EU publicationsYou can download or order free and priced EU publications at: https://op.europa.eu/en/publications Multiple copies of free publications may be obtained by contacting Europe Direct or your local information centre (see https:// europa.eu/european-union/contact_en).

EU law and related documentsFor access to legal information from the EU, including all EU law since 1952 in all the official language versions, go to EUR- Lex at: http://eur-lex.europa.eu

Open data from the EUThe EU Open Data Portal (http://data.europa.eu/euodp/en) provides access to datasets from the EU. Data can be downloaded and reused for free, for both commercial and non-commercial purposes.




https://fra.europa.eu/en/publication/2020/fundamental-rights-report-2020-fra-opinions



https://op.europa.eu/en/publications

PROMOTING AND PROTECTING YOUR FUNDAMENTAL RIGHTS ACROSS THE EU ―

FRA – EUROPEAN UNION AGENCY FOR FUNDAMENTAL RIGHTSSchwarzenbergplatz 11 – 1040 Vienna – AustriaT +43 158030-0 – F +43 158030-699

fra.europa.eu

facebook.com/fundamentalrightstwitter.com/EURightsAgencylinkedin.com/company/eu-fundamental-rights-agency

Hate crime Hate speech Equality Non-discrimination

This paper shows people’s views on sharing personal data online as well as their concerns about possible misuse of their data. It also shows people’s awareness of EU data protection rules – the General Data Protection Regulation (GDPR).

FRA’s Fundamental Rights Survey asked people about their awareness of privacy online and how they manage it. It also asked if people read the terms and conditions of online services, and whether they find it easy or hard to consent to these when using online services.

Documents

Your rights matter: data protection and privacy · 2020. 6. 17. · copyright, permission must be sought directly from the copyright holders. Neither the European Union Agency for