06
Sun, Oct
98 New Articles

Instead of Reviewing the GDPR, Commission Proposes to Amend its Enforcement Rules

Hungary
Tools
Typography
  • Smaller Small Medium Big Bigger
  • Default Helvetica Segoe Georgia Times

The European Commission had previously indicated that it will review the provisions of the General Data Protection Regulation (GDPR) this year to see if any changes are needed in light of the experience of the past six years.

However, the Commission later stated that the review would not happen until 2028, although the GDPR obliges the Commission to submit its report on the review to the Parliament and to the Council every four years. The Commission claims that 10 years are needed to gain sufficient experience and it will also be necessary to see how the EU's artificial intelligence (AI) legislation develops and what problems it will raise. These can be reviewed at a later stage so that all stakeholders can be involved.

It was expected that the Commission’s review would modify the GDPR in such a way that focuses a little more on practical problems, for example, the relaxation of extensive documentation requirements for small businesses. Others say that the dynamic development of AI demands a shift in the spirit of the GDPR. Its rather strict rules have already forced the EU legislator to grant exemptions from certain GDPR requirements for AI applications, this is how the so-called ‘regulatory sandbox’ rules were introduced into the EU Artificial Intelligence Regulation. However, according to stakeholders, these exemptions are still not enough to ensure the competitiveness of the European AI development.

In the Commission’s view it was already known that if the GDPR is indeed amended, the amendment will not be comprehensive, since it is extremely time-consuming to negotiate with Member States and stakeholders and it would be doubtful to find a compromise. In April 2023, the European Parliament voted that it was essential to amend the GDPR implementing rules. In this context, several other actors had called for changes to certain provisions. For example, there is a lack of consistency in the practice of supervisory authorities about the legal bases for data processing, especially for clinical or scientific trials. In the Member States, the authorities’ practices on compliance requirements differ significantly. The EU Commission has therefore asked the European Data Protection Board to guide in these areas, but this has not yet been done. In addition, data protection authorities are so overwhelmed by complaints that they do not have the resources to deal with other issues (e.g. awareness campaigns, guidelines) and supervisory bodies are understaffed in many cases. The enforceability of children's rights also raises practical problems, which also would require certain amendments to the GDPR enforcement rules.

By Rita Parkanyi, Partner, KCG Partner

Hungary Knowledge Partner

Nagy és Trócsányi was founded in 1991, turned into limited professional partnership (in Hungarian: ügyvédi iroda) in 1992, with the aim of offering sophisticated legal services. The firm continues to seek excellence in a comprehensive and modern practice, which spans international commercial and business law. 

The firm’s lawyers provide clients with advice and representation in an active, thoughtful and ethical manner, with a real understanding of clients‘ business needs and the markets in which they operate.

The firm is one of the largest home-grown independent law firms in Hungary. Currently Nagy és Trócsányi has 26 lawyers out of which there are 8 active partners. All partners are equity partners.

Nagy és Trócsányi is a legal entity and registered with the Budapest Bar Association. All lawyers of the Budapest office are either members of, or registered as clerks with, the Budapest Bar Association. Several of the firm’s lawyers are admitted attorneys or registered as legal consultants in New York.

The firm advises a broad range of clients, including numerous multinational corporations. 

Our activity focuses on the following practice areas: M&A, company law, litigation and dispute resolution, real estate law, banking and finance, project financing, insolvency and restructuring, venture capital investment, taxation, competition, utilities, energy, media and telecommunication.

Nagy és Trócsányi is the exclusive member firm in Hungary for Lex Mundi – the world’s leading network of independent law firms with in-depth experience in 100+countries worldwide.

The firm advises a broad range of clients, including numerous multinational corporations. Among our key clients are: OTP Bank, Sberbank, Erste Bank, Scania, KS ORKA, Mannvit, DAF Trucks, Booking.com, Museum of Fine Arts of Budapest, Hungarian Post Pte Ltd, Hiventures, Strabag, CPI Hungary, Givaudan, Marks & Spencer, CBA.

Firm's website.

Our Latest Issue