Mandatory Data Retention and Privacy

Autori u radu analiziraju pravno uređenje sustava obveznog preventivnog zadržavanja podataka koji se generiraju, odnosno obrađuju u vezi s pružanjem javno dostupnih elektroničkih komunikacijskih usluga ili javnih komunikacijskih mreža u pravu EU-a i RH. Brojna otvorena pitanja u vezi s uvođenjem i provedbom tog sustava ispituju se s obzirom na osjetljivost i poseban tretman koji podaci u elektroničkim komunikacijama imaju u pravu EU-a općenito, a osobito s obzirom na veliku mogućnost zadiranja u temeljna prava i slobode korisnika usluga – građana, posebno kada je riječ o poštovanju privatnog života i tajnosti dopisivanja, tj. komunikacije, te pravu na zaštitu osobnih podataka. U radu se analiziraju i najnoviji događaji u vezi s provedbom Direktive o zadržavanju podataka u EU-u, njezinom ocjenom te postupcima pokrenutim pred Sudom pravde Europske unije. Autori također ispituju i analiziraju rješenja koja su, radi usklađivanja našeg zakonodavstva s acquisom, tj. Direktivom o zadržavanju podataka, predviđena u domaćem pravnom okviru, kao i ona koja su otprije na snazi (neovisno o Direktivi) te iznose prijedloge rješenja de lege ferenda gdje to nalaze potrebnim. Prilikom uređenja ovlaštenja za pristup relevantnim podacima, među ostalim, upozorava se i na nužnost dosljedne provedbe kriterija za iznimno ograničavanje zajamčenih prava građana u opravdanim, jasno utvrđenim slučajevima te na nužnost osiguravanja što preciznijih i jasnijih zakonodavnih rješenja radi sprečavanja mogućih zloporaba.The authors analyze the regulation of the system of mandatory (preventive) retention of data in electronic communications in European Union law and the law of the Republic of Croatia. Many questions and issues of contention concerning blanket data retention regulation at EU level, especially after the adoption of the Data Retention Directive and its implementation in EU Member States, are examined in terms of sensitivity and special regulation of processing user data in electronic communications, and the severe impact of retention on guaranteed rights and freedoms of all users. The paper focuses on the impact of data retention on the right to respect for private life and communications and the right to personal data protection. The authors also analyze recent developments in the implementation of the Data Retention Directive in the EU and its evaluation by the European Commission. Procedures initiated following the implementation of this Directive in certain EU States, aimed at challenging the constitutionality and legality of relevant domestic law, point to the sensitive nature of the introduction of mandatory data retention systems on account of its interference with guaranteed rights of citizens. Furthermore, the authors also point out cases which were, until today, referred to the Court of Justice of the European Union by national courts of certain EU Member States in order to evaluate compatibility of the Directive with human rights and fundamental freedoms. The authors research and analyze solutions implemented in the domestic legal system on the subject of mandatory retention of data in electronic communications. Among other things, they call attention to the need for assessing these issues in line with the necessity and proportionality requirements, observing both European Union and international law, notably the European Convention for the Protection of Human Rights and Fundamental Freedoms and the case law of the European Court of Human Rights. Moreover, the authors emphasise the need for consistent implementation of relevant criteria in cases where guaranteed rights of citizens are interfered with, and for precise and clear legislative solutions especially with a view to preventing abuse. Finally, the authors provide a comparative overview of this measure with expedited preservation of stored data (data preservation, quick freeze), prescribed by the Council of Europe Convention on Cybercrime. They also provide an assessment of this measure as a potential alternative to mandatory data retention, including models developed in certain states on the basis of data preservation (quick freeze plus), taking into account recent relevant developments in the EU