SoylentNews

Arthur T Knackerbracket suggests a story from The Register:

The second round of negotiations on the new EU General Data Protection Regulation (GDPR) saw real movement on Tuesday, according to negotiators.

Sources familiar with the discussions told El Reg that a tentative political agreement has been reached already on Chapter 5 and Article 3. These two elements focus specifically on territorial scope and international data transfers.

According to the text, any company processing data of a European citizen in the European Union is subject to EU law and any transfer of data outside the EU must meet certain adequacy standards. This is more or less what is already enshrined in the current 1995 data protection laws, so it is a logical place to start the so-called trialogue talks. Broad political agreement means that "all we really need to do now is nail down the exact wording," said a source.

Getting consensus between the European Parliament, the Commission and the Council of national justice ministers often proves difficult. But against the external backdrop of the Snowden revelations, reform of the EU-US safe harbour agreement and challenges to jurisdiction by Microsoft and Facebook, there has been a notable push to get the GDPR onto the law books as soon as possible. Negotiators have set themselves an ambitious deadline - the Justice and Home Affairs Council meeting in October.

A Data Protection Directive, which covers law enforcement agencies (as opposed to the regulation which applies to companies), is also on the table and Parliamentary representatives have said they want the two laws to be treated as a package.