MOTION FOR RESOLUTION No. 3/X

Pursuant to paragraph 1 (d) of Article 197 of the Constitution, the Government presents to the

Assembly of the Republic the following proposal for a Resolution:

Approve, for ratification, the Additional Protocol to the Convention for the Protection of Persons

relatively to the Automated Treatment of Personal Character Data, concerning the

Control Authorities and the Transboundary Data Streams, open to signature in

Strasbourg, on November 8, 2001, the text of which, in certified copies in the versions in

English and French language and their respective translation in Portuguese language, it publishes in attachment.

Seen and approved in Council of Ministers of May 19, 2005

The Prime Minister

The Minister of the Presidency

The Minister of Parliamentary Affairs

Additional Protocol to the Convention for the Protection of Persons in respect of

Automated treatment of Personal Character Data, concerning the

Authorities of Control and the Transboundary Data Streams

The Parties to the present Additional Protocol to the Convention for the Protection of Persons

Regarding the Automated Treatment of Personal Character Data, open to

signature in Strasbourg on January 28, 1981 (hereinafter referred to as the Convention);

Convinced that the control authorities, by exercising their duties with full

independence, they are an element of effective protection of the people with regard to the

processing of personal data;

Considering the importance of the circulation of information among peoples;

Considering that, with the intensification of cross-border exchange of personal data, it is

necessary to ensure the effective protection of the rights of man and freedoms

fundamental and, notably, of the right to respect for private life in relation to that

exchange,

They agree on the following:

Article 1º-Control Authorities

1. Each Party shall designate one or more authorities responsible for ensuring the

compliance with the measures that they apply, in their domestic law, the principles set out in the

chapters II and III of the Convention and in this Protocol.

2.

a) For the purpose these authorities should be endowed, in particular, of the powers of

research and intervention, as well as the power to intry lawsuits, or to take

to the knowledge of the competent judicial authorities the violations of the provisions of the

internal law that apply the principles referred to in Article 1º (1) of this Protocol.

b) Each supervisory authority should examine the application submitted by any person

for the protection of your fundamental rights and freedoms with regard to the processing

of personal data in the framework of their competence.

3. The control authorities shall carry out their duties with complete independence.

4. The decisions of the disputable control authorities, may be the subject of

judicial appeal.

5. In accordance with the provisions of Chapter IV, and without prejudice to the provisions of the article

13º of the Convention, the supervisory authorities should cooperate with each other in the measure of the

necessary for the performance of their particular functions through the exchange of any

useful information.

Article 2º-Transboundary flow of personal character data to a recipient who does not

is subject to the jurisdiction of a Party to the Convention

1. Parties shall provide for the transfer of personal data to a recipient who

be subject to the jurisdiction of a State or an organization that is not Party to the

Convention shall only be carried out if such a State or that organization shall ensure a level

of adequate protection for the intended transfer.

2. By way of derogation from the provisions of Article 2º (1) of this Protocol, a Party may

authorize the transfer of personal data:

a. if the domestic law previr by virtue of:

-specific interests of the person concerned, or

-legitimate interests prevalent, in particular important public interests, or

b. if the person responsible for the transfer presents guarantees, particularly those that

may result from contractual clauses, and are judged sufficient by the authorities

competent, in accordance with domestic law.

Article 3º-Final provisions

1. Articles 1º and 2º of this Protocol shall be considered by the Parties as

additional articles to the Convention, whose provisions should be applied accordingly.

2. This Protocol is open to the signing of the signatory States to the Convention. After

have acceded to the Convention, under the conditions laid down by this, the European Communities

may sign the present Protocol. This Protocol shall be subject to ratification, acceptance or

approval. A Signatory of this Protocol may not ratify it, accept it or approve it

without previously or simultaneously ratifying, accepting or approving the Convention or without it

have adhered. The instruments of ratification, acceptance or approval of this Protocol

shall be deposited with the Secretary General of the Council of Europe.

3. a. This Protocol shall enter into force on the 1º day of the month following the expiry of a period

of three months after the date on which five of the States Parties to the Protocol have

manifested its consent to stay bound by this Protocol in

compliance with the provisions of paragraph 2 of its Article 3º.

b. For any Signatory of this Protocol who will subsequently manifest his

consent to stay bound by the same, this will enter into force on the 1º day of the month

following the expiry of a period of three months after the date of the deposit of your instrument of

ratification, acceptance or approval.

4. a. After the date of the entry into force of this Protocol, any State which has

acceded to the Convention may also accede to this Protocol.

b. Accession will be made by the deposit, together with the Secretary General of the Council of Europe, of a

instrument of accession which will produce effects on the 1º day of the month following the term of a

period of three months after the date of your deposit.

5. a. Any Party may, at any time, denounce this Protocol by

notification addressed to the Secretary General of the Council of Europe.

b. Denounces will produce effects on the 1º day of the month following the expiry of a period of three

months after the date of receipt of the notification by the Secretary-General.

6. The Secretary General of the Council of Europe shall notify the member States of the Council

of Europe, the European Communities and any State which has acceded to the present

Protocol:

a. of any signature;

b. of the deposit of any instrument of ratification, acceptance or approval;

c. of any date of entry into force of this Protocol in accordance with Article 3º;

d. of any other act, notification or communication relating to this Protocol.

Done at Strasbourg, November 8, 2001, in French and in English, the two texts

doing equally faith, in a single copy which shall be deposited in the archives of the Council of the

Europe. The Secretary General of the Council of Europe shall transmit a certified copy to each

one of the member states of the Council of Europe, to the European Communities and to any

State invited to join the Convention.

European Treaty Series-No. 181

ADDITIONAL PROTOCOL TO THE CONVENTION FOR THE PROTECTION OF INDIVIDUALS WITH REGARD TO AUTOMATIC PROCESSING OF PERSONAL DATA, REGARDING SUPERVISORY AUTHORITIES AND TRANSBORDER DATA FLOWS Strasbourg, 8.XI.2001

Preamble The Parties to this additional Protocol to the Convention for the Protection

of Individuals with regard to Automatic Processing of Personal Data, opened for signature in Strasbourg on 28 January 1981 (hereafter referred to as the "the Convention");

Convinced that supervisory authorities, recommend their functions in

complete independence, are an element of the effective protection of individuals with regard to the processing of personal data;

Considering the importance of the flow of information between peoples; Considering that, with the increase in exchanges of personal data across

national borders, it is necessary to ensure the effective protection of human rights and fundamental protests, and in particular the right to privacy, in relation to such exchanges of personal data,

Have agreed as follows: Article 1-Supervisory authorities 1 Each Party shall provide for one or more authorities to be responsible for

inadequate compliance with the measures in its domestic law giving effect to the principles that are observed in Chapters II and III of the Convention and in this Protocol.

2 a To this end, the said authorities shall have, in particular, powers of investigation and intervention, as well as the power to engage in legal proceedings or bring to the attention of the competent judicial authorities violations of the domestic law giving effect to the principles mentioned in paragraph 1 of Article 1 of this Protocol.

b Each Supervisory Authority Shall Hear Claims by any person concerning the protection of his / her rights and fundamental discussions with regard to the processing of personal data within its competence.

3 The supervisory authorities shall exercise their functions in complete

independence. 4 Decisions of the supervisory authorities, which give rise to complaints,

may be appealed against through the courts.

5 In accordance with the provisions of Chapter IV, and without prejudice to the provisions of Article 13 of the Convention, the supervisory authorities shall co-operate with one another to the extent necessary for the performance of their duties, in particular by also useful all useful information.

Article 2-Transborder flows of personal data to a recipient

is not subject to the jurisdiction of a Party to the Convention 1 Each Party shall provide for the transfer of personal data to a recipient

that is subject to the jurisdiction of a State or organisation that is not Party to the Convention only if that State or organisation has adequate an adequate level of protection for the intended data transfer.

2 By way of a 1 of Article 2 of Article 2 of this Protocol, each

Party may allow for the transfer of personal data: a if domestic law provides for it because of:-specific interests of the data subject, or-legitimate interests of interests, especially important public

interests, or

b if they do, which can in particular result from contractual clauses, are provided by the controller responsible for the transfer and are found adequate by the competent authorities according to domestic law.

Article 3-Final provisions 1 The provisions of Articles 1 and 2 of this Protocol shall be wed by the

Parties the additional articles to the Convention and all the provisions of the Convention shall apply.

2 This Protocol shall be open for signature by States Signatories to the

Convention. After acceding to the Convention under the conditions provided by it, the European Communities may sign this Protocol. This Protocol is subject to ratification, acceptance or approval. A Signatory to this Protocol may not ratify, accept or approve it unless it has previously been served or simultaneously agreed, accepted or approved the Convention or has acceded to it. Instruments of ratification, acceptance or approval of this Protocol shall be incorporated with the Secretary General of the Council of Europe.

3 a This Protocol shall enter into force on the first day of the month following the expiry of a period of three months after the date on which five of its Signatories have expressed their consent to be bound by the Protocol in accordance with the provisions of paragraph 2 of Article 3.

b In respect of any Signatory to this Protocol which expresses its consent to be bound by it, the Protocol shall enter into force on the first day of the month following the expiry of a period of three months after the date of deposit of the year. instrument of ratification, acceptance or approval.

4 a After the entry into force of this Protocol, any State which has acceded to the Convention may also accede to the Protocol.

b Accession shall be observed by the deposit with the Secretary General of the Council of Europe of an instrument of an instrument of an instrument of an instrument of an instrument of an instrument of study, which shall take effect on the first day of the month following the expiry of a period of three months after the date of its deposit.

5 a Any Party may at any time denounce this Protocol by means of a notification ement to the Secretary General of the Council of Europe.

b Such denouncing shall become effective on the first day of the month following the expiry of a period of three months after the date of receipt of such notification by the Secretary General.

6 The Secretary General of the Council of Europe shall notify the member

States of the Council of Europe, the European Communities and any other State which has acceded to this Protocol of:

the any signature; (b) the deposit of any instrument of ratification, acceptance or approval;

c any date of entry into force of this Protocol in accordance with Article 3;

d any other act, notification or communication relating to this Protocol.

In witness whereof the undersigned, being authorised authorised, have signed this Protocol. Done at Strasbourg, this 8th day of November 2001, in English and in French, both texts being equally authentic, in a single copy which shall be released in the archives of the Council of Europe. The Secretary General of the Council of Europe shall transmit certified copies to each member State of the Council of Europe, the European Communities and any State invited to accede to the Convention.

Series des Traités européens-n From 181

PROTOCOLE ADDITIONNEL À LA CONVENTION POUR LA PROTECTION DES PERSONNES À L' ÉGARD DU TRAÉ AUTOMATISÉ DES DONNÉES À CARACTÈRE PERSONNEL, CONCERNANT LES AUTORITÉS DE CONTRÔLE ET LES FLUX TRANSFRONTIÈRES DE DONNÉES Strasbourg, 8.XI.2001

6

Préambule Les Parties au présent Protocole additionnel à la Convention pour

la protection des personnes à l' égard du traé automatisé des données à caractère personnel, ouverte à la signature à Strasbourg, le 28 janvier 1981, (ci-après dénommé " la Convention "),

Convaincues that des autorités de contrôle exerçant leurs fonctions

en toute indépendance sont un élément de la protection effective des personnes à l' égard du tratracing des données à caractère personnel;

Considérant l' importance de la circulation de l' information between les

peuples; Considérant that, avec l' intensification des échanges de données à

caractère personnel à travers les frontières, il est nécessaire d' assurer la protection effective des droits de l' homme et des libertés fondamentales, et, notamment du droit au respect de la vie privée, en relation avec de tels échanges,

Sont convenues of ce qui suit: Article 1-Autorités de contrôle 1 Chaque Partie prévoit qu' une or plusieurs autorités sont chargées

de veiller au respect des mesures donnant effet, dans son droit interne, aux principes énoncés dans les chapitres II et III de la Convention et dans le présent Protocole.

2 a The cet effet, ces autorités disposent notamment de pouvoirs

d' investigation et d' intervention, ainsi que de celui d' ester en justice or de porter à la connaissance de l' autorité judiciaire compétente des violations aux dispositions du droit interne donnant effet aux principes visés au paragraphe 1 de l' article 1 du présent Protocole.

b Chaque autorité de contrôle peut être saisie par toute

personne d' une demande relative à la protection de ses droits et libertés fondamentales à l' égard des traitements de données à caractère personnel relevant de sa compébelongs.

3 Les autorités de contrôle exercent leurs fonctions en toute

indépendance.

7

4 Les décisions des autorités de contrôle faisant grief peuvent faire l' objet d' un recours juridictionnel.

5 Conformément aux dispositions du chapitre IV et sans préjudice des dispositions de l' article 13 de la Convention, les autorités de contrôle coopèrent among elles dans la mesure nécessaire à l' accomplissement de leurs missions, notamment en échangeant toute information utile.

Article 2-Flux transfrontières de données à caractère personnel vers un destinataire n' étant pas soumis à la juridiction d' une Partie à la Convention

1 Chaque Partie prévoit que le transfert de données à caractère

personnel vers un destinataire soumis à la juridiction d' un Etat ou d' une organisation qui n' est pas Partie à la Convention ne peut être effectué que si cet Etat ou cette organisation un niveau de protection adéquat pour le transfert considéré.

2 Par dérogation au paragraphe 1 de l' article 2 du présent Protocole,

chaque partie peut autoriser un transfert de données à caractère personnel:

si le droit interne le prévoit:-pour des intérêts spécifiques de la personne concernée,

or-lorsque des intérêts légitimes prévalent, en particulier

des intérêts publics importants, or b si des warranes pouvant notamment résulter de clauses

contractuelles sont fournies par la personne responsible du transfert, et sont jugées suffisantes par les autorités compétentes, conformément au droit interne.

Article 3-Dispositions finales 1 Les Parties considèrent les dispositions des articles 1 et 2 du présent

Protocole comme des articles additionnels à la Convention, et toutes les dispositions de la Convention s' appliquent en conséquence.

8

2 Le présent Protocole est ouvert à la signature des Etats signataires de la Convention. Après avoir adhéré à la Convention dans les conditions établies par celle-ci, les Communautés européennes peuvent signer le présent Protocole. Ce Protocole sera soumis à ratification, acceptation or approbation. Un Signataire du présent ne Protocole ne peut le ratifier, l' accepter ou l' approuver, sans avoir antérieurement or simultanément ratifié, accepté or approuvé la Convention or sans y avoir adhéré. Les instruments de ratification, d' acceptation or d' approbation du présent Protocole seront déposés près le Secrétaire Général du Conseil de l' Europe.

3 a Le présent Protocole entré en vigueur le premier jour du

mois qui suit l' expiration d' une période de trois mois après la date à laquelle cinq de ses Signataires auront express leur consentement à être liés par le présent Protocole conformément aux dispositions de son article 3 item No. 2.

b Pour tout Signataire du présent Protocole qui exprime

ultérieurement son consentement à être lié par celui-ci, le présent Protocole entré en vigueur le premier jour du mois qui suit l' expiration d' une période de trois mois après la date du dépôt de son instrument de ratification, d' acceptation or d' approbation.

4 a Après l' entrée en vigueur du présent Protocole, tout Etat qui a

adhéré à la Convention pourra adhérer également au présent Protocole.

b L' adhésion s' effectuera par le dépôt, près le Secrétaire Général

du Conseil de l' Europe, d' un instrument d' adhésion qui arresra effet le premier jour du mois qui suit l' expiration d' une période de trois mois après la date de son dépôt.

5 a Toute Partie peut, à tout moment, dénoncer le présent

Protocole en adressant une notification au Secrétaire Général du Conseil de l' Europe.

b La dénonciation arresra effet le premier jour du mois qui suit

l' expiration d' une période de trois mois après la date de réception de la notification par le Secrétaire Général.

6 Le Secrétaire Général du Conseil de l' Europe notifiera aux Etats

membres du Conseil de l' Europe, aux Communautés européennes et à tout Etat ayant adhéré au présent Protocole:

the signature toute;

9

b le dépôt de tout instrument de ratification, d' acceptation or

d' approbation; c toute date d' entrée en vigueur du présent Protocole

conformément à son article 3; d tout autre acte, notification or communication ayant trait au

présent Protocole.

En was de quoi, les soussignés, dûment authorisés à cet effet, ont signé le présent Protocole. Fait à Strasbourg, le 8 novembre 2001, en français et en anglais, les deux textes faisant également has been, en un seul exemplaire qui sera déposé dans les archives du Conseil de l' Europe. Le Secrétaire Général du Conseil de l' Europe en communiquera copie certifiée as per the chacun des Etats membres du Conseil de l' Europe, aux Communautés européennes et à tout Etat invité à adhérer à la Convention.