International Data Privacy Day and Personal Data Protection
Data Privacy Day is an international observance held every year on 28 January. It commemorates the signing of the Council of Europe Convention on the Protection of Individuals with regard to Automatic Processing of Personal Data in 1981.
This Convention was the first legally binding international agreement to define personal data and establish principles for its protection, including lawfulness, fairness, and security in data processing. It laid the foundation for modern data protection regulations worldwide.
The day is marked by various activities aimed at raising public awareness about the importance of protecting personal information and respecting privacy rights. In Australia, data privacy is governed by the Privacy Act 1988, with the Office of the Australian Information Commissioner overseeing compliance.
Date and Establishment of the Commemorative Day
International Data Privacy Day is observed annually on 28 January, a tradition that has been in place since 2007. The decision to designate this specific day was made on 26 April 2006 by the Committee of Ministers of the Council of Europe. The choice of 28 January as the date for this observance is significant, as it marks the anniversary of the signing of the Council of Europe’s Convention on 28 January 1981. This alignment underscores the importance of the Convention in the context of personal data protection and highlights the historical foundation upon which the commemorative day is established.
Features of the Celebration in Australia
In Australia, the protection of personal data is governed by the Privacy Act 1988, which establishes the legal framework for handling personal information. The Australian Office of the Australian Information Commissioner (OAIC) serves as the primary authority responsible for overseeing data privacy and ensuring compliance with relevant regulations. Each year, Australia observes Data Privacy Week during the last week of January, aligning this event with the International Data Privacy Day to raise awareness about personal data protection. Additionally, Australia ratified the Council of Europe Convention No. 108 in 2018, further reinforcing its commitment to international standards in data privacy.
History and Significance of the Council of Europe Convention
The Council of Europe Convention, formally titled “Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data,” represents a landmark in the international legal framework for data protection. It was the first binding international instrument dedicated to safeguarding personal data, establishing foundational mechanisms to protect human rights related to privacy. The Convention notably provided a clear definition of “personal data,” setting a standard for subsequent regulatory efforts in this domain. Recognising the evolving nature of technology and privacy risks, the international community agreed that the Convention should remain a simple, concise, and technologically neutral tool. To address emerging threats and changing needs, working groups continuously develop and propose amendments to the Convention. This adaptability has ensured that the Convention remains a cornerstone for the ongoing development of personal data protection regulations worldwide.
The Concept and Principles of Personal Data Processing
Personal data refers to any information relating to an identified or identifiable individual. This includes details such as surname, first name, patronymic, date and place of birth, residential address, family and social status, income data, education, health condition, and profession. The processing of personal data is governed by fundamental principles established in relevant conventions, which emphasise the good faith and legality of data collection and handling. These principles require that personal data be stored only for specific and lawful purposes and prohibit the use of such data in ways incompatible with those purposes. Furthermore, the protection of personal data must be ensured through appropriate security measures. These measures are designed to prevent accidental or unauthorised destruction, accidental loss, unauthorised access, modification, and dissemination of the data, thereby safeguarding the privacy and integrity of personal information throughout its processing.
Modern Challenges and Directions for Legislative Development
Before the advent of the Internet and electronic databases, information was stored on paper media in archives. However, the digital age has introduced new types of crimes, including the theft of passwords and personal user data, as well as the sale of computer databases. Personal data is continuously processed across various spheres such as employment, interactions with government authorities, healthcare, purchasing goods or services, travel, and Internet usage. In response to these challenges, the European Union has focused its legislative development on several key directions. These include facilitating easier access for individuals to their own personal data, increasing the accountability of data owners and controllers, reducing risks associated with the dissemination of personal data over the Internet, and granting greater administrative powers to data protection authorities. Together, these measures aim to strengthen the protection of personal data in an increasingly digital and interconnected world.
Events and International Features of the Celebration
International Data Privacy Day is marked by a variety of events aimed at raising awareness about data protection rights and privacy. These activities are designed to educate the public and promote understanding of the importance of safeguarding personal information. Common forms of observance include informational campaigns, educational projects, open house events, and conferences. Such initiatives provide opportunities for individuals and organisations to engage with the principles of data privacy and learn about their rights. Notably, in some countries, this day is also referred to as Privacy Day, reflecting the focus on confidentiality and the protection of personal data across different cultural contexts.
