Activities of Sergio Gaetano COFFERATI related to 2012/0146(COD)
Shadow opinions (1)
OPINION on the proposal for a regulation of the European Parliament and of the Council on electronic identification and trust services for electronic transactions in the internal market
Amendments (10)
Amendment 46 #
Proposal for a regulation
Recital 23 a (new)
Recital 23 a (new)
(23a) Under Article 9 of the Treaty on the Functioning of the European Union, the Union must, in defining and implementing its policies and activities, take into account requirements linked to the promotion of a high level of employment, the guarantee of adequate social protection, the fight against social exclusion, and a high level of education, training and protection of human health. The concepts of accessibility and design for all should be mainstreamed when legislative measures on electronic identification are being pursued at Union level.
Amendment 65 #
Proposal for a regulation
Article 3 – paragraph 1 – point 31 a (new)
Article 3 – paragraph 1 – point 31 a (new)
(31a) ‘breach of security’ means a security incident leading to the accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of, or access to, personal data transmitted, stored, or otherwise processed.
Amendment 66 #
Proposal for a regulation
Article 4 a (new)
Article 4 a (new)
Article 4 a Data processing and protection 1. Trust service providers, issuers, validation services, relying parties and supervisory bodies shall ensure fair and lawful processing in accordance with Directive 95/46/EC when processing personal data. Such processing shall be strictly limited to the minimum data needed to issue and maintain an eID or certificate, validate an electronic authentication or to provide a trust service. 2. Trust service providers, issuers, validation services shall guarantee the confidentiality and integrity of data related to a person to whom the eID is issued or the service is provided. 3. Without prejudice to the legal effect given to pseudonyms under national law, Member States shall not prevent issuers from indicating in electronic authentication means a pseudonym instead of or in addition to the holder's name or prevent trust service providers indicating in electronic signature certificates a pseudonym instead of the signatory's name. 4. Validation services must not collect or retain data beyond the extent necessary for the process of validation. Validation services must not profile signatories, relying parties or any other customers. Logs may be retained for the purpose of detecting fraud and intrusions but for no more than 90 days.
Amendment 69 #
Proposal for a regulation
Article 5
Article 5
When an electronic identification using an electronic identification means and authentication is requirallowed under national legislation or administrative practice to access a service online, any electronic identification means issued in another Member State that ensures the same or an higher level of assurance and that fallings under a scheme included in the list published by the Commission pursuant to the procedure referred to in Article 7 shall be recognised and accepted for the purposes of accessing this service.
Amendment 74 #
Proposal for a regulation
Article 6 – paragraph 1 – point b
Article 6 – paragraph 1 – point b
(b) the electronic identification means can be used to access at least public services requirallowing electronic identification in the notifying Member State;
Amendment 110 #
Proposal for a regulation
Article 9 – paragraph 1
Article 9 – paragraph 1
1. A trust service provider shall be liable for any direct damage caused to any natural or legal person due to failure to comply with the obligations laid down in Article 15(1), unless the trust service provider can prove that he has not acted negligently.
Amendment 113 #
Proposal for a regulation
Article 9 – paragraph 2
Article 9 – paragraph 2
2. A qualified trust service provider shall be liable for any direct damage caused to any natural or legal person due to failure to meet the requirements laid down in this Regulation, in particular in Article 19, unless the qualified trust service provider can prove that he has not acted negligently.
Amendment 117 #
Proposal for a regulation
Article 11 a (new)
Article 11 a (new)
Article 11a Right of access and information for users of trust services Trust service providers shall provide users with at least the following: (a) information on the collection, communication, and retention of their personal data; (b) means of checking their personal data and exercising their data protection rights.
Amendment 118 #
Proposal for a regulation
Article 12 – paragraph 1
Article 12 – paragraph 1
Trust services provided and end user products used in the provision of those services shall be made accessible for persons with disabilities whenever possible.
Amendment 144 #
Proposal for a regulation
Article 15 – paragraph 2 a (new)
Article 15 – paragraph 2 a (new)
2a. When the breach of security is likely to adversely affect the users of trust services, the supervisory body shall without undue delay notify the breach to those users in order to enable them to take the necessary precautions.