The real aim of the UE Regulation on personal data protection?

Under our point of view, the aim of the Regulation (EU) 2016/679 of personal data protection seems not so clear as it appears.

We were surprised with the approval of this new regulation which was not so necessary.

Actually, in Spain we have an efficient protection in this matter and probably we can say the same thing for the main part of EU Countries.

On the contrary, a community rating was required so that public administrations could create exceptions to the protection of personal data in the public interest.

A clear example of this purpose is found in tax matters.

 The fight against VAT fraud is recognised as an important objective of general public interest of both the Union and its Member States. For the purposes of achieving the objectives of Regulation (EU) No 904/2010, namely the objective to cooperate and to exchange information that helps to effect a correct assessment of VAT, to monitor correct application of VAT, particularly on intra-Community transactions, and to combat VAT fraud, it is appropriate to provide for specific and limited restrictions on certain rights and obligations laid down by Regulation (EU) 2016/679.

More specifically, full application of the rights and obligations foreseen in Regulation (EU) 2016/679 would seriously undermine the effectiveness of the fight against VAT fraud as it would in particular allow the data subjects to obstruct ongoing investigations and risk profiling. This would jeopardise official or legal enquiries, analyses, investigations or procedures that are carried out in accordance with Regulation (EU) No 904/2010. It would also disable the administrative cooperation between the competent authorities which is a key instrument for the purpose of combating VAT fraud. Consequently, restrictions should be provided as regards the right for transparent information, the right to receive information where personal data are collected from the data subject, the right to receive information where personal data have not been obtained from the data subject, the right of access by the data subject, the right to erasure, the right to object to processing of personal data and the right concerning automated individual decision-making, including profiling. Exercise of these rights should be restricted only as long as it is necessary in order not to undermine the purposes pursued under Article 1 of Regulation (EU) No 904/2010. This restriction should only apply as regards certain categories of data referred to in Articles 1, 14 and 17 of that Regulation to the extent it is strictly necessary in order to ensure compliance with VAT legislation, and the relevant provisions of this Regulation.