International Cooperation

As part of its mandate, the Office of the Information and Data Protection Commissioner (IDPC) participates as active and contributing member to European and international networks, conferences and working groups. Attendance to these fora ensures that the IDPC maintains the highest standards in executing its tasks as data protection regulator in Malta.

In addition to this, the IDPC promotes mechanisms such as memoranda of understanding with the aim of furthering international cooperation and international mutual assistance in the enforcement of legislation for the protection of personal data. By establishing these structures, the IDPC streamlines the exchange of documentation about personal data protection legislation and practice, including on jurisdictional conflicts with third countries.

The international and European networks to which the IDPC takes part and the bilateral instruments entered into by the IDPC are listed here below.

Global Privacy Assembly

The recently renamed “Global Privacy Assembly” or “GPA” (formerly the “International Conference of Data Protection and Privacy Commissioners”) first met in 1979. The GPA has grown exponentially throughout the years to become a forum which gathers more than a hundred data protection and privacy authorities across the globe. The IDPC has been accredited as a member of this group since 2003. Since then, the IDPC has participated with great interest in the events organised by the assembly, considering them a high calibre and fruitful forum to monitor the development and evolution of data protection and privacy law from a truly international perspective.

More information on the GPA may be accessed on the following link.

Common Thread Network

The Common Thread Network (“CTN”) is a forum aimed at bringing together the data protection and privacy authorities of Commonwealth countries, with representation from Europe, Africa, Asia, the Pacific, the Americas and the Caribbean. In so doing, it facilitates cross-border cooperation and building capacity by sharing knowledge on emerging trends, regulatory changes and best practices for effective data protection.

More information on the CTN may be accessed on the following link.

Global Privacy Enforcement Network

The IDPC is part of the Global Privacy Enforcement Network (“GPEN”) since 2015. The GPEN is a network intended to foster cross border cooperation among privacy and data protection authorities. By virtue of a Recommendation adopted in June 2007 by OECD Governments, member countries were mandated to develop an informal network for the specific purpose of exchanging information and discuss practical aspects of enforcement cooperation through a dedicated online platform. In June 2012, the GPEN Action Plan was adopted.

More information on the GPEN may be accessed on the following link.

British, Irish and Islands’ Data Protection Authorities

The British, Irish and Islands’ Data Protection Authorities (“BIIDPA”) is an informal meeting held on an annual basis where the organisation is volunteered by one of the respective participants, being Bermuda, Cayman Islands, the Republic of Cyprus, Gibraltar, Guernsey, the Republic of Ireland, Isle of Man, Jersey, Malta and the United Kingdom. Discussions at these meetings are informal in nature and provide the right platform for the exchange of useful information to ensure a consistent approach to the treatment of issues which are of common interest. The Commissioner actively participates to the BIIDPA meetings.

International Working Group on Data Protection in Telecommunications (Berlin Group) The International Working Group on Data Protection in Telecommunications (IWGDPT), also informally referred to as the Berlin Group, was established in 1983 on the initiative of a number of national data protection authorities in the world. The secretariat has since then been provided by the data protection authority of Berlin (Berliner Datenschutz-beauftragter). Membership in the Group is not limited to national data protection authorities, but it extends also to representatives from the private and NGO sectors. Over the last years, the Group has focused on data protection and privacy related issues of information technology in the wide sense, with a special focus on Internet-related developments. More information on the Berlin Group may be accessed on the following link (in German).

Spring Conference of the European Data Protection authorities

Started back in the 90’s, the Conference of European Data Protection Authorities, also known as the “Spring Conference” given that it is generally held during Spring, was formed with the aim of bringing together the data protection authorities of Europe and other intergovernmental organisations to address practical issues of common interest in relation with the rights to privacy and data protection. With the passing years, and with the evolution of the data protection legislative framework in Europe, the mandate of the Spring Conference has been progressively extended to include matters of more operational nature, such as cooperation between authorities in cross-border cases. The IDPC is a permanent member of the Spring Conference and considers this meeting as an important platform to exchange information, expertise and good practices in the context of debating key data protection matters.

More information about the past editions of the Spring Conference, including copies of the resolutions issued by the group, may be accessed on the following link.

Council of Europe Consultative Committee

The Republic of Malta is a party to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Convention ETS no. 108) and a member of the consultative committee (T-PD) set up in terms of Chapter V of the Convention. The T-PD is responsible inter alia for making proposals to facilitate or improve the application of the Convention, and suggest amendments to the same Convention. The IDPC attends the plenary sessions which are held twice a year in Strasbourg. More information about the T-PD may be accessed on the following link.

Coordinated Supervision Committee

Established within the framework of the EDPB and composed of representatives of the national data protection authorities of each EU Member State and the EDPS, as well as of national data protection authorities of non-EU Members of the Schengen Area when foreseen under EU law, the Coordinated Supervision Committee (“CSC”) is tasked with ensuring coordinated supervision of large-scale IT systems and of EU bodies, offices, and agencies. Other functions include exchanging relevant information, assisting supervisory authorities in carrying out audits and inspections and identifying any of their difficulties, as well as examining difficulties of interpretation or application of the EU legal act, drawing up harmonised proposals for solutions to problems, promoting awareness of data protection rights. More information about the CSC may be accessed on the following link.