EU compromises over data laws, but fines could be 5% of turnover

The European Union has finally taken a big step towards agreeing laws that will govern how data is controlled for the foreseeable future. There’s a reason this is the most amended and most lobbied European bill ever, and marketers and consumers should sit up and take notice.


The EU’s General Data Protection Regulation, which will replace current data protection laws across 28 countries with a single uniform statute, passed a key committee stage in the European Parliament last night (21 October). The final vote won’t happen until next spring, but this development, which involved sifting 4,000 proposed amendments to the original text, represents a compromise between warring pro-consumer and pro-business factions.

Gone is the ‘right to be forgotten’, replaced with a ‘right of erasure’, which basically manages consumers’ expectations as to how much information they can demand to be removed from the internet.

However, there is a much stricter regime limiting what data can be passed to governments outside the EU. Ostensibly, this targets the US, in light of revelations about the communications its National Security Agency intercepts. It will now be illegal for American companies such as Google, Microsoft, Yahoo and Facebook to comply with US government requests for data on EU citizens without going through European authorities.

Perhaps surprisingly, one major concession to the business lobby is the ability to conduct ‘pseudonymous profiling’ freely. Expect this to become a very important buzzword. It means companies will effectively be allowed to create individual profiles from people’s data without their consent, as long as a consumer would reasonably expect it to do so as a legitimate business interest.

Any additional data that could identify someone must be kept separately, while profiling for purposes that could discriminate against someone on the grounds of sex, race or religion, for example, is banned.

There’s no guarantee that all or any of these proposals will actually see the light of day. Hardliners on either side of the debate remain unhappy with what’s been conceded. Many more amendments could still come.

But it seems there’s now a workable draft that could feasibly end up becoming law, and that’s something that all marketers should pay attention to, if only for one reason – fines could now be increased to as much as 5 per cent of global turnover. That’s hundred of millions of pounds for the internet giants.

And as a result, breaching data protection laws will no longer be a trifling matter.

Click here to nominate yourself or a colleague as Data Professional of the Year.

Latest from Marketing Week


Access Marketing Week’s wealth of insight, analysis and opinion that will help you do your job better.

Register and receive the best content from the only UK title 100% dedicated to serving marketers' needs.

We’ll ask you just a few questions about what you do and where you work. The more we know about our visitors, the better and more relevant content we can provide for them. And, yes, knowing our audience better helps us find commercial partners too. Don't worry, we won't share your information with other parties, unless you give us permission to do so.

Register now


Our award winning editorial team (PPA Digital Brand of the Year) ask the big questions about the biggest issues on everything from strategy through to execution to help you navigate the fast moving modern marketing landscape.


From the opportunities and challenges of emerging technology to the need for greater effectiveness, from the challenge of measurement to building a marketing team fit for the future, we are your guide.


Information, inspiration and advice from the marketing world and beyond that will help you develop as a marketer and as a leader.

Having problems?

Contact us on +44 (0)20 7292 3703 or email

If you are looking for our Jobs site, please click here