A library consortium hears “Convention 108” and assumes it is identical to the GDPR. Which distinction should training emphasise?
Select an answer to reveal the explanation.
Short Explanation
Convention 108 and the GDPR are cousins, not clones. One lives in the Council of Europe human-rights world; the other is an EU regulation with its own institutions and enforcement. Same privacy family tree, different passports and court systems.
Full Explanation
Convention 108 (and its modernised Protocol, often called 108+) is a Council of Europe treaty on automatic processing of personal data open to a wider set of states than the EU alone. The GDPR is an EU regulation adopted under Union law, supervised through EU and Member State structures. They share conceptual lineage but are not the same instrument, and conflating them misstates jurisdiction and remedies.