A university clinic asks whether updating Convention 108 to Convention 108+ changes only paperwork or also modernises protections. What is the sound takeaway?
Select an answer to reveal the explanation.
Short Explanation
108+ is not a fancy binder sticker — it is the remodel of an older convention for a world of clouds, apps, and accountability expectations. Updating the framework modernises protections rather than renaming the filing cabinet. Think upgrade, not stationery.
Full Explanation
Convention 108+ modernises the Council of Europe’s earlier data-protection convention for contemporary processing, reinforcing protections and accountability-oriented expectations beyond the 1981 baseline rather than issuing a cosmetic cover sheet. University clinic staff should take away that modernisation is substantive: themes suited to today’s automated and networked processing—including accountability—are part of the update story, while the instrument remains a CoE convention distinct from the GDPR. Treating 108+ as paperwork-only understates why modernisation mattered. Claiming 108+ abolished all data-subject rights in favour of industry self-certification alone contradicts the protective purpose of the convention system. Saying 108+ applies exclusively to EU Member States and voids non-EU ratifications misunderstands CoE openness and treaty mechanics. Exam caveat: questions may contrast update versus identical reprint and CoE versus EU instrument—answer both dimensions. Operational check: when citing 108+ in comparative research for a civic DPIA methodology, note modernisation themes such as accountability, then map operational controls to the binding law that actually governs the clinic (typically GDPR for EU processing), so soft comparative citation does not replace legal basis analysis.