A charity asks whether Convention 108 still matters after the GDPR. Which assessment is most accurate for CIPP/E framework understanding?
Select an answer to reveal the explanation.
Short Explanation
GDPR did not toss the old European scrapbook in the bin. Convention 108 (and 108+) is Council of Europe treaty DNA for automated personal-data protection, and it still matters historically and for parties beyond a pure EU-regulations-only view. Think foundation stones under a newer EU building, not a US consumer statute.
Full Explanation
Council of Europe Convention 108 and its modernised 108+ form are foundational European data-protection instruments that predate and parallel EU secondary law. The GDPR is the central EU regulation for personal-data protection within its scope, but it did not erase the Convention’s place in the European tradition or its relevance for non-EU parties to the Convention. Convention 108 is not a US instrument, was not repealed by the CCPA, and does not demote the GDPR to soft law.