Professor Ray Murphy:

Head 40 was addressed in the previous session also. I agree that as it is currently drafted it is way too broad and much too general. If one is going to try to restrict the rights and obligations under GDPR, as I pointed out to the previous speaker, there are general principles that must be adopted. Under Article 24 of the GDPR, it must be very specific, it must be very clear what the objective is, and it must be proportionate and absolutely necessary. The current proposal is deficient. It is too broad and needs much more consideration and elaboration so that it can be upheld and so we understand what the purpose is and how it will apply. I agree with the Senator that the current proposal in head 40 is insufficient and that it certainly should be re-examined and extended significantly.