3619 Results
Quotes
Quotes based on international documents, law, and treaties- "The collection of personal information should be limited to information that is relevant to the purposes of collection and any such information should be obtained by lawful and fair means, and where appropriate, with notice to, or consent of, the individual concerned."
- "Personal information collected should be used only to fulfill the purposes of collection and other compatible or related purposes except: a) with the consent of the individual whose personal information is collected; b) when necessary to provide a service or product requested by the individual; or, c) by the authority of law and other legal instruments, proclamations and pronouncements of legal effect."
- "Where appropriate, individuals should be provided with clear, prominent, easily understandable, accessible and affordable mechanisms to exercise choice in relation to the collection, use and disclosure of their personal information. "
- "Personal information controllers should protect personal information that they hold with appropriate safeguards against risks, such as loss or unauthorized access to personal information, or unauthorized destruction, use, modification or disclosure of information or other misuses. Such safeguards should be proportional to the likelihood and severity of the harm threatened, the sensitivity of the information and the context in which it is held, and should be subject to periodic review and reassessment."
- "Individuals should be able to: a) obtain from the personal information controller confirmation of whether or not the personal information controller holds personal information about them; b) have communicated to them, after having provided sufficient proof of their identity, personal information about them; i. within a reasonable time; ii. at a charge, if any, that is not excessive; iii. in a reasonable manner; iv. in a form that is generally understandable; and, c) challenge the accuracy of personal information relating to them and, if possible and as appropriate, have the information rectified, completed, amended or deleted. "
- "Personal data shall be: (a) processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’)."
- "Personal data shall be: (...) (b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes (‘purpose limitation’)."
- "Personal data shall be: (...) (c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’)."
- "Personal data shall be: (...) (d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’)."
- "Personal data shall be: (...) (e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’)."
- "Personal data shall be: (...) (f) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’)."
- "Processing shall be lawful only if and to the extent that at least one of the following applies: (a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes."
- "Each Member State shall provide for one or more independent public authorities to be responsible for monitoring the application of this Regulation, in order to protect the fundamental rights and freedoms of natural persons in relation to processing and to facilitate the free flow of personal data within the Union (‘supervisory authority’)."
- "There should be limits to the collection of personal data and any such data should be obtained by lawful and fair means and, where appropriate, with the knowledge or consent of the data subject."
- "Personal data should be relevant to the purposes for which they are to be used, and, to the extent necessary for those purposes, should be accurate, complete and kept up to date."
- "Personal data should be protected by reasonable security safeguards against such risks as loss or unauthorised access, destruction, use, modification or disclosure of data."
- "There should be a general policy of openness about developments, practices and policies with respect to personal data. Means should be readily available of establishing the existence and nature of personal data, and the main purposes of their use, as well as the identity and usual residence of the data controller."
- "Individuals should have the right: a) to obtain from a data controller, or otherwise, confirmation of whether or not the data controller has data relating to them; b) to have communicated to them, data relating to them i. within a reasonable time; ii. at a charge, if any, that is not excessive; iii. in a reasonable manner; and iv. in a form that is readily intelligible to them; c) to be given reasons if a request made under subparagraphs (a) and (b) is denied, and to be able to challenge such denial; and d) to challenge data relating to them and, if the challenge is successful to have the data erased, rectified, completed or amended."
- "A Member country should refrain from restricting transborder flows of personal data between itself and another country where (a) the other country substantially observes these Guidelines or (b) sufficient safeguards exist, including effective enforcement mechanisms and appropriate measures put in place by the data controller, to ensure a continuing level of protection consistent with these Guidelines."
- "In implementing these Guidelines, Member countries should: (…) b) adopt laws protecting privacy. "
- "In implementing these Guidelines, Member countries should: (…) c) establish and maintain privacy enforcement authorities with the governance, resources and technical expertise necessary to exercise their powers effectively and to make decisions on an objective, impartial and consistent basis."
- "The gathering and holding of personal information on computers, data banks and other devices, whether by public authorities or private individuals or bodies, must be regulated by law. Effective measures have to be taken by States to ensure that information concerning a person’s private life does not reach the hands of persons who are not authorized by law to receive, process and use it, and is never used for purposes incompatible with the Covenant."
- "In order to have the most effective protection of his private life, every individual should have the right to ascertain in an intelligible form, whether, and if so, what personal data is stored in automatic data files, and for what purposes. Every individual should also be able to ascertain which public authorities or private individuals or bodies control or may control their files. If such files contain incorrect personal data or have been collected or processed contrary to the provisions of the law, every individual should have the right to request rectification or elimination."
- "The General Assembly (...) 6. Calls upon all States: (...) (g) To consider adopting and implementing data protection legislation, regulation and policies, including on digital communication data, that complies with their international human rights obligations, which could include the establishment of national independent authorities with powers and resources to monitor data privacy practices, investigate violations and abuses and receive communications from individuals and organizations, and to provide appropriate remedies."
- "The General Assembly (...) 6. Calls upon all States: (...) (d) To establish or maintain existing independent, effective, adequately resourced and impartial judicial, administrative and/or parliamentary domestic oversight mechanisms capable of ensuring transparency, as appropriate, and accountability for State surveillance of communications, their interception and the collection of personal data."
- "The General Assembly (...) 6. Calls upon all States: (...) (e) To provide individuals whose right to privacy has been violated by unlawful or arbitrary surveillance with access to an effective remedy, consistent with international human rights obligations."
- "The General Assembly (...) 7. Calls upon business enterprises: (...) (b) To inform users in a clear and easily accessible way about the collection, use, sharing and retention of their data that may affect their right to privacy and to establish transparency policies, as appropriate."
- "The General Assembly (...) 7. Calls upon business enterprises: (...) (c) To implement administrative, technical and physical safeguards to ensure that data are processed lawfully and to ensure that such processing is limited to what is necessary in relation to the purposes of the processing and that the legitimacy of such purposes, as well as the accuracy, integrity and confidentiality of the processing, is ensured."
- "There must be the possibility for meaningful verification of ballots cast electronically, such as that provided by a manual recount or end-to-end verifiability. (...) The verification mechanism must also fully guarantee the integrity of the results without compromising the secrecy of the vote. "
- "NVT systems are intended to fulfil the same functions as paper-based or mechanical systems and must, therefore, meet the same standards that apply to these systems."
- "Secrecy of the vote means that it should not be possible to associate a vote with a specific voter. This secrecy permits the voter to exercise her or his choice freely, without the potential for coercion, intimidation or vote-buying. NVT systems must be consistent with this requirement."
- "While this requirement has broader ramifications, one of the aspects of the principle of equality is that no voter will be able to cast more votes than another, nor will citizens be prevented from participating in voting. This means that NVT systems must prevent any person from casting more votes than is established by law and must prevent any votes from being subtracted from the system. (...) At the same time, the principle of equality means that voting should be accessible to all voters, especially for voters living within the country."
- "If NVT are used in polling stations, they should not be the exclusive method of voting, as less computer-literate voters may have problems operating NVT systems. In such cases, citizens should be provided with the option to use paper ballots if they wish."
- "While not all aspects of NVT can be directly observed, there are a number of activities that can be observed and which should be open to observers. These include not only the activities of election administrators and vendors in deploying, setting up and modifying the system, but also the activities of certification, testing and audit authorities."
- "The gradual introduction of NVT through a period of small, regionally limited pilot projects that include testing and gradually extend NVT use over several elections can serve to identify and correct problems and may help build public confidence in the technology."
- "Furthermore, decisions to use NVT should not be made immediately applicable to the next elections, in order to allow time for feasibility studies, procurement, planning, testing, evaluation, certification, voter education, public confidence building and implementation."
- "Another important factor to consider is the overall transparency of the selection process. The criteria used for selecting a particular type of system should be clearly established in advance of selection and made publicly available. This includes not only technical criteria but also purchasing and procurement criteria."
- "While vendors often have a role to play in maintaining and updating NVT, due to their technical knowledge, election officials are responsible for the conduct of elections and should have full authority, oversight and accountability over technicians."
- "NVT systems should be designed in such a way that they are easily understandable for voters and relatively simple to use."
- "Voters should receive clear feedback and prompts while interacting with the technology. The voter should be made aware of when the electronic ballot is about to be cast and should then receive confirmation that the vote has, indeed, been cast and that the voting process is over. "
- "All candidates or parties contesting the election should be given an equal amount of space on the electronic ballot and it should be possible to see all of the available choices at the same time before the ballot is cast. Ballots that exceed the size of the screen, thus requiring the voter to scroll or change screens to see the entire range of choices, have the potential to confuse voters and to create bias in favour of contestants that are displayed first."
- "The system should be designed to allow voters with disabilities to cast their ballots without assistance, to the extent possible."
- "The technology itself should be thoroughly tested prior to election day, but testing should also be conducted on the interaction of voters, election officials and observers with the technology."
- "Certification requirements or criteria should exist prior to the introduction of the NVT, rather than being tailored to match the NVT system. These requirements should be public and in accordance with relevant national legal provisions and international standards."
- "A government may allocate additional funds to programmes benefitting historically disadvantaged groups in order to enable such groups to enjoy their rights on a par with others in society."
- "Although a government has the flexibility in determining the structure of the legal framework, the primary instrument in the field of elections must be a written law, as opposed to custom or a collection of administrative policies. As the instrument of choice, written law provides the benefits of equity, certainty, visibility and transparency, and makes the matter subject to judicial interpretation and review, as well as open to recourse by citizens."
- "Electoral legislation should be enacted sufficiently in advance of elections to enable voters and all participants in the process – including election-administration bodies, candidates, parties and the media – to become informed of the rules. Electoral legislation enacted at the “last minute” has the potential to undermine trust in the process and diminish the opportunity for political participants and voters to become familiar with the rules of the electoral process in a timely manner."
- "Electoral legislation should be published and readily available to the public."
- "Electoral constituencies should be drawn in a manner that preserves equality among voters. Thus, the law should require that constituencies be drawn in such a way that each constituency has approximately the same population size."
- "Ideally, the legal framework should ensure that people or institutions establishing the boundaries of constituencies are neutral, independent and impartial. The legal framework needs to also provide for maximum public input and participation in the process."