Treaty of Lisbon
The Treaty of Lisbon was signed 13 December 2007 and took effect 1 December 2009. It amends the EU's two core treaties, renaming one the TFEU. Article 16(1) TFEU gives everyone the right to protection of their personal data, and Article 16(2) makes EU institutions and member states (within EU law) subject to data protection rules controlled by independent authorities. Lisbon also made the Charter binding and, for the first time, embedded fundamental rights in the EU treaty framework.
The Treaty of Lisbon was signed 13 December 2007 and became effective 1 December 2009. Its aim is to strengthen the EU's core structures so it functions more efficiently. It amends the EU's two core treaties: the Treaty on European Union and the Treaty Establishing the European Community, the latter renamed the TFEU.
Article 16(1) TFEU echoes Charter Article 8: everyone has the right to the protection of personal data concerning them. Article 16(2) requires the Parliament and Council to lay down rules on processing by Union institutions and by member states acting within EU law, with compliance subject to control by independent authorities. The European Data Protection Supervisor regulates the EU institutions, while the reference to 'authorities' implies national DPAs may also have a role.
Lisbon promotes core values (human dignity, freedom, democracy, equality, rule of law, respect for human rights) and made the Charter binding. This was significant because the original treaty establishing the European Union did not mention fundamental rights at all.