Article 8 of European Convention on Human Rights stated that there is a protection for personal data from it being exploited by others.
EU LEGAL FRAMEWORK IN THE FIELD OF PERSONAL DATA PROTECTION
Convention for Protection of Human Rights and Fundamental Freedoms of the Council of Europe,
• Convention implementing the Schengen Agreement of 14 June 1985 between the Governments of the States of the Benelux Economic Union, the Federal Republic of Germany and the French Republic on the gradual abolition of checks at their common borders, Chapter 3, art. 102-118;
• Convention No. 108 of the Council of Europe of January 28, 1981 for the Protection of Individuals with regard to Automatic Processing of Personal Data;
• Recommendation No. R (87) 15 of the Council of Europe Committee of Ministers, dated September 17th 1987, regulating the use of personal data in the police sector;
• Directive 95/46/ЕC of the European Parliament and of the Council, of 24 October 1995, on the protection of individuals with regard to the processing of personal data and on the free movement of such data;
• Regulation 1987/2006 of 20 December 2006 on the establishment, operation and use of the second generation Schengen information system; and
• Council Decision 2007/533 of 12 June 2007 on the establishment, operation and use of the second generation Schengen Information System.