Search results

processing; providing information about the storage of personal data; having malware detection systems; training employees about basic "cyber hygiene"; establishing

freedoms of data subjects; and (h) the right of data subjects to be informed about the restriction, unless that may be prejudicial to the purpose of the restriction

weeks, allowing for 14 weeks in total. The Chair of the EDPB makes decisions about the extension either on its own initiative or at the request of at least

happens, the controller is not obliged to process additional information about the data subject for the sole purpose of GDPR compliance. Article 11(2) GDPR

belonging to companies, public bodies or other legal entities. However, if data about a legal entity contains or relates to a natural person or a natural person

evidence or there is a dispute between the controller and the data subject about the accuracy of personal data. To avoid potentially deletion, sharing or

47(2)(h) GDPR). The format and procedures for the exchange of information about BCRs between the controllers, processors and DPAs shall be specified by the

obligation for the DPO to inform the controller, processor, and their staff about the obligations arising from the GDPR and other applicable data protection

authority (DPA) about the transfer and all relevant aspects are duly recorded. Lastly, the controller should inform the data subject about the transfer and

institution of updating courses to keep the DPO and their team informed about data protection developments and related disciplines. Alternatively, the

include: The name of the controller A description of what the complaint is about Their contact information (name, phone number and postal address only) Copies

consult the supervisory authority not only to seek advice about informing data subjects about a breach in accordance with Article 34, but also on the appropriate

term. The authority has an office in Rome with a staff currently numbering about 125 people. The Panel of the Italian DPA is currently composed of Pasquale

transfer personal data. In such cases, the processor must inform the controller about such requirements before commencing the processing. This provision emphasizes

applicable. The fifth section contains the provisions about the rights of data subjects. The sixth section is about the Hamburg Commissioner for Data Protection

certain about the fact that the processing entails high risks that cannot be mitigated by measures they are willing to adopt, or they have doubts about it.

The annual reports of NAIH are accessible in English (https://www.naih.hu/about-the-authority/annual-reports) and in Hungarian (https://www.naih.hu/eves-beszamolok)

Information about the law governing the DPA's activity can be found here. Complaints are governed by the Administrative Procedure Code. Information about investigations

"Procedural Information" for details on why we only get access to press releases about decisions. You can help us by filling in this section! You can help us by

involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it. Recital 62: Exceptions