Search results

Slovenia. In the field of data protection, it has competencies under the GDPR as well as under the Slovenian Personal Data Protection Act, the Electronic Communications

sector, as well as the “specific needs of micro, small and medium-sized enterprises”. Recital 98 and 99 GDPR provide additional information as to how the

concerned as part of or as a result of the processing (e.g. the data subjects are your employees); The processing activities can be considered as naturally

such data subjects in the Union; or (b) the monitoring of their behaviour as far as their behaviour takes place within the Union. 3. This Regulation applies

the DPA refuses to act as the BCR Lead, it should explain the reasons for its decision, as well as its recommendations (if any) as to which other DPA would

is established in Paris and is in charge of enforcing GDPR for France, as well as the national law for data protection "Loi Informatique et Libertés". The

provides, such as their name and mailing address, as well as, according to the EDPB, data that is "observed" from the user's activity, such as their search

all of the tasks assigned to it and powers conferred to it by the GDPR, as long as the tasks are performed and the powers exercised on the territory of its

believe that proceedings concerning the same processing, such as the same subject matter as regards processing by the same controller or processor, or the

certainty upon which individuals can rely in the conduct of their affairs, as well as a basis for orderly development of legal rules. Their Lordships nevertheless

compliance with the Regulation. As part of their duty to monitor compliance, DPOs may engage in various activities, such as collecting information to identify

the offence under national law, the nature of the offence and the nature as well as degree of severity of the penalty that the person concerned is liable

GDPR provisions should not differ between Member States' respective SAs, as well as where applicable, between the multiple SAs within a Member State (for

issued by the Irish SA as LSA regarding Twitter and the subsequent relevant and reasoned objections expressed by a number of CSAs. As the LSA rejected the

Commission. 6. The controller or processor shall document the assessment as well as the suitable safeguards referred to in the second subparagraph of paragraph

of the Commission – questions regarding the Regulation's application; as well as issue guidelines, recommendations, and best practices. Articles 70(1)(f)-(j)

developments that have an impact on the protection of personal data; To give advice as part of the consultation by the controller responsible for the processing

specifications or restrictions of its rules by Member State law, Member States may, as far as necessary for coherence and for making the national provisions comprehensible

archiving "must take place 'in the public interest' should be regarded as satisfied as long as any individual archiving activity is set out-even broadly in Member

elaborated as per Article 40 GDPR. This body must be accredited by the competent Data Protection Authority (DPA) in charge of the code. As mentioned in