Search results

55(1). In that case, the urgent need to act under Article 66(1) shall be presumed to be met and require an urgent binding decision from the Board pursuant

will be subject to continuous change, since an EU-wide mechanism will need to be adaptable to take into account national regulations that may be sector-specific

in most cases, be the First Tier Tribunal (Information Rights). If an appeal raises particularly complex or important issues, it may be transferred to

5(1)(e) GDPR when determining the duration for which data must be stored. Any such laws would also be relevant for determining whether the processing is necessary

activity” is. According to Kuner, this could be a joint venture or an alliance, “as long as it is stable”. BCRs may be introduced for either data controllers

supervisory authority should be laid down by law in each Member State and should in particular provide that those members are to be appointed, by means of a

to the data subject proves to be impossible or would involve a disproportionate effort. The latter could in particular be the case where processing is carried

Article, “may be accredited”, it is possible to argue that certain DPAs can decide to be more strict, and require additional criteria to be fulfilled. In

personal data should be designed to serve mankind. The right to the protection of personal data is not an absolute right; it must be considered in relation

official documents to be taken into account when applying this Regulation. Public access to official documents may be considered to be in the public interest

understanding of the term 'not-for-profit' must be given an autonomous meaning, its interpretation in this context should not be determined by Member State law. Essentially

matter. That opinion shall be adopted within eight weeks by simple majority of the members of the Board. That period may be extended by a further six weeks

29. See the law here, in French. The law "informatique et Libertés" has to be read jointly with the Decree n° 2019-536 of May 29. According to Article 8(I)(2)(d)

pseudonymisation, which could be attributed to a natural person by the use of additional information should be considered to be information on an identifiable

in office. It should be highlighted that resignation should be voluntary, and not influenced by external pressure. Retirement can be a reason for the premature

interest could be a 'cooling off' period after the end of a member's term of office. Commentators suggest that periods of 18-24 months should be be viewed as

55. In that case, the urgent need to act under Article 66(1) shall be presumed to be met and require an opinion or an urgent binding decision from the Board

accordance with Article 290 TFEU should be delegated to the Commission. In particular, delegated acts should be adopted in respect of criteria and requirements

fines under Article 83 GDPR can likely be classified as criminal in nature. Thus, compliance with Article 50 CFR may be threatened where a criminal sanction

may be used as an element to demonstrate compliance with the obligations of the controller. The carrying-out of processing by a processor should be governed