Search results

The principles of data protection should apply to any information concerning an identified or identifiable natural person. Personal data which have undergone

of a misdemeanour procedure, provided that such an application of the rules in those Member States has an equivalent effect to administrative fines imposed

interpretations include 1) documents generated by an authority in its official capacity and 2) all documents held by an authority. Recital 154 seems to lean towards

The President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) is the national Data Protection Authority for Poland. It

constitute an appropriate safeguard for international data transfers. BCRs is one of the appropriate safeguards which can be used, in the absence of an adequacy

a controller is processing inaccurate personal data and that this may have an adverse effect on them (e.g. inaccurate bank account details which may lead

need for an EU framework to ensure the free flow of personal data within the European common market, the European Commission has proposed an EU Directive

in Article 12(8) and Article 43(8) shall be conferred on the Commission for an indeterminate period of time from 24 May 2016. 3.   The delegation of power

the consistent application of this Regulation, the Board should be set up as an independent body of the Union. To fulfil its objectives, the Board should

not adopt such rules and is thus subject to the GDPR. As an illustration of this, in June 2020, an administrative court in Slovenia upheld a decision from

is required by the consistency mechanism”. The authority tasked with such an important role is the European Data Protection Board (EDPB). The ultimate

perform their tasks and exercise their powers with complete independence, is an essential component of the protection of natural persons with regard to the

to act under Article 66(1) shall be presumed to be met and require an opinion or an urgent binding decision from the Board pursuant to Article 66(2). Recital

order to demonstrate compliance with the GDPR. Certification is thus viewed as an accountability framework, promoting both legal compliance and transparency

the consistent application of this Regulation, the Board should be set up as an independent body of the Union. To fulfil its objectives, the Board should

4(25) GDPR, which in turn refers to Article 1(1) of Directive (EU) 2015/1535, an "information society service" (ISS) is any service normally provided for remuneration

consistency mechanism, the Board should, within a determined period of time, issue an opinion, if a majority of its members so decides or if so requested by any

third country, a territory or a specified sector within that third country, or an international organisation; standard protection clauses; formats and procedures

as necessary to reconcile the right to the protection of personal data with an obligation of professional secrecy. This is without prejudice to existing

in the Union” can be exercised based on a contract concluded with an individual or an organisation, provided that they are established in the Union. The