Terminology differences between D.lgs 196/2003 and GDPR Regulation (EU) 2016/679

One of the benefits introduced by GDPR is about conforming the terminology at European level. But it is verifiable a disadvantage related to the figures involved, leaving the Italian scheme of D. Lgs. 196/2003 and considering the linguistic difference.                Lgs.196/2003                  … Read More »

DPO: the responses of the Privacy Authority to frequently asked questions

  Here come the answers of the Privacy Aythority to frequently asked questions asked about the DPO (ex art. 37 Reg UE 2016/679) Below the link in both Italian and English http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/5930300 http://ec.europa.eu/information_society/newsroom/image/document/2016-51/wp243_annex_en_40856.pdf   Please find here below the answer n. 10 that in my opinion integrates and responds to the discussion that followed the… Read More »

Transparent information: a right of the data subject, not bureaucracy

Article. 12 of GDPR “Transparent information, communication and modalities for the exercise of the rights of the data subject” obliges the holder to provide to the data subjects with all necessary information, in a concise, comprehensible and easily accessible, with a simple and clear language, in particular in the case of information aimed specifically at… Read More »

Mandatory appointment of Data Protection Officer: the Working Party’s position pursuant to art. 29

On 13 December 2016 the European Data Protection Supervisor (Working Party – WP29) issued three documents containing information and recommendations on important novelties on Regulation (right to data portability, D.P.O., Leading Authority), in view of its application, effective from May 25, 2018. With regard to the Data Protection Officer, the guidelines first highlight that the… Read More »

UK institutional “data breach” … HSCIC asks for an inconsistent consent …

A recent decision of the Information Commissioner’s Office (https://ico.org.uk/) has manifested a fear that for years affected the UK (and not only) and that it is the focus of the discussions between the associations for the protection of clients/patients/data subjects. The above document states that the British “Data Controller” has experienced an anomaly related to… Read More »