According to regards to Post 19 of your own Right from Access to Public record information Laws Zero

3.step one. Head regulator getting analysis protection

27,275 (only available inside Spanish right here), just like the revised from the Blog post 11 off (only available from inside the Spanish right here), the newest AAIP ‘s the fundamental supervisory authority of the Laws.

step 3.dos. Main efforts, duties and you will commitments

The brand new AAIP will ‘supervise new full safety off private information kept in data files, info, databases, and other technology means of studies running, if public otherwise personal, designed to provide guidance, to be sure the to honour and privacy of men and women and you can the means to access what that is joined about them.’ Because of this, Post dos out-of Decree No. for the Access to Public record information (only available inside the Language right here) so long as any source on Laws and regulations on the PDP would be to meet the requirements due to the fact referring to the new AAIP.

  • examining those activities regarding controllers out of databases therefore the study they manage;
  • evaluating conformity on the Legislation; and you can
  • to make recommendations to help you boost their show in the legal framework.

The newest AAIP try called, on the just discretion, to undertake checks to handle compliance for the Laws and regulations. Actually, Article cuatro of your Decree explicitly authorises new AAIP to utilize brand new related sanctions in the event the court standards aren’t satisfied. On top of that, if it is questioned from the study sufferers or if perhaps brand new AAIP, from the is only discretion, takes into account they compatible, it is entitled to ensure:

  • brand new lawfulness of data collection;
  • the brand new legality out-of exchanges of data and their alert to third parties, together with interrelation between them;
  • brand new lawfulness of your import of data; and you may
  • the brand new legality off both external and internal control mechanisms getting files and you may databases.

4. Trick Significance

Data operator: Brand new Act does not include a different sort of concept of studies control (it does bring a classification to possess ‘person guilty of a great database’ and you can a classification to have studies member). Still, it can be understood one to analysis controllers are those that process analysis at their own discretion, determining the brand new intentions and you can technique of handling.

Data processor: New Operate cannot expressly identify the brand new principles of information processor. Still, it can be understood you to studies processors are the ones one process study pursuing the investigation controllers’ rules.

Personal information: Advice of any sort writing on individuals otherwise businesses, known or recognizable by a keen associative process (Area dos of the Act).

Painful and sensitive study: Studies sharing racial and you may cultural origin, governmental opinions, spiritual, philosophic otherwise moral viewpoints, union registration, and you may advice writing about fitness otherwise sex-life (Section dos of your own Operate). Considering Resolution cuatro/2019 of your own AAIP, biometric data one to refers to a guy will in addition be believed delicate study only when it will inform you a lot more research whoever use could possibly get end in potential discrimination because of its holder (elizabeth.g. biometric analysis one to inform you cultural resource or resource suggestions so you can wellness). This is simply a sandwich-category of private information one receives improved cover.

Biometric analysis: It’s particularly defined as investigation obtained from a particular technical running, relating to the real, mental, otherwise behavioural functions out-of a person who show her identification (Quality cuatro/2019 of the AAIP).

Pseudonymisation: Brand new Work does not explicitly relate to pseudonymisation, yet not, the latest Operate talks of ‘data dissociation’ because the any processing from private information in such a way you to definitely advice can’t be of good man or woman (Part 2 of your own Act).

People guilty of a data file, check in, financial or database: New absolute person or legal organization, if or not personal otherwise individual, you to definitely is the owner of a data file, check in, bank, or database. It may be absorbed into studies control (Point dos of one’s Act).