Appointment of data protection officer(s) (1) In certain cases, the personal data controller and the personal data processor are required to appoint an officer or officer who performs the personal Data protection function.(2) In certain cases as referred to in …
Obligations of data processors Obligations as stated inarticle 21 paragraph (1), article 27, article 28, article 29, article 30, article 31, and article 35 shall apply to the personal Data processor.
Instructions for designated data processor (1) In the event that the personal Data controller designates the personal Data processor, the personal Data processor is required to process the personal Data based on the instruction or instructions of the personal Data …
Personal data control obligations do not apply in case of (1) Personal Data control obligations as intended in article 32, article 34, article 37, article 38 paragraph (1) letter A, letter B, and letter C, article 39 paragraph (1) Letter …
Obligation to demonstrate responsibility accountability The personal Data controller is obliged to be responsible for the processing of personal Data and to demonstrate responsibility for fulfilling the obligations of the personal Data protection principles.
Notification in the event of failure of protection of personal data (1) In the event of any failure of personal Data protection, the personal Data controller is obliged to provide notice in writing at least 3 x 24 (three times …
Obligation to destroy personal data (1) The personal Data controller is obliged to destroy personal Data if: a. have no more value; b. has depleted its retention period and is destroyed based on the archive’s filing schedule; c. A request …
Erasure of personal data (1) The personal Data controller is required to erase personal Data if: a. Personal data is no longer necessary for the reach of thepurpose of processing personal data; b. The owner of the personal Data has …
Retention period of personal data (1) The personal Data controller is required to process theprocessing of personal data if: a. has reached the retention period; b. The purpose of processing personal Data has been achieved; Or c. Request from the …
Processing in accordance with approved purposes The personal Data controller is required to process personal data in accordance with the purposes of processing personal Data approved by the personal Data owner.