Amendment LIBE #1728

Article 23 – Paragraph 2

2. The controller shall implement mechanisms for ensuring that, by default, only those personal data are processed which are necessary for each specific purpose of the processing and are especially not collected or retained beyond the minimum necessary for those purposes, both in terms of the amount of the data and the time of their storage. In particular, those mechanisms shall ensure that by default personal data are not made accessible to an indefinite number of individuals. This sentence 1 shall not apply with regard to the processing of data the purpose of which is the fulfilment of statutory obligations and/or which is in the public interest, insofar as such obligation or task is aimed at the best possible completeness of a data base. This in particular applies to telecommunications subscriber directories.

Current Data Privacy Rating is : weaker    Bernd Lange Germany S&D


comments powered by Disqus