Amendment LIBE #2143

Article 35 – Paragraph 1

1. The controller and the processor shall designate a data protection officer or attract sufficient external advice in any case where: (a) the processing is carried out by a public authority or body; or (b) the processing is carried out by an enterprise employing 250 persons or more; or (c) the core activities of the controller or the processor consist of processing operations which, by virtue of their nature, their scope and/or their purposes, require regular and systematic monitoring of data subjects. The data protection officer can already be employed by the enterprise and fulfil his duties part time and will report to the board of an enterprise, organization or public authority which bears ultimate responsibility and is accountable.

Current Data Privacy Rating is : weaker    Jan Mulder Netherlands ALDE

comments powered by Disqus