Amendment LIBE #2281

Article 36 – Paragraph 3+

3a. The controller or the processor shall designate a data protection organisation or a data protection officer for an initial period of at least two years in case of a data protection organisation and for an initial period of at least four years in case of a data protection officer, as long as he/she is not an external service provider. In the least case the period for data protection organisations shall apply. The data protection organisations or data protection officers may be reappointed for further terms. During their term of office, the data protection officer may only be dismissed, if the data protection officer no longer fulfils the conditions required for the performance of their duties. These provisions do not apply in case of the voluntary engagement of a data protection organisation or a data protection officer as laid out in Article 38a of this Regulation.

Current Data Privacy Rating is : stronger    Axel Voss Germany EPP


comments powered by Disqus