Data Privacy Blog » data protection http://dataprivacyblog.tuca.ro Ţuca Zbârcea & Asociaţii Mon, 05 Jul 2021 10:30:10 +0000 ro-RO hourly 1 https://wordpress.org/?v=4.1.38 Just in Case e-zine: The Thorny Issue of Notifications Concerning Personal Data Processing http://dataprivacyblog.tuca.ro/just-in-case-e-zine-the-thorny-issue-of-notifications-concerning-personal-data-processing/ http://dataprivacyblog.tuca.ro/just-in-case-e-zine-the-thorny-issue-of-notifications-concerning-personal-data-processing/#comments Fri, 22 Jul 2016 11:04:54 +0000 http://dataprivacyblog.tuca.ro/?p=190 Citeşte mai mult]]> Decision No. 200/2015 of the National Supervisory Authority for Personal Data Processing (ANSPDCP) (“Decision 200/2015”) regulates the issue of notifications concerning personal data processing.
Essentially, according to Article 1 of Decision 200/2015, except in certain cases of processing that are expressly and exhaustively detailed in the decision, it is unnecessary to notify ANPSDCP when processing personal data. Moreover, in accordance with Article 2 of the Decision 200/2015, personal data transfer to countries outside the European Union or the European Economic Area (EEA), and to countries that are not recognised by the European Commission as providing adequate protection, on the basis of a decision, must be notified to or, as the case may be, authorised by ANSPDCP. As arising from the preamble to Decision 200/2015, it was targeted at avoiding “inadequate” administrative formalities (which is a politically correct way of saying “useless”), by reference to the nature of the processing, and the actual risks that it entails for the data subjects. Surely, releasing the controllers from the obligation to notify all personal data processing operations is by all means welcome and well-timed. However, as we shall be discussing below, the manner of regulating such an exemption is debatable as regards its compliance with the provisions of Law No. 677/2001 and of the relevant European regulations. In accordance with Article 22(1) of Law No. 677/2001, data controllers are obliged to notify ANSPDCP in relation to any such operation they are carrying out. Nonetheless, while Article 22(2) lists a series of processing operations that need not be notified to ANSPDCP, paragraph (9) of the same article provides that the supervisory authority may establish other situations where the notification is not required (other than those under paragraph (2)).

This article was first published in Just in Case, an electronic magazine by Țuca Zbârcea & Asociații. To read the entire article, please go to: http://www.tuca.ro/just_in_case/

]]> http://dataprivacyblog.tuca.ro/just-in-case-e-zine-the-thorny-issue-of-notifications-concerning-personal-data-processing/feed/ 0 Interviu Bizlawyer: Țuca Zbârcea & Asociații anticipează o creștere a activitații în practica de Data Protection, în anii ce vor urma http://dataprivacyblog.tuca.ro/interviu-bizlawyer-tuca-zbarcea-asociatii-anticipeaza-o-crestere-a-activitatii-in-practica-de-data-protection-in-anii-ce-vor-urma/ http://dataprivacyblog.tuca.ro/interviu-bizlawyer-tuca-zbarcea-asociatii-anticipeaza-o-crestere-a-activitatii-in-practica-de-data-protection-in-anii-ce-vor-urma/#comments Thu, 21 Jul 2016 12:12:22 +0000 http://dataprivacyblog.tuca.ro/?p=180 Citeşte mai mult]]> Avocatii Tuca Zbarcea & Asociatii atrag atentia ca modificarile aduse de Regulamentul (UE) 2016/679 sunt unele de substanta. Una dintre principalele schimbari consta in eliminarea obligatiei de notificare a prelucrarilor datelor cu caracter personal catre ANSPDCP. “Aceasta va fi inlocuita de una sau, dupa caz, mai multe din urmatoarele obligatii: tinerea evidentei prelucrarilor de date cu caracter personal conform regulilor stabilite de Regulamentul 679/2016 si permiterea accesului la aceasta evidenta persoanelor vizate de prelucrare si ANSPDCP, la cerere (in principal, aceasta obligatie va fi impusa operatorilor care au cel putin 250 de angajati); desemnarea responsabilului cu protectia datelor cu caracter personal (asa numitul data protection officer) in cazul prelucrarilor care: sunt efectuate de o autoritate/organism public (exceptand instantele de judecata); implica o monitorizare periodica si sistematica a persoanelor vizate la scara larga; vizeaza categorii speciale de date, precum date privind
sanatatea, viata sexuala, condamnari penale si infractiuni, la scara larga; obligatia operatorilor de a evalua in prealabil impactul prelucrarii asupra drepturilor persoanelor vizate in cazul prelucrarilor care prezinta un risc ridicat pentru persoanele vizate si de a consulta in prealabil ANSPDCP in cazul in care evaluarea sus mentionata indica faptul ca prelucrarea ar genera un risc ridicat in absenta unor masuri luate de operator pentru atenuarea riscului. Autoritatile nationale (i.e. in Romania – ANSPDCP) vor publica o lista a prelucrarilor care presupun realizarea unui studiu de impact”, explica Ciprian Timofte, Managing Associate al Tuca Zbarcea & Asociatii.

Problematica protectiei datelor cu caracter personal a cunoscut o dezvoltare importanta in ultimii ani, in acord cu evolutiile tehnologice. In acelasi ton, firma Tuca Zbarcea & Asociatii a dezvoltat o practica semnificativa in domeniul protectiei datelor cu caracter personal, volumul proiectelor crescand constant de la an la an. „Nu putem afirma ca exista un profil anume al clientului Tuca Zbarcea & Asociatii in domeniul protectiei datelor cu caracter personal. Firma noastra de avocatura a consiliat un numar mare de companii, atat multinationale, cat si locale. Asistenta acordata a cuprins o paleta larga de servicii juridice, de la notificarea autoritatii nationale de supraveghere (ANSPDCP) cu privire la prelucrarea datelor pana la furnizarea de analize complexe vizand probleme sensibile de prelucrare a datelor personale, cum ar fi monitorizarea angajatilor la locul de munca, transferul de date in contextul unor transferuri de business (portofolii de asigurari, portofolii de credite neperformante etc.), punerea in aplicare a solutiilor de cloud computing, publicitate comportamentala etc”, precizeaza avocatul.

La randul sau, Sergiu Cretu, Avocat Senior al Tuca Zbarcea & Asociatii, arata ca, in general, mandatele firmei vizeaza aspecte necontencioase. “Clientii ne abordeaza in ideea de a preveni incalcarea legislatiei relevante si/sau aparitia unor eventuale litigii in aceasta materie. Mandatele cele mai frecvente constau in furnizarea de analize asupra modului in care sunt prelucrate sau se doreste sa se prelucreze date cu caracter personal, context in care sunt prezentate principalele obligatii ce revin operatorilor de date cu caracter personal, precum si recomandari de remediere a eventualelor incalcari constatate sau de prevenire a lor. De asemenea, ni s-a solicitat frecvent asistenta in implementarea masurilor impuse de legislatia relevanta operatorilor de date cu caracter personal ori imputernicitilor acestora. Nu in ultimul rand, serviciile noastre includ asistenta in cadrul tranzactiilor in care problemele de protectie a datelor personale devin incidente, precum in cazul transferurilor de intreprindere sau de portofolii de contracte cu persoane fizice”, detaliaza Sergiu Cretu.

Pentru articolul integral, accesați site-ul Bizlawyer: http://www.bizlawyer.ro/stiri/piata-avocaturii/tuca-zbarcea–asociatii-anticipeaza-o-crestere-a-activitatii-avocatiale-in-practica-de-data-protection-in-anii-ce-vor-urma-cum-lucreza-echipa-si-care-sunt-cele-mai-des-intalnite-solicutari-ale-clientilor

]]> http://dataprivacyblog.tuca.ro/interviu-bizlawyer-tuca-zbarcea-asociatii-anticipeaza-o-crestere-a-activitatii-in-practica-de-data-protection-in-anii-ce-vor-urma/feed/ 0