Artikolu 70 📖 RĠPD (GDPR). Kompiti tal-Bord

Artikolu 70 RĠPD (GDPR). Kompiti tal-Bord

Article 70 GDPR. Tasks of the Board

1. Il-Bord għandu jiżgura l-applikazzjoni konsistenti ta’ dan ir-Regolament. Għal dak il-għan, il-Bord għandu b’mod partikolari, fuq inizjattiva tiegħu stess jew, fejn rilevanti, fuq talba tal-Kummissjoni:

1. The Board shall ensure the consistent application of this Regulation. To that end, the Board shall, on its own initiative or, where relevant, at the request of the Commission, in particular:

(a) jimmonitorja u jiżgura l-applikazzjoni korretta ta’ dan ir-Regolament fil-każijiet previsti fl-Artikoli 64 u 65 mingħajr preġudizzju għall-kompiti ta’ awtoritajiet superviżorji nazzjonali;

(a) monitor and ensure the correct application of this Regulation in the cases provided for in Articles 64 and 65 without prejudice to the tasks of national supervisory authorities;

Testi relatati

Artikolu 64 RĠPD (GDPR). Opinjoni tal-Bord

Article 64 GDPR. Opinion of the Board

Artikolu 65 RĠPD (GDPR). Soluzzjoni għat-tilwim mill-Bord

Article 65 GDPR. Dispute resolution by the Board

(b) jagħti parir lill-Kummissjoni dwar kwalunkwe kwistjoni relatata mal-protezzjoni tad-data personali fl-Unjoni, inkluż dwar kwalunkwe emenda proposta għal dan ir-Regolament;

(b) advise the Commission on any issue related to the protection of personal data in the Union, including on any proposed amendment of this Regulation;

(c) jagħti parir lill-Kummissjoni dwar il-format u l-proċeduri għall-iskambju ta’ informazzjoni bejn il-kontrolluri, il-proċessuri u l-awtoritajiet superviżorji għar-regoli korporattivi vinkolanti;

(c) advise the Commission on the format and procedures for the exchange of information between controllers, processors and supervisory authorities for binding corporate rules;

(d) joħroġ linji gwida, rakkomandazzjonijiet, u l-aħjar prattiki dwar proċeduri għat-tħassir ta’ links, kopji jew repliki ta’ data personali minn servizzi ta’ komunikazzjoni disponibbli għall-pubbliku kif imsemmi fl-Artikolu 17(2);

(d) issue guidelines, recommendations, and best practices on procedures for erasing links, copies or replications of personal data from publicly available communication services as referred to in Article 17(2);

Testi relatati

Artikolu 17 RĠPD (GDPR). Dritt għal tħassir (“dritt li wieħed jintesa”)

Article 17 GDPR. Right to erasure (‘right to be forgotten’)

[…]

2. Fejn il-kontrollur ikun ippubblika d-data personali u jiġi obbligat skont il-paragrafu 1 li jħassar id-data personali, il-kontrollur, b’kont meħud tat-teknoloġija disponibbli u l-ispiża tal-implimentazzjoni, għandu jieħu passi raġonevoli, inklużi miżuri tekniċi, biex jinforma lill-kontrolluri li jkunu qegħdin jipproċessaw id-data personali, li s-suġġett tad-data talabhom iħassru kwalunkwe konnessjoni għal dik id-data personali, jew koppja jew replika tagħha.

2. Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

[…]

(e) jeżamina, fuq inizjattiva tiegħu stess, fuq talba ta’ wieħed mill-membri tiegħu jew fuq talba tal-Kummissjoni, kwalunkwe kwistjoni li tkopri l-applikazzjoni ta’ dan ir-Regolament u joħroġ linji gwida, rakkomandazzjonijiet u l-aħjar prattiki sabiex jinkoraġġixxi l-applikazzjoni konsistenti ta’ dan ir-Regolament;

(e) examine, on its own initiative, on request of one of its members or on request of the Commission, any question covering the application of this Regulation and issue guidelines, recommendations and best practices in order to encourage consistent application of this Regulation;

(f) joħroġ linji gwida, rakkomandazzjonijiet, u l-aħjar prattiki f’konformità mal-punt (e) ta’ dan il-paragrafu għall-ispeċifikar ulterjuri tal-kriterji u l-kondizzjonijiet għal deċiżjonijiet ibbażati fuq it-tfassil ta’ profili skont l-Artikolu 22(2);

(f) issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for further specifying the criteria and conditions for decisions based on profiling pursuant to Article 22(2);

Testi relatati

Artikolu 22 RĠPD (GDPR). Teħid ta' deċiżjonijiet individwali awtomatizzati, inkluż tfassil ta' profili

Article 22 GDPR. Automated individual decision-making, including profiling

[…]

2. Il-paragrafu 1 ma għandux japplika jekk id-deċiżjoni:

2. Paragraph 1 shall not apply if the decision:

[…]

(a) tkun meħtieġa biex wieħed jidħol f’kuntratt, jew iwettaq kuntratt, bejn is-suġġett tad-data u kontrollur tad-data;

(a) is necessary for entering into, or performance of, a contract between the data subject and a data controller;

(b) tkun awtorizzata mil-liġi tal-Unjoni jew ta’ Stat Membru li għaliha jkun soġġett il-kontrollur u li tistabbilixxi wkoll miżuri adatti għas-salvagwardja tad-drittijiet u l-libertajiet u l-interessi leġittimi tas-suġġett tad-data; jew

(b) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or

(c) tkun ibbażata fuq il-kunsens espliċitu tas-suġġett tad-data.

(c) is based on the data subject’s explicit consent.

(g) joħroġ linji gwida, rakkomandazzjonijiet u l-aħjar prattiki f’konformità mal-punt (e) ta’ dan il-paragrafu għall-istabbiliment tal-ksur tad-data personali u d-determinazzjoni tad-dewmien żejjed imsemmi fl-Artikolu 33(1) u (2) u għaċ-ċirkostanzi partikolari li fihom kontrollur jew proċessur ikun meħtieġ jinnotifika il-ksur ta’ data personali;

(g) issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for establishing the personal data breaches and determining the undue delay referred to in Article 33(1) and (2) and for the particular circumstances in which a controller or a processor is required to notify the personal data breach;

Testi relatati

Artikolu 33 RĠPD (GDPR). Notifika ta' ksur ta' data personali lill-awtorità superviżorja

Article 33 GDPR. Notification of a personal data breach to the supervisory authority

1. Fil-każ ta’ ksur ta’ data personali, il-kontrollur għandu mingħajr dewmien bla bżonn u, fejn fattibbli, mhux aktar tard minn 72 siegħa wara li jkun sar jaf bih, jinnotifika l-ksur tad-data personali lill-awtorità superviżorja kompetenti f’konformità mal-Artikolu 55 ħlief jekk il-ksur ta’ data personali x’aktarx ma jirriżultax f’riskju għad-drittijiet u l-libertajiet tal-persuni fiżiċi. Fejn in-notifika lill-awtorità superviżorja ma ssirx fi żmien 72 siegħa, hija għandha tkun akkumpanjata minn raġunijiet għad-dewmien.

1. In the case of a personal data breach, the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the supervisory authority competent in accordance with Article 55, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. Where the notification to the supervisory authority is not made within 72 hours, it shall be accompanied by reasons for the delay.

2. Il-proċessur għandu jinnotifika lill-kontrollur mingħajr dewmien żejjed wara li jkun sar konxju ta’ ksur ta’ data personali.

2. The processor shall notify the controller without undue delay after becoming aware of a personal data breach.

[…]

(h) joħroġ linji gwida, rakkomandazzjonijiet u l-aħjar prattiki f’konformità mal-punt (e) ta’ dan il-paragrafu fir-rigward taċ-ċirkostanzi li fihom ksur tad-data personali x’aktarx li jirriżulta f’riskju għoli għad-drittijiet u l-libertajiet tal-persuni fiżiċi msemmija fl-Artikolu 34(1).

(h) issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph as to the circumstances in which a personal data breach is likely to result in a high risk to the rights and freedoms of the natural persons referred to in Article 34(1).

Testi relatati

Artikolu 33 RĠPD (GDPR). Notifika ta' ksur ta' data personali lill-awtorità superviżorja

Article 33 GDPR. Notification of a personal data breach to the supervisory authority

2. Il-proċessur għandu jinnotifika lill-kontrollur mingħajr dewmien żejjed wara li jkun sar konxju ta’ ksur ta’ data personali.

2. The processor shall notify the controller without undue delay after becoming aware of a personal data breach.

(i) joħroġ linji gwida, rakkomandazzjonijiet u l-aħjar prattiki f’konformità mal-punt (e) ta’ dan il-paragrafu għall-fini tal-ispeċifikar ulterjuri tal-kriterji u r-rekwiżiti għat-trasferimenti ta’ data personali bbażati fuq regoli korporattivi vinkolanti osservati mill-kontrolluri u regoli korporattivi vinkolanti osservati mill-proċessuri u fuq rekwiżiti meħtieġa oħra biex tiġi żgurata l-protezzjoni tad-data personali tas-suġġetti tad-data kkonċernati msemmija fl-Artikolu 47;

(i) issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for the purpose of further specifying the criteria and requirements for personal data transfers based on binding corporate rules adhered to by controllers and binding corporate rules adhered to by processors and on further necessary requirements to ensure the protection of personal data of the data subjects concerned referred to in Article 47;

Testi relatati

Artikolu 47 RĠPD (GDPR). Regoli korporattivi vinkolanti

Article 47 GDPR. Binding corporate rules

(j) joħroġ linji gwida, rakkomandazzjonijiet u l-aħjar prattiki f’konformità mal-punt (e) ta’ dan il-paragrafu għall-fini tal-ispeċifikar ulterjuri tal-kriterji u r-rekwiżiti għat-trasferimenti ta’ data personali abbażi tal-Artikolu 49(1);

(j) issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for the purpose of further specifying the criteria and requirements for the personal data transfers on the basis of Article 49(1);

Testi relatati

Artikolu 49 RĠPD (GDPR). Derogi għal sitwazzjonijiet speċifiċi

Article 49 GDPR. Derogations for specific situations

1. Fin-nuqqas ta’ deċiżjoni dwar l-adegwatezza skont l-Artikolu 45(3), jew salvagwardji xierqa skont l-Artikolu 46, inklużi regoli korporattivi vinkolanti, trasferiment jew sett ta’ trasferimenti ta’ data personali lejn pajjiż terz jew organizzazzjoni internazzjonali għandu jseħħ biss b’waħda mill-kondizzjonijiet li ġejjin:

1. In the absence of an adequacy decision pursuant to Article 45(3), or of appropriate safeguards pursuant to Article 46, including binding corporate rules, a transfer or a set of transfers of personal data to a third country or an international organisation shall take place only on one of the following conditions:

(a) is-suġġett tad-data jkun espliċitament ta kunsens għat-trasferiment propost, wara li jkun ġie informat bir-riskji possibbli ta’ tali trasferimenti għas-suġġett tad-data minħabba n-nuqqas ta’ deċiżjoni ta’ adegwatezza u salvagwardji xierqa;

(a) the data subject has explicitly consented to the proposed transfer, after having been informed of the possible risks of such transfers for the data subject due to the absence of an adequacy decision and appropriate safeguards;

(b) it-trasferiment ikun meħtieġ għat-twettiq ta’ kuntratt bejn is-suġġett tad-data u l-kontrollur jew l-implimentazzjoni ta’ miżuri ta’ qabel il-kuntratt meħuda fuq talba tas-suġġett tad-data;

(b) the transfer is necessary for the performance of a contract between the data subject and the controller or the implementation of pre-contractual measures taken at the data subject’s request;

(c) it-trasferiment ikun meħtieġ għall-konklużjoni jew it-twettiq ta’ kuntratt konkluż fl-interess tas-suġġett tad-data bejn il-kontrollur u persuna fiżika jew ġuridika oħra;

(c) the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the controller and another natural or legal person;

(d) it-trasferiment ikun meħtieġ għal raġunijiet importanti ta’ interess pubbliku;

(d) the transfer is necessary for important reasons of public interest;

(e) it-trasferiment ikun meħtieġ għall-istabbiliment, l-eżerċizzju jew id-difiża ta’ talbiet legali;

(e) the transfer is necessary for the establishment, exercise or defence of legal claims;

(g) it-trasferiment isir minn reġistru li skont il-liġi tal-Unjoni jew ta’ Stat Membru huwa maħsub biex jipprovdi informazzjoni lill-pubbliku u li huwa miftuħ għall-konsultazzjoni jew mill-pubbliku inġenerali inkella minn kwalunkwe persuna li tista’ turi interess leġittimu, iżda biss sa fejn jiġu sodisfatti fil-każ partikolari l-kondizzjonijiet stipulati mil-liġi tal-Unjoni jew ta’ Stat Membru għall-konsultazzjoni.

(g) the transfer is made from a register which according to Union or Member State law is intended to provide information to the public and which is open to consultation either by the public in general or by any person who can demonstrate a legitimate interest, but only to the extent that the conditions laid down by Union or Member State law for consultation are fulfilled in the particular case.

(f) it-trasferiment ikun meħtieġ sabiex jiġu protetti l-interessi vitali tas-suġġett tad-data jew ta’ persuni oħra, fejn is-suġġett tad-data ma jkunx fiżikament jew legalment kapaċi li jagħti l-kunsens;

(f) the transfer is necessary in order to protect the vital interests of the data subject or of other persons, where the data subject is physically or legally incapable of giving consent;

Fejn trasferiment ma setgħax ikun ibbażat fuq dispożizzjoni fl-Artikoli 45 jew 46, inklużi d-dispożizzjonijiet dwar regoli korporattivi vinkolanti, u l-ebda waħda mid-derogi għal sitwazzjoni speċifika msemmija fl-ewwel subparagrafu ta’ dan il-paragrafu ma tkun applikabbli, it-trasferiment ma jkunx ripetittiv, jikkonċerna biss għadd limitat ta’ suġġetti tad-data, ikun meħtieġ għall-għanijiet ta’ interessi leġittimi konvinċenti mfittxija mill-kontrollur li ma jingħelbux mill-interessi jew id-drittijiet u l-libertajiet tas-suġġett tad-data, u l-kontrollur ikun ivvaluta ċ-ċirkostanzi kollha madwar it-trasferiment tad-data u abbażi ta’ dik il-valutazzjoni pprovda salvagwardji xierqa fir-rigward tal-protezzjoni tad-data personali. Il-kontrollur għandu jinforma lill-awtorità superviżorja bit-trasferiment. Il-kontrollur għandu, barra milli jipprovdi l-informazzjoni msemmija fl-Artikolu 13 u 14, jinforma lis-suġġett tad-data dwar it-trasferiment u dwar l-interessi leġittimi konvinċenti segwiti.

Where a transfer could not be based on a provision in Article 45 or 46, including the provisions on binding corporate rules, and none of the derogations for a specific situation referred to in the first subparagraph of this paragraph is applicable, a transfer to a third country or an international organisation may take place only if the transfer is not repetitive, concerns only a limited number of data subjects, is necessary for the purposes of compelling legitimate interests pursued by the controller which are not overridden by the interests or rights and freedoms of the data subject, and the controller has assessed all the circumstances surrounding the data transfer and has on the basis of that assessment provided suitable safeguards with regard to the protection of personal data. The controller shall inform the supervisory authority of the transfer. The controller shall, in addition to providing the information referred to in Articles 13 and 14, inform the data subject of the transfer and on the compelling legitimate interests pursued.

(k) ifassal linji gwida għall-awtoritajiet superviżorji dwar l-applikazzjoni tal-miżuri msemmija fl-Artikolu 58(1), (2) u (3) u l-istabbiliment ta’ multi amministrattivi skont l-Artikolu 83;

(k) draw up guidelines for supervisory authorities concerning the application of measures referred to in Article 58(1), (2) and (3) and the setting of administrative fines pursuant to Article 83;

Testi relatati

Artikolu 58 RĠPD (GDPR). Setgħat

Article 58 GDPR. Powers

1. Kull awtorità superviżorja għandu jkollha s-setgħat kollha investigattivi li ġejjin:

1. Each supervisory authority shall have all of the following investigative powers:

2. Kull awtorità superviżorja għandu jkollha s-setgħat kollha korrettivi li ġejjin:

2. Each supervisory authority shall have all of the following corrective powers:

3. Kull awtorità superviżorja għandu jkollha s-setgħat kollha konsultattivi u ta’ awtorizzazzjoni li ġejjin:

3. Each supervisory authority shall have all of the following authorisation and advisory powers:

Artikolu 83 RĠPD (GDPR). Kondizzjonijiet ġenerali biex jiġu imposti multi amministrattivi

Article 83 GDPR. General conditions for imposing administrative fines

(l) jirrieżamina l-applikazzjoni prattika tal-linji gwida, ir-rakkomandazzjonijiet u l-aħjar prattiki msemmija fil-punti (e) u (f);

(l) review the practical application of the guidelines, recommendations and best practices;

(m) joħroġ linji gwida, rakkomandazzjonijiet u l-aħjar prattiki f’konformità mal-punt (e) ta’ dan il-paragrafu għall-istabbiliment ta’ proċeduri komuni għar-rappurtar minn persuni fiżiċi ta’ ksur ta’ dan ir-Regolament skont l-Artikolu 54(2);

(m) issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for establishing common procedures for reporting by natural persons of infringements of this Regulation pursuant to Article 54(2);

Testi relatati

Artikolu 54 RĠPD (GDPR). Regoli dwar l-istabbiliment tal-awtorità superviżorja

Article 54 GDPR. Rules on the establishment of the supervisory authority

[…]

2. Il-membru jew il-membri u l-persunal ta’ kull awtorità superviżorja għandhom, f’konformità mal-liġi tal-Unjoni jew ta’ Stat Membru, ikunu soġġetti għal dmir ta’ segretezza professjonali kemm matul kif ukoll wara l-mandat tagħhom, fir-rigward ta’ kwalunkwe informazzjoni kunfidenzjali li jkunu saru jafu biha matul it-twettiq tal-kompiti tagħhom jew l-eżerċizzju tas-setgħat tagħhom. Matul il-mandat tagħhom, dak id-dmir ta’ segretezza professjonali għandu japplika b’mod partikolari għar-rappurtar minn persuni fiżiċi ta’ ksur ta’ dan ir-Regolament.

2. The member or members and the staff of each supervisory authority shall, in accordance with Union or Member State law, be subject to a duty of professional secrecy both during and after their term of office, with regard to any confidential information which has come to their knowledge in the course of the performance of their tasks or exercise of their powers. During their term of office, that duty of professional secrecy shall in particular apply to reporting by natural persons of infringements of this Regulation.

(n) jinkoraġġixxi t-tfassil ta’ kodiċi ta’ kondotta u t-twaqqif ta’ mekkaniżmi ta’ ċertifikazzjoni għall-protezzjoni tad-data u siġilli u marki għall-protezzjoni tad-data skont l-Artikoli 40 u 42;

(n) encourage the drawing-up of codes of conduct and the establishment of data protection certification mechanisms and data protection seals and marks pursuant to Articles 40 and 42;

Testi relatati

Artikolu 40 RĠPD (GDPR). Kodiċijiet ta' kondotta

Article 40 GDPR. Codes of conduct

Artikolu 42 RĠPD (GDPR). Ċertifikazzjoni

Article 42 GDPR. Certification

(o) iwettaq l-akkreditazzjoni ta’ korpi ta’ ċertifikazzjoni u r-rieżami perjodiku tiegħu skont l-Artikolu 43 u jżomm reġistru pubbliku ta’ korpi akkreditati skont l-Artikolu 43(6) u tal-kontrolluri jew il-proċessuri akkreditati stabbiliti f’pajjiżi terzi skont l-Artikolu 42(7);

(o) approve the criteria of certification pursuant to Article 42(5) and maintain a public register of certification mechanisms and data protection seals and marks pursuant to Article 42(8) and of the certified controllers or processors established in third countries pursuant to Article 42(7);

Testi relatati

Artikolu 43 RĠPD (GDPR). Korpi ta' ċertifikazzjoni

Article 43 GDPR. Certification bodies

[…]

6. Ir-rekwiżiti msemmija fil-paragrafu 3 ta’ dan l-Artikolu u l-kriterji msemmija fl-Artikolu 42(5) għandhom jiġu ppubblikati mill-awtorità superviżorja f’forma faċilment aċċessibbli. L-awtoritajiet superviżorji għandhom ukoll jittrażmettu dawk ir-rekwiżiti u kriterji lill-Bord. Il-Bord għandu jiġbor il-mekkaniżmi ta’ ċertifikazzjoni kollha u s-siġilli tal-protezzjoni tad-data kollha f’reġistru u għandu jagħmilhom disponibbli għall-pubbliku bi kwalunkwe mezz xieraq.

6. The requirements referred to in paragraph 3 of this Article and the criteria referred to in Article 42(5) shall be made public by the supervisory authority in an easily accessible form. The supervisory authorities shall also transmit those requirements and criteria to the Board.

[…]

Artikolu 42 RĠPD (GDPR). Ċertifikazzjoni

Article 42 GDPR. Certification

[…]

7. Iċ-ċertifikazzjoni għandha tinħareġ lil kontrollur jew proċessur għal perijodu massimu ta’ tliet snin u tista’ tiġġedded, skont l-istess kondizzjonijiet, sakemm jibqgħu jiġu sodisfatti r-rekwiżiti rilevanti. Iċ-ċertifikazzjoni għandha tiġi rtirata, fejn applikabbli, mill-korpi ta’ ċertifikazzjoni msemmija fl-Artikolu 43, jew mill-awtorità superviżorja kompetenti fejn ma jiġux sodisfatti jew ma jibqgħux jiġu sodisfatti r-rekwiżiti għaċ-ċertifikazzjoni.

7. Certification shall be issued to a controller or processor for a maximum period of three years and may be renewed, under the same conditions, provided that the relevant criteria continue to be met. Certification shall be withdrawn, as applicable, by the certification bodies referred to in Article 43 or by the competent supervisory authority where the criteria for the certification are not or are no longer met.

[…]

(p) jispeċifika r-rekwiżiti msemmija fl-Artikolu 43(3) bil-ħsieb tal-akkreditazzjoni ta’ korpi ta’ ċertifikazzjoni taħt l-Artikolu 42;

(p) approve the requirements referred to in Article 43(3) with a view to the accreditation of certification bodies referred to in Article 43;

Testi relatati

Artikolu 43 RĠPD (GDPR). Korpi ta' ċertifikazzjoni

Article 43 GDPR. Certification bodies

[…]

3. L-akkreditazzjoni tal-korpi ta’ ċertifikazzjoni kif imsemmija fil-paragrafi 1 u 2 ta’ dan l-Artikolu għandhom jitwettqu abbażi ta’ kriterji approvati mill-awtorità superviżorja li hija kompetenti skont l-Artikolu 55 jew 56 jew, mill-Bord, skont l-Artikolu 63. Fil-każ ta’ akkreditazzjoni skont il-punt (b) tal-paragrafu 1 ta’ dan l-Artikolu, dawk ir-rekwiżiti għandhom jikkomplementaw dawk previsti fir-Regolament (KE) Nru 765/2008 u r-regoli tekniċi li jiddeskrivu l-metodi u l-proċeduri tal-korpi ta’ ċertifikazzjoni.

3. The accreditation of certification bodies as referred to in paragraphs 1 and 2 of this Article shall take place on the basis of requirements approved by the supervisory authority which is competent pursuant to Article 55 or 56 or by the Board pursuant to Article 63. In the case of accreditation pursuant to point (b) of paragraph 1 of this Article, those requirements shall complement those envisaged in Regulation (EC) No 765/2008 and the technical rules that describe the methods and procedures of the certification bodies.

[…]

Artikolu 42 RĠPD (GDPR). Ċertifikazzjoni

Article 42 GDPR. Certification

(q) jipprovdi lill-Kummissjoni b’opinjoni dwar ir-rekwiżiti ta’ ċertifikazzjoni msemmija fl-Artikolu 43(8);

(q) provide the Commission with an opinion on the certification requirements referred to in Article 43(8);

Testi relatati

Artikolu 43 RĠPD (GDPR). Korpi ta' ċertifikazzjoni

Article 43 GDPR. Certification bodies

[…]

8. Il-Kummissjoni hija mogħtija s-setgħa li tadotta atti delegati f’konformità mal-Artikolu 92, għall-fini li tispeċifika r-rekwiżiti li għandu jittieħed kont tagħhom għall-mekkaniżmi ta’ ċertifikazzjoni tal-protezzjoni tad-data msemmija fl-Artikolu 42(1).

8. The Commission shall be empowered to adopt delegated acts in accordance with Article 92 for the purpose of specifying the requirements to be taken into account for the data protection certification mechanisms referred to in Article 42(1).

[…]

(r) jipprovdi lill-Kummissjoni b’opinjoni dwar l-ikoni msemmija fl-Artikolu 12(7);

(r) provide the Commission with an opinion on the icons referred to in Article 12(7);

Testi relatati

Artikolu 12 RĠPD (GDPR). Informazzjoni, komunikazzjoni u modalitajiet trasparenti għall-eżerċizzju tad-drittijiet tas-suġġett tad-data

Article 12 GDPR. Transparent information, communication and modalities for the exercise of the rights of the data subject

[…]

7. L-informazzjoni li għandha tiġi pprovduta lis-suġġetti tad-data skont l-Artikolu 13 u 14 tista’ tingħata flimkien ma’ ikoni standardizzati sabiex tingħata ħarsa ġenerali lejn l-ipproċessar intenzjonat b’mod li jidher faċilment, li jinftiehem u li jinqara sew. Fejn l-ikoni jkunu ppreżentati b’mod elettroniku, dawn għandhom ikunu jistgħu jinqraw minn magna.

7. The information to be provided to data subjects pursuant to Articles 13 and 14 may be provided in combination with standardised icons in order to give in an easily visible, intelligible and clearly legible manner a meaningful overview of the intended processing. Where the icons are presented electronically they shall be machine-readable.

[…]

(s) jipprovdi lill-Kummissjoni b’opinjoni biex tiġi valutata l-adegwatezza tal-livell ta’ protezzjoni f’pajjiż terz jew organizzazzjoni internazzjonali, inkluż għall-valutazzjoni jekk pajjiż terz jew territorju jew settur speċifikat wieħed jew aktar f’dak il-pajjiż terz, jew organizzazzjoni internazzjonali ikunux għadhom jiżguraw livell ta’ protezzjoni adegwat. Għal dak l-għan, il-Kummissjoni għandha tipprovdi lill-Bord d-dokumentazzjoni meħtieġa kollha, inkluża korrispondenza mal-gvern tal-pajjiż terz, fir-rigward ta’ dak il-pajjiż terz, territorju jew settur speċifikat, jew mal-organizzazzjoni internazzjonali.

(s) provide the Commission with an opinion for the assessment of the adequacy of the level of protection in a third country or international organisation, including for the assessment whether a third country, a territory or one or more specified sectors within that third country, or an international organisation no longer ensures an adequate level of protection. To that end, the Commission shall provide the Board with all necessary documentation, including correspondence with the government of the third country, with regard to that third country, territory or specified sector, or with the international organisation.

(t) joħroġ opinjonijiet dwar abbozzi ta’ deċiżjonijiet ta’ awtoritajiet superviżorji skont il-mekkaniżmu ta’ konsistenza msemmi fl-Artikolu 64(1), dwar kwistjonijiet sottomessi skont l-Artikolu 64(2) u joħroġ deċiżjonijiet vinkolanti skont l-Artikolu 65, inklużi dawk fil-każijiet imsemmija fl-Artikolu 66;

(t) issue opinions on draft decisions of supervisory authorities pursuant to the consistency mechanism referred to in Article 64(1), on matters submitted pursuant to Article 64(2) and to issue binding decisions pursuant to Article 65, including in cases referred to in Article 66;

Testi relatati

Artikolu 64 RĠPD (GDPR). Opinjoni tal-Bord

Article 64 GDPR. Opinion of the Board

1. Il-Bord għandu joħroġ opinjoni fejn awtorità superviżorja kompetenti tkun biħsiebha tadotta kwalunkwe waħda mill-miżuri hawn taħt. Għal dak il-għan, l-awtorità superviżorja kompetenti għandha tikkomunika l-abbozz ta’ deċiżjoni lill-Bord, meta hija:

1. The Board shall issue an opinion where a competent supervisory authority intends to adopt any of the measures below. To that end, the competent supervisory authority shall communicate the draft decision to the Board, when it:

(a) ikollha l-għan li tadotta lista tal-operazzjonijiet ta’ pproċessar soġġetta għar-rekwiżit għal valutazzjoni tal-impatt tal-protezzjoni tad-data skont l-Artikolu 35(4);

(a) aims to adopt a list of the processing operations subject to the requirement for a data protection impact assessment pursuant to Article 35(4);

(b) tikkonċerna suġġett skont l-Artikolu 40(7) jekk abbozz ta’ kodiċi ta’ kondotta jew emenda jew estensjoni ta’ kodiċi ta’ kondotta jkunux konformit ma’ dan ir-Regolament;

(b) concerns a matter pursuant to Article 40(7) whether a draft code of conduct or an amendment or extension to a code of conduct complies with this Regulation;

(c) ikollha l-għan li tapprova l-kriterji għall-akkreditazzjoni ta’ korp skont l-Artikolu 41(3) jew korp ta’ ċertifikazzjoni skont l-Artikolu 43(3);

(c) aims to approve the requirements for accreditation of a body pursuant to Article 41(3), of a certification body pursuant to Article 43(3) or the criteria for certification referred to in Article 42(5);

(e) ikollha l-għan li tawtorizza l-klawżoli kuntrattwali msemmija fil-punt (a) tal-Artikolu 46(3); jew

(e) aims to authorise contractual clauses referred to in point (a) of Article 46(3); or

(f) ikollha l-għan li tapprova regoli korporattivi vinkolanti fis-sens tal-Artikolu 47.

(f) aims to approve binding corporate rules within the meaning of Article 47.

2. Kwalunkwe awtorità superviżorja, il-President tal-Bord jew il-Kummissjoni tista’ titlob li kwalunkwe kwistjoni ta’ applikazzjoni ġenerali jew li jkollha effetti f’aktar minn Stat Membru wieħed tiġi eżaminata mill-Bord bil-ħsieb li tinkiseb opinjoni, b’mod partikolari fejn awtorità superviżorja kompetenti ma tkunx f’konformità mal-obbligi ta’ assistenza reċiproka f’konformità mal-Artikolu 61 jew għal operazzjonijiet konġunti f’konformità mal-Artikolu 62.

2. Any supervisory authority, the Chair of the Board or the Commission may request that any matter of general application or producing effects in more than one Member State be examined by the Board with a view to obtaining an opinion, in particular where a competent supervisory authority does not comply with the obligations for mutual assistance in accordance with Article 61 or for joint operations in accordance with Article 62.

[…]

Artikolu 65 RĠPD (GDPR). Soluzzjoni għat-tilwim mill-Bord

Article 65 GDPR. Dispute resolution by the Board

Artikolu 66 RĠPD (GDPR). Proċedura ta' urġenza

Article 66 GDPR. Urgency procedure

(u) jippromwovi l-kooperazzjoni u l-iskambju bilaterali u multilaterali effettiv ta’ informazzjoni u l-aħjar prattiki bejn l-awtoritajiet superviżorji;

(u) promote the cooperation and the effective bilateral and multilateral exchange of information and best practices between the supervisory authorities;

(v) jippromwovi programmi ta’ taħriġ komuni u jiffaċilita l-iskambji ta’ persunal bejn l-awtoritajiet superviżorji u, fejn xieraq, mal-awtoritajiet superviżorji ta’ pajjiżi terzi jew mal-organizzazzjonijiet internazzjonali;

(v) promote common training programmes and facilitate personnel exchanges between the supervisory authorities and, where appropriate, with the supervisory authorities of third countries or with international organisations;

(w) jippromwovi l-iskambju ta’ għarfien u dokumentazzjoni dwar il-leġiżlazzjoni u l-prattika dwar il-protezzjoni tad-data ma’ awtoritajiet superviżorji tal-protezzjoni tad-data fid-dinja kollha.

(w) promote the exchange of knowledge and documentation on data protection legislation and practice with data protection supervisory authorities worldwide.

(x) joħroġ opinjonijiet dwar il-kodiċijiet ta’ kondotta mfassla fil-livell tal-Unjoni skont l-Artikolu 40(9); u

(x) issue opinions on codes of conduct drawn up at Union level pursuant to Article 40(9); and

Testi relatati

Artikolu 40 RĠPD (GDPR). Kodiċijiet ta' kondotta

Article 40 GDPR. Codes of conduct

9. Il-Kummissjoni tista’, permezz ta’ atti ta’ implimentazzjoni, tiddeċiedi li l-kodiċijiet ta’ kondotta, l-emendi jew l-estensjonijiet approvati ppreżentati lilha skont il-paragrafu 8 ta’ dan l-Artikolu għandhom validità ġenerali fi ħdan l-Unjoni. Dawk l-atti ta’ implimentazzjoni għandhom jiġu adottati skont il-proċedura ta’ eżami stabbilita fl-Artikolu 93(2).

9. The Commission may, by way of implementing acts, decide that the approved code of conduct, amendment or extension submitted to it pursuant to paragraph 8 of this Article have general validity within the Union. Those implementing acts shall be adopted in accordance with the examination procedure set out in Article 93(2).

[…]

(y) iżomm reġistru elettroniku aċċessibbli għall-pubbliku ta’ deċiżjonijiet meħuda minn awtoritajiet superviżorji u qrati dwar kwistjonijiet ttrattati fil-mekkaniżmu ta’ konsistenza.

(y) maintain a publicly accessible electronic register of decisions taken by supervisory authorities and courts on issues handled in the consistency mechanism.

2. Fejn il-Kummissjoni titlob parir mill-Bord, hija tista’ tindika limitu ta’ żmien, filwaqt li tieħu kont tal-urġenza tal-kwistjoni.

2. Where the Commission requests advice from the Board, it may indicate a time limit, taking into account the urgency of the matter.

3. Il-Bord għandu jibgħat l-opinjonijiet, il-linji gwida, ir-rakkomandazzjonijiet, u l-aħjar prattiki tiegħu lill-Kummissjoni u lill-kumitat imsemmi fl-Artikolu 93 u jagħmilhom pubbliċi.

3. The Board shall forward its opinions, guidelines, recommendations, and best practices to the Commission and to the committee referred to in Article 93 and make them public.

Testi relatati

Artikolu 93 RĠPD (GDPR). Proċedura ta' kumitat

Article 93 GDPR. Committee procedure

1. Il-Kummissjoni għandha tkun assistita minn kumitat. Dak il-kumitat għandu jkun kumitat fis-sens tar-Regolament (UE) Nru 182/2011.

1. The Commission shall be assisted by a committee. That committee shall be a committee within the meaning of Regulation (EU) No 182/2011.

2. Fejn issir referenza għal dan il-paragrafu, għandu japplika l-Artikolu 5 tar-Regolament (UE) Nru 182/2011.

2. Where reference is made to this paragraph, Article 5 of Regulation (EU) No 182/2011 shall apply.

3. Fejn issir referenza għal dan il-paragrafu, għandu japplika l-Artikolu 8 tar-Regolament (UE) Nru 182/2011, flimkien mal-Artikolu 5 tiegħu.

3. Where reference is made to this paragraph, Article 8 of Regulation (EU) No 182/2011, in conjunction with Article 5 thereof, shall apply.

4. Il-Bord għandu, fejn xieraq, jikkonsulta l-partijiet interessati u jagħtihom l-opportunità li jikkummentaw f’perijodu ta’ żmien raġonevoli. Il-Bord għandu, mingħajr preġudizzju għall-Artikolu 76, jagħmel disponibbli għall-pubbliku r-riżultati tal-proċedura ta’ konsultazzjoni.

4. The Board shall, where appropriate, consult interested parties and give them the opportunity to comment within a reasonable period. The Board shall, without prejudice to Article 76, make the results of the consultation procedure publicly available.

Testi relatati

Artikolu 76 RĠPD (GDPR). Kunfidenzjalità

Article 76 GDPR. Confidentiality

1. Id-diskussjonijiet tal-Bord għandhom ikunu kunfidenzjali fejn il-Bord iqis li dan ikun meħtieġ, kif previst fir-regoli ta’ proċedura tiegħu.

1. The discussions of the Board shall be confidential where the Board deems it necessary, as provided for in its rules of procedure.

2. L-aċċess għal dokumenti sottomessi lill-membri tal-Bord, lill-esperti u lir-rappreżentanti ta’ pajjiżi terzi għandu jkun regolat mir-Regolament (KE) Nru 1049/2001 tal-Parlament Ewropew u tal-Kunsill (21).

2. Access to documents submitted to members of the Board, experts and representatives of third parties shall be governed by Regulation (EC) No 1049/2001 of the European Parliament and of the Council [21].

Regolament Ġenerali dwar il-Protezzjoni tad-Data (RĠPD, GDPR)

General Data Protection Regulation (EU GDPR)

The latest consolidated version of the Regulation with corrections by Corrigendum, OJ L 127, 23.5.2018, p. 2 ((EU) 2016/679). Source: EUR-lex.

Ħalli kumment

[js-disqus]