Navegaci贸n
RGPD > Art铆culo聽41. Supervisi贸n de c贸digos de conducta aprobados
Descargar PDF

Art铆culo聽41 RGPD. Supervisi贸n de c贸digos de conducta aprobados

Article 41 GDPR. Monitoring of approved codes of conduct

1. Sin perjuicio de las funciones y los poderes de la autoridad de control competente en virtud de los art铆culos聽57 y聽58, podr谩 supervisar el cumplimiento de un c贸digo de conducta en virtud del art铆culo聽40 un organismo que tenga el nivel adecuado de pericia en relaci贸n con el objeto del c贸digo y que haya sido acreditado para tal fin por la autoridad de control competente.

1. Without prejudice to the tasks and powers of the competent supervisory authority under Articles聽57 and 58, the monitoring of compliance with a code of conduct pursuant to Article聽40 may be carried out by a body which has an appropriate level of expertise in relation to the subject-matter of the code and is accredited for that purpose by the competent supervisory authority.

2. El organismo a que se refiere el apartado聽1 podr谩 ser acreditado para supervisar el cumplimiento de un c贸digo de conducta si:

2. A body as referred to in paragraph聽1 may be accredited to monitor compliance with a code of conduct where that body has:

a) ha demostrado, a satisfacci贸n de la autoridad de control competente, su independencia y pericia en relaci贸n con el objeto del c贸digo;

(a)聽demonstrated its independence and expertise in relation to the subject-matter of the code to the satisfaction of the competent supervisory authority;

b) ha establecido procedimientos que le permitan evaluar la idoneidad de los responsables y encargados correspondientes para aplicar el c贸digo, supervisar el cumplimiento de sus disposiciones y examinar peri贸dicamente su aplicaci贸n;

(b)聽established procedures which allow it to assess the eligibility of controllers and processors concerned to apply the code, to monitor their compliance with its provisions and to periodically review its operation;

c) ha establecido procedimientos y estructuras para tratar las reclamaciones relativas a infracciones del c贸digo o a la manera en que el c贸digo haya sido o est茅 siendo aplicado por un responsable o encargado del tratamiento, y para hacer dichos procedimientos y estructuras transparentes para los interesados y el p煤blico,聽y

(c)聽established procedures and structures to handle complaints about infringements of the code or the manner in which the code has been, or is being, implemented by a controller or processor, and to make those procedures and structures transparent to data subjects and the public; and

d) ha demostrado, a satisfacci贸n de la autoridad de control competente, que sus funciones y cometidos no dan lugar a conflicto de intereses.

(d)聽demonstrated to the satisfaction of the competent supervisory authority that its tasks and duties do not result in a conflict of interests.

3. La autoridad de control competente someter谩 al Comit茅, con arreglo al mecanismo de coherencia a que se refiere el art铆culo聽63, el proyecto que fije los criterios de acreditaci贸n de un organismo a que se refiere el apartado聽1 del presente art铆culo.

3. The competent supervisory authority shall submit the draft requirements for accreditation of a body as referred to in paragraph聽1 of this Article to the Board pursuant to the consistency mechanism referred to in Article聽63.

Textos enlazados

4. Sin perjuicio de las funciones y los poderes de la autoridad de control competente y de lo dispuesto en el cap铆tulo聽VIII, un organismo a tenor del apartado聽1 del presente art铆culo deber谩, con sujeci贸n a garant铆as adecuadas, tomar las medidas oportunas en caso de infracci贸n del c贸digo por un responsable o encargado del tratamiento, incluida la suspensi贸n o exclusi贸n de este. Informar谩 de dichas medidas y de las razones de las mismas a la autoridad de control competente.

4. Without prejudice to the tasks and powers of the competent supervisory authority and the provisions of Chapter聽VIII, a body as referred to in paragraph 1 of this Article shall, subject to appropriate safeguards, take appropriate action in cases of infringement of the code by a controller or processor, including suspension or exclusion of the controller or processor concerned from the code. It shall inform the competent supervisory authority of such actions and the reasons for taking them.

5. La autoridad de control competente revocar谩 la acreditaci贸n de un organismo a tenor del apartado聽1 si las condiciones de la acreditaci贸n no se cumplen o han dejado de cumplirse, o si la actuaci贸n de dicho organismo infringe el presente Reglamento.

5. The competent supervisory authority shall revoke the accreditation of a body as referred to in paragraph 1 if the requirements for accreditation are not, or are no longer, met or where actions taken by the body infringe this Regulation.

6. El presente art铆culo no se aplicar谩 al tratamiento realizado por autoridades y organismos p煤blicos.

6. This Article shall not apply to processing carried out by public authorities and bodies.

ISO 27701 Ley de Directrices y caso Deja un comentario
ISO 27701

(EN) ISO/IEC 27701, adopted in 2019, added a requirement additional to ISO/IEC 27001, section 4.1.

Here is the relevant paragraph to article 41 GDPR:

5.2.1 Understanding the organization and its context

The organization shall include among its interested parties (see ISO/IEC 27001:2013, 4.2), those parties having interests or responsibilities associated with the processing of PII, including the PII principals.


para acceder al texto completo

Ley de Directrices y caso Deja un comentario
[js-disqus]