Artikolu 23 📖 RĠPD (GDPR). Restrizzjonijiet

Artikolu 23 RĠPD (GDPR). Restrizzjonijiet

Article 23 GDPR. Restrictions

1. Il-liġi tal-Unjoni jew ta’ Stat Membru li għaliha jkun soġġett il-kontrollur jew il-proċessur tad-data tista’ tirrestrinġi permezz ta’ miżura leġiżlattiva l-kamp ta’ applikazzjoni tal-obbligi u d-drittijiet previsti fl-Artikoli 12 sa 22 u l-Artikolu 34, kif ukoll l-Artikolu 5 sakemm id-dispożizzjonijiet tiegħu jikkorrispondu mad-drittijiet u l-obbligi previsti fl-Artikoli 12 sa 22, meta tali restrizzjoni tirrispetta l-essenza tad-drittijiet u l-libertajiet fundamentali u hija miżura meħtieġa u proporzjonata f’soċjetà demokratika għas-salvagwardja ta’:

1. Union or Member State law to which the data controller or processor is subject may restrict by way of a legislative measure the scope of the obligations and rights provided for in Articles 12 to 22 and Article 34, as well as Article 5 in so far as its provisions correspond to the rights and obligations provided for in Articles 12 to 22, when such a restriction respects the essence of the fundamental rights and freedoms and is a necessary and proportionate measure in a democratic society to safeguard:

Testi relatati

Artikolu 5 RĠPD (GDPR). Prinċipji relatati mal-ipproċessar ta' data personali

Article 5 GDPR. Principles relating to processing of personal data

Artikolu 12 RĠPD (GDPR). Informazzjoni, komunikazzjoni u modalitajiet trasparenti għall-eżerċizzju tad-drittijiet tas-suġġett tad-data

Article 12 GDPR. Transparent information, communication and modalities for the exercise of the rights of the data subject

Artikolu 13 RĠPD (GDPR). Informazzjoni li għandha tiġi pprovduta fejn tinġabar data personali mis-suġġett tad-data

Article 13 GDPR. Information to be provided where personal data are collected from the data subject

Artikolu 14 RĠPD (GDPR). Informazzjoni li għandha tiġi pprovduta fejn id-data personali ma tkunx inkisbet mis-suġġett tad-data

Article 14 GDPR. Information to be provided where personal data have not been obtained from the data subject

Artikolu 15 RĠPD (GDPR). Dritt ta' aċċess mis-suġġett tad-data

Article 15 GDPR. Right of access by the data subject

Artikolu 16 RĠPD (GDPR). Dritt għar-rettifika

Article 16 GDPR. Right to rectification

Artikolu 17 RĠPD (GDPR). Dritt għal tħassir (“dritt li wieħed jintesa”)

Article 17 GDPR. Right to erasure (‘right to be forgotten’)

Artikolu 18 RĠPD (GDPR). Dritt għal restrizzjoni tal-ipproċessar

Article 18 GDPR. Right to restriction of processing

Artikolu 19 RĠPD (GDPR). Obbligu ta' notifika rigward rettifika jew tħassir ta' data personali jew restrizzjoni tal-ipproċessar

Article 19 GDPR. Notification obligation regarding rectification or erasure of personal data or restriction of processing

Artikolu 20 RĠPD (GDPR). Dritt għall-portabbiltà tad-data

Article 20 GDPR. Right to data portability

Artikolu 21 RĠPD (GDPR). Dritt ta' oġġezzjoni

Article 21 GDPR. Right to object

Artikolu 22 RĠPD (GDPR). Teħid ta' deċiżjonijiet individwali awtomatizzati, inkluż tfassil ta' profili

Article 22 GDPR. Automated individual decision-making, including profiling

Artikolu 34 RĠPD (GDPR). Komunikazzjoni ta' ksur ta' data personali lis-suġġett tad-data

Article 34 GDPR. Communication of a personal data breach to the data subject

(a) is-sigurtà nazzjonali;

(a) national security;

Linji ta 'Gwida & Ġurisprudenza

(EN)

Case Law

CJEU, La Quadrature du Net et al./Premier ministre et al., C-511/18, C-512/18, C-520/18 (2020).

CJEU, Privacy International/Secretary of State for Foreign and Commonwealth Affairs, C-623/17 (2020).

(b) id-difiża;

(b) defence;

(c) is-sigurtà pubblika;

(c) public security;

(d) il-prevenzjoni, l-investigazzjoni, is-sejbien jew il-prosekuzzjoni ta’ reati kriminali jew l-eżekuzzjoni ta’ pieni kriminali, inkluż is-salvagwardji kontra u l-prevenzjoni ta’ theddidiet għas-sigurtà pubblika;

(d) the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security;

(e) objettivi importanti oħrajn ta’ interess pubbliku ġenerali tal-Unjoni jew ta’ Stat Membru, b’mod partikolari interess ekonomiku jew finanzjarju importanti tal-Unjoni jew ta’ Stat Membru, inkluż, kwistjonijiet monetarji, baġitarji u fiskali, is-saħħa pubblika u s-sigurtà soċjali;

(e) other important objectives of general public interest of the Union or of a Member State, in particular an important economic or financial interest of the Union or of a Member State, including monetary, budgetary and taxation a matters, public health and social security;

(f) il-protezzjoni tal-indipendenza ġudizzjarja u l-proċedimenti ġudizzjarji;

(f) the protection of judicial independence and judicial proceedings;

(g) il-prevenzjoni, l-investigazzjoni, is-sejbien u l-prosekuzzjoni ta’ ksur ta’ etika għal professjonijiet regolati;

(g) the prevention, investigation, detection and prosecution of breaches of ethics for regulated professions;

(h) funzjoni ta’ monitoraġġ, ispezzjoni jew regolatorja marbuta, anki jekk okkażjonalment, mal-eżerċizzju ta’ awtorità uffiċjali f’każijiet imsemmija fil-punti (a) sa (e) u (g);

(h) a monitoring, inspection or regulatory function connected, even occasionally, to the exercise of official authority in the cases referred to in points (a) to (e) and (g);

(i) il-protezzjoni tas-suġġett tad-data jew id-drittijiet u l-libertajiet ta’ persuni oħrajn;

(i) the protection of the data subject or the rights and freedoms of others;

(j) l-infurzar ta’ pretensjonijiet skont id-dritt ċivili.

(j) the enforcement of civil law claims.

2. B’mod partikolari, kull miżura leġiżlattiva msemmija fil-paragrafu 1 għandu jkun fiha dispożizzjonijiet speċifiċi tal-inqas, fejn rilevanti, dwar:

2. In particular, any legislative measure referred to in paragraph 1 shall contain specific provisions at least, where relevant, as to:

(a) il-finijiet tal-ipproċessar jew il-kategoriji tal-ipproċessar,

(a) the purposes of the processing or categories of processing;

(b) il-kategoriji ta’ data personali,

(b) the categories of personal data;

(c) l-ambitu tar-restrizzjonijiet introdotti,

(c) the scope of the restrictions introduced;

(d) is-salvagwardji għall-prevenzjoni tal-abbuż jew tal-aċċess jew it-trasferiment illegali;

(d) the safeguards to prevent abuse or unlawful access or transfer;

(e) l-ispeċifikazzjoni tal-kontrollur jew il-kategoriji tal-kontrolluri,

(e) the specification of the controller or categories of controllers;

(f) il-perijodi ta’ ħażna u s-salvagwardji applikabbli b’kont meħud tan-natura, l-ambitu u l-finijiet tal-ipproċessar jew il-kategoriji tal-ipproċessar;

(f) the storage periods and the applicable safeguards taking into account the nature, scope and purposes of the processing or categories of processing;

Testi relatati

Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0.

2.1.3.3 «nature, scope, context and purpose of processing»

28. In short, the concept of nature can be understood as the inherent[11] characteristics of the processing. The scope refers to the size and range of the processing. The context relates to the circumstances of the processing, which may influence the expectations of the data subject, while the purpose pertains to the aims of the processing.

_{[11] Examples are special categories personal data, automatic decision-making, skewed power relations, unpredictable processing, difficulties for the data subject to exercise the rights, etc.}

(g) ir-riskji għad-drittijiet u l-libertajiet tas-suġġetti tad-data; u

(g) the risks to the rights and freedoms of data subjects; and

(h) id-dritt tas-suġġetti tad-data li jkunu infurmati dwar ir-restrizzjoni, sakemm dak ma jistax jippreġudika l-finijiet tar-restrizzjoni.

(h) the right of data subjects to be informed about the restriction, unless that may be prejudicial to the purpose of the restriction.

Regolament Ġenerali dwar il-Protezzjoni tad-Data (RĠPD, GDPR)

General Data Protection Regulation (EU GDPR)

The latest consolidated version of the Regulation with corrections by Corrigendum, OJ L 127, 23.5.2018, p. 2 ((EU) 2016/679). Source: EUR-lex.

Premessi Linji ta 'Gwida & Ġurisprudenza Ħalli kumment

Premessi

(73) Ir-restrizzjonijiet dwar prinċipji speċifiċi u d-drittijiet ta' informazzjoni, aċċess għal u rettifika jew tħassir ta' data personali, id-dritt għall-portabbiltà tad-data, id-dritt għall-oġġezzjoni, id-deċiżjonijiet ibbażati fuq it-tfassil ta' profili, kif ukoll il-komunikazzjoni ta' ksur ta' data personali lil suġġett tad-data u ċerti obbligi relatati tal-kontrolluri jistgħu jiġu imposti mil-liġi tal-Unjoni jew ta' Stat Membru, sa fejn ikun meħtieġ u proporzjonat f'soċjetà demokratika biex tiġi ssalvagwardjata s-sigurtà pubblika, inkluża l-protezzjoni tal-ħajja tal-bniedem speċjalment b'reazzjoni għal diżastri naturali jew ikkawżati mill-bniedem, il-prevenzjoni, l-investigazzjoni u l-prosekuzzjoni ta' reati kriminali jew l-eżekuzzjoni ta' pieni kriminali, inkluż is-salvagwardja kontra u l-prevenzjoni tat-theddidiet għas-sigurtà pubblika, jew ksur ta' etika għal professjonijiet regolati, objettivi importanti oħrajn ta' interessi pubbliku ġenerali tal-Unjoni jew ta' Stat Membru, b'mod partikolari interess ekonomiku jew finanzjarju importanti tal-Unjoni jew ta' Stat Membru, iż-żamma ta' reġistri pubbliċi miżmuma għal raġunijiet ta' interess pubbliku ġenerali, ipproċessar ulterjuri tad-data personali arkivjata sabiex jipprovdi informazzjoni speċifika relatata mal-imġiba politika taħt reġimi preċedenti fi stati totalitarji jew il-protezzjoni tas-suġġett tad-data jew id-drittijiet u l-libertajiet ta' persuni oħrajn, inklużi l-protezzjoni soċjali, is-saħħa pubblika u finijiet umanitarji. Dawk ir-restrizzjonijiet għandhom ikunu konformi mar-rekwiżiti stabbiliti fil-Karta u fil-Konvenzjoni Ewropea għall-Protezzjoni tad-Drittijiet tal-Bniedem u tal-Libertajiet Fundamentali.

(73) Restrictions concerning specific principles and the rights of information, access to and rectification or erasure of personal data, the right to data portability, the right to object, decisions based on profiling, as well as the communication of a personal data breach to a data subject and certain related obligations of the controllers may be imposed by Union or Member State law, as far as necessary and proportionate in a democratic society to safeguard public security, including the protection of human life especially in response to natural or manmade disasters, the prevention, investigation and prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security, or of breaches of ethics for regulated professions, other important objectives of general public interest of the Union or of a Member State, in particular an important economic or financial interest of the Union or of a Member State, the keeping of public registers kept for reasons of general public interest, further processing of archived personal data to provide specific information related to the political behaviour under former totalitarian state regimes or the protection of the data subject or the rights and freedoms of others, including social protection, public health and humanitarian purposes. Those restrictions should be in accordance with the requirements set out in the Charter and in the European Convention for the Protection of Human Rights and Fundamental Freedoms.

Linji ta 'Gwida & Ġurisprudenza

(EN)

Documents

EDPB, Statement on Restrictions on Data Subject Rights in Connection to the State of Emergency in Member States (2020).

EDPB, Guidelines 10/2020 on Restrictions under Article 23 GDPR (2020).

Case Law

CJEU, Draft Agreement between Canada and the European Union, opinion 1/15 (2017).

Ħalli kumment

[js-disqus]