RĠPD (GDPR)
>
Artikolu 41. Monitoraġġ ta' kodiċijiet ta' kondotta approvati
Artikolu 41 RĠPD (GDPR). Monitoraġġ ta' kodiċijiet ta' kondotta approvati
Article 41 GDPR. Monitoring of approved codes of conduct
1. Mingħajr preġudizzju għall-kompiti u s-setgħat tal-awtorità superviżorja kompetenti taħt l-Artikoli 57 u 58, il-monitoraġġ tal-konformità ma’ kodiċi ta’ kondotta skont l-Artikolu 40, jista’ jitwettaq minn korp li għandu l-livell xieraq ta’ għarfien espert b’rabta mas-suġġett tal-kodiċi u huwa akkreditat għal dak il-għan mill-awtorità superviżorja kompetenti.
1. Without prejudice to the tasks and powers of the competent supervisory authority under Articles 57 and 58, the monitoring of compliance with a code of conduct pursuant to Article 40 may be carried out by a body which has an appropriate level of expertise in relation to the subject-matter of the code and is accredited for that purpose by the competent supervisory authority.
2. Korp kif imsemmi fil-paragrafu 1 jista’ jiġi akkreditat biex jimmonitorja konformita’ ma’ kodiċi ta’ kondotta fejn dak il-korp:
2. A body as referred to in paragraph 1 may be accredited to monitor compliance with a code of conduct where that body has:
(a) ikun wera l-indipendenza u l-għarfien espert tiegħu b’rabta mas-suġġett tal-kodiċi għas-sodisfazzjon tal-awtorità superviżorja kompetenti;
(a) demonstrated its independence and expertise in relation to the subject-matter of the code to the satisfaction of the competent supervisory authority;
(b) ikun stabbilixxa proċeduri li jippermettu li jivvaluta l-eliġibbiltà tal-kontrolluri u l-proċessuri kkonċernati bl-applikazzjoni tal-kodiċi, biex jissorveljaw il-konformità tagħhom mad-dispożizzjonijiet tiegħu u biex iwettqu rieżami tal-attività tiegħu b’mod perjodiku;
(b) established procedures which allow it to assess the eligibility of controllers and processors concerned to apply the code, to monitor their compliance with its provisions and to periodically review its operation;
(c) ikun stabbilixxa proċeduri u strutturi biex jittratta lmenti dwar ksur tal-kodiċi jew il-mod li bih il-kodiċi ġie, jew qed jiġi, implimentat minn kontrollur jew proċessur, u biex dawk il-proċeduri u strutturi jkunu trasparenti għas-suġġetti tad-data u għall-pubbliku; u
(c) established procedures and structures to handle complaints about infringements of the code or the manner in which the code has been, or is being, implemented by a controller or processor, and to make those procedures and structures transparent to data subjects and the public; and
(d) huwa wera għas-sodisfazzjon tal-awtorità superviżorja kompetenti li l-kompiti u d-dmirijiet tiegħu ma jirriżultawx f’konflitt ta’ interessi.
(d) demonstrated to the satisfaction of the competent supervisory authority that its tasks and duties do not result in a conflict of interests.
3. L-awtorità superviżorja kompetenti għandha tippreżenta l-abbozz ta’ kriterji għall-akkreditazzjoni ta’ korp kif imsemmi fil-paragrafu 1 ta’ dan l-Artikolu għall-Bord skont il-mekkaniżmu ta’ konsistenza msemmi fl-Artikolu 63.
3. The competent supervisory authority shall submit the draft requirements for accreditation of a body as referred to in paragraph 1 of this Article to the Board pursuant to the consistency mechanism referred to in Article 63.
4. Mingħajr preġudizzju għall-kompiti u s-setgħat tal-awtorità superviżorja kompetenti u għad-dispożizzjonijiet tal-Kapitolu VIII, korp kif imsemmi fil-paragrafu 1 ta’ dan l-Artikolu għandu, soġġett għas-salvagwardji xierqa, jieħu azzjoni xierqa f’każijiet ta’ ksur tal-kodiċi minn kontrollur jew proċessur, inkluż is-sospensjoni jew l-esklużjoni tal-kontrollur jew proċessur kkonċernat mill-kodiċi. Huwa għandu jinforma lill-awtorità superviżorja kompetenti b’dawn l-azzjonijiet u r-raġunijiet għaliex ittieħdu.
4. Without prejudice to the tasks and powers of the competent supervisory authority and the provisions of Chapter VIII, a body as referred to in paragraph 1 of this Article shall, subject to appropriate safeguards, take appropriate action in cases of infringement of the code by a controller or processor, including suspension or exclusion of the controller or processor concerned from the code. It shall inform the competent supervisory authority of such actions and the reasons for taking them.
5. L-awtorità superviżorja kompetenti għandha tirrevoka l-akkreditazzjoni ta’ korp kif imsemmi fil-paragrafu 1 jekk il-kondizzjonijiet għall-akkreditazzjoni ma jkunux milħuqa jew m’għadhomx jintlaħqu jew fejn azzjonijiet meħuda mill-korp jiksru dan ir-Regolament.
5. The competent supervisory authority shall revoke the accreditation of a body as referred to in paragraph 1 if the requirements for accreditation are not, or are no longer, met or where actions taken by the body infringe this Regulation.
Regolament Ġenerali dwar il-Protezzjoni tad-Data (RĠPD, GDPR)
General Data Protection Regulation (EU GDPR)
The latest consolidated version of the Regulation with corrections by Corrigendum, OJ L 127, 23.5.2018, p. 2 ((EU) 2016/679). Source: EUR-lex.
(EN) Url-link to highlighted text was copied to the clipboard!
(EN) Preparing download...
(EN) ISO/IEC 27701, adopted in 2019, added a requirement additional to ISO/IEC 27001, section 4.1.
Here is the relevant paragraph to article 41 GDPR:
5.2.1 Understanding the organization and its context
The organization shall include among its interested parties (see ISO/IEC 27001:2013, 4.2), those parties having interests or responsibilities associated with the processing of PII, including the PII principals.
(EN) […]
(EN) Sign in
to read the full text