Navigazzjoni
RĠPD (GDPR) > Premessa 77
Download PDF

Premessa 77

Recital 77

(77) Il-gwida dwar l-implimentazzjoni ta’ miżuri xierqa u dwar kif tintwera l-konformità mill-kontrollur jew il-proċessur, speċjalment fir-rigward tal-identifikazzjoni tar-riskju relatat mal-ipproċessar, il-valutazzjoni tagħhom f’termini ta’ oriġini, natura, probabbiltà u gravità, u l-identifikazzjoni tal-aħjar prattiki biex jittaffa r-riskju, tista’ tingħata, b’mod partikolari, permezz ta’ kodiċijiet approvati tal-kondotta, ċertifikazzjonijiet approvati, linji gwida tal-Bord jew indikazzjonijiet mogħtija minn uffiċjal għall-protezzjoni tad-data.

Il-Bord jista’ wkoll joħroġ linji gwida dwar operazzjonijiet ta’ pproċessar li huma kkunsidrati bħala li probabbli ma jirriżultawx f’riskju għoli għad-drittijiet u l-libertajiet ta’ persuni fiżiċi u jindikaw liema miżuri jistgħu jkunu biżżejjed f’dawn il-każijiet biex jindirizzaw tali riskju.

(77) Guidance on the implementation of appropriate measures and on the demonstration of compliance by the controller or the processor, especially as regards the identification of the risk related to the processing, their assessment in terms of origin, nature, likelihood and severity, and the identification of best practices to mitigate the risk, could be provided in particular by means of approved codes of conduct, approved certifications, guidelines provided by the Board or indications provided by a data protection officer.

The Board may also issue guidelines on processing operations that are considered to be unlikely to result in a high risk to the rights and freedoms of natural persons and indicate what measures may be sufficient in such cases to address such risk.