Nawigacja
RODO > Artyku艂 19. Obowi膮zek powiadomienia o sprostowaniu lub usuni臋ciu danych osobowych lub o ograniczeniu przetwarzania
Pobierz jako plik PDF

Artyku艂 19 RODO. Obowi膮zek powiadomienia o sprostowaniu lub usuni臋ciu danych osobowych lub o ograniczeniu przetwarzania

Article 19 GDPR. Notification obligation regarding rectification or erasure of personal data or restriction of processing

Administrator informuje o sprostowaniu lub usuni臋ciu danych osobowych lub ograniczeniu przetwarzania, kt贸rych dokona艂 zgodnie z art. 16, art. 17 ust. 1 i art. 18, ka偶dego odbiorc臋, kt贸remu ujawniono dane osobowe, chyba 偶e oka偶e si臋 to niemo偶liwe lub b臋dzie wymaga膰 niewsp贸艂miernie du偶ego wysi艂ku. Administrator informuje osob臋, kt贸rej dane dotycz膮, o tych odbiorcach, je偶eli osoba, kt贸rej dane dotycz膮, tego za偶膮da.

The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article聽16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it.

Powi膮zane teksty
Komentarz eksperta ISO 27701 Wytyczne & Case Law zostaw komentarz
Komentarz eksperta

(EN) Article 19 includes a notification obligation, which should not be confused with the specific personal data breach notification obligation (article 33). It is a mechanism that gives full effect to other provisions of the General Data Protection Regulation, ensuring that third parties are informed about actions taken by the controller regarding personal data (recital 66).


aby uzyska膰 dost臋p do pe艂nego tekstu

(EN) Author
Louis-Philippe Gratton
(EN) Louis-Philippe Gratton PhD, LLM
(EN) Privacy Expert
ISO 27701

(EN) ISO/IEC 27701, adopted in 2019, added additional ISO/IEC 27002 guidance for PII controllers.

Here is the relevant paragraph to article 19 GDPR:

7.3.7 PII controllers’ obligations to inform third parties

Control

The organization should inform third parties with whom PII has been shared of any modification, withdrawal or objections pertaining to the shared PII, and implement appropriate policies, procedures and/or mechanisms to do so.

Implementation guidance

The organization should take appropriate steps, bearing in mind the available technology, to inform third parties of any modification or withdrawal of consent, or objections pertaining to the shared PII.


aby uzyska膰 dost臋p do pe艂nego tekstu

Wytyczne & Case Law zostaw komentarz
[js-disqus]