Navigation
GDPR > 제10조. 범죄경력 및 범죄행위에 관한 개인정보의 처리
Download PDF

제10조 GDPR. 범죄경력 및 범죄행위에 관한 개인정보의 처리

범죄경력 및 범죄행위 또는 제6조(1)에 근거한 보안조치와 관련한 개인정보의 처리는 공공기관의 규제 하에서만 수행될 수 있거나, 해당 처리가 정보주체의 권리와 자유를 위한 적절한 안전조치를 규정하는 유럽연합 또는 회원국 법률에 승인되는 경우 수행될 수 있다. 종합 범죄경력 기록은 공공기관의 규제 하에서만 보관될 수 있다.

Related
Expert commentary ISO 27701 Guidelines & Case Law Leave a comment
Expert commentary

Criminal offence data are treated specifically by the General Data Protection Regulation. They represent sensitive data that must be dealt with appropriate care, similarly to special categories of personal data (article 9). They obey particular rules, but they do not expressly fall under thespecial categories of personal data”. They have their own legal regime and they do not benefit from similar exceptions as the aforementioned data [article 9 (2)].

 

[…]


to read the full text

Author
Louis-Philippe Gratton
Louis-Philippe Gratton PhD, LLM
Privacy Expert
ISO 27701

ISO/IEC 27701, adopted in 2019, added additional ISO/IEC 27002 guidance for PII controllers.

Here is the relevant paragraph to article 10 GDPR:

7.2.2 Identify lawful basis

Control

The organization should determine, document and comply with the relevant lawful basis for the processing of PII for the identified purposes.

Implementation guidance

Some jurisdictions require the organization to be able to demonstrate that the lawfulness of processing was duly established before the processing.

The legal basis for the processing of PII can include:

[…]


to read the full text

Guidelines & Case Law Leave a comment
[js-disqus]