导航
GDPR > 第 60 條. 領導監管機關與其他相關監管機關間之合作
下载PDF

第 60 條 GDPR. 領導監管機關與其他相關監管機關間之合作

Article 60 GDPR. Cooperation between the lead supervisory authority and the other supervisory authorities concerned

1. 領導監管機關應依本條與其他相關監管機關合作並致力於達成共 識。領導監管機關及相關監管機關應彼此交換所有相關之資訊。

1. The lead supervisory authority shall cooperate with the other supervisory authorities concerned in accordance with this Article in an endeavour to reach consensus. The lead supervisory authority and the supervisory authorities concerned shall exchange all relevant information with each other.

2. 領導監管機關得於任何時候請求其他相關監管機關依第 61條提供 互助,並得依第 62 條採行聯合作業,特別係為了進行調查,或為了 監督關於在其他會員國設立之控管者或處理者之措施的施行。

2. The lead supervisory authority may request at any time other supervisory authorities concerned to provide mutual assistance pursuant to Article 61 and may conduct joint operations pursuant to Article 62, in particular for carrying out investigations or for monitoring the implementation of a measure concerning a controller or processor established in another Member State.

相关文章

3. 領導監督機關應將該事項之相關資訊傳送予其他相關監管機關, 不得遲延。其應提交裁決草案予其他相關監管機關,不得遲延,以獲 得其等之意見並適當考量其等之觀點。

3. The lead supervisory authority shall, without delay, communicate the relevant information on the matter to the other supervisory authorities concerned. It shall without delay submit a draft decision to the other supervisory authorities concerned for their opinion and take due account of their views.

4. 當任一其他相關監管機關在依本條第 3 項受諮詢後四週內表達對 該裁決草案相關且合理之異議時,若領導監管機關不遵循該相關且合 理之異議,或認為該異議不相關或不合理者,則應將該事項提交予第 63 條所述之一致性機制。

4. Where any of the other supervisory authorities concerned within a period of four weeks after having been consulted in accordance with paragraph 3 of this Article, expresses a relevant and reasoned objection to the draft decision, the lead supervisory authority shall, if it does not follow the relevant and reasoned objection or is of the opinion that the objection is not relevant or reasoned, submit the matter to the consistency mechanism referred to in Article 63.

相关文章

5. 當領導監管機關欲遵循該相關且合理之異議時,其應提交修訂裁 決草案予其他相關監管機關以獲得其等之意見。該修訂裁決草案應受 第 4 項所述程序之約束於兩週內為之。

5. Where the lead supervisory authority intends to follow the relevant and reasoned objection made, it shall submit to the other supervisory authorities concerned a revised draft decision for their opinion. That revised draft decision shall be subject to the procedure referred to in paragraph 4 within a period of two weeks.

6. 當無任何其他相關監管機關於第 4 項及第 5 項所述之期限內對領 導監管機關所提交之裁決草案提出異議者,應視為領導監管機關及相 關監管機關同意該裁決草案並應受其拘束。

6. Where none of the other supervisory authorities concerned has objected to the draft decision submitted by the lead supervisory authority within the period referred to in paragraphs 4 and 5, the lead supervisory authority and the supervisory authorities concerned shall be deemed to be in agreement with that draft decision and shall be bound by it.

7. 領導監督機關應依其情形通過該裁決並告知控管者或處理者之主 要分支機構或單一分支機構,並向其他相關監管機關及委員會通知該 裁決,包括扼要之相關事實及理由。受理申訴之監管機關應向申訴人 通知該裁決。

7. The lead supervisory authority shall adopt and notify the decision to the main establishment or single establishment of the controller or processor, as the case may be and inform the other supervisory authorities concerned and the Board of the decision in question, including a summary of the relevant facts and grounds. The supervisory authority with which a complaint has been lodged shall inform the complainant on the decision.

ISO 27701
相关文章

8. 當申訴遭駁回或不予受理時,第 7 項之規定不適用之,受理申訴 之監管機關應通過該裁決並將其告知申訴人,並應通知控管者。

8. By derogation from paragraph 7, where a complaint is dismissed or rejected, the supervisory authority with which the complaint was lodged shall adopt the decision and notify it to the complainant and shall inform the controller thereof.

9. 若領導監管機關及相關監管機關同意駁回或不受理部分申訴而僅 對部分申訴採取行動,則應對該事項之每個部分採取個別之裁決。領 導監管機關應通過與控管者有關行動相關之裁決,且應將該裁決告知 控管者或處理者之主要分支機構或單一分支機構,並應通知申訴人, 而申訴人之監管機關應通過關於駁回或不受理該申訴部分之裁決,並 應將該裁決告知申訴人且通知控管者或處理者。

9. Where the lead supervisory authority and the supervisory authorities concerned agree to dismiss or reject parts of a complaint and to act on other parts of that complaint, a separate decision shall be adopted for each of those parts of the matter. The lead supervisory authority shall adopt the decision for the part concerning actions in relation to the controller, shall notify it to the main establishment or single establishment of the controller or processor on the territory of its Member State and shall inform the complainant thereof, while the supervisory authority of the complainant shall adopt the decision for the part concerning dismissal or rejection of that complaint, and shall notify it to that complainant and shall inform the controller or processor thereof.

10. 在依第 7 項及第 9 項受告知領導監管機關之裁決後,控管者及處 理者應採取必要措施以確保其所有於歐盟境內之分支機構的處理活 動皆有遵守該裁決。控管者或處理者應將為遵守該裁決所採取之措施 告知領導監管機關,領導監管機關並應通知其他相關監管機關。

10. After being notified of the decision of the lead supervisory authority pursuant to paragraphs 7 and 9, the controller or processor shall take the necessary measures to ensure compliance with the decision as regards processing activities in the context of all its establishments in the Union. The controller or processor shall notify the measures taken for complying with the decision to the lead supervisory authority, which shall inform the other supervisory authorities concerned.

11. 若在特殊情況下,相關監管機關有理由認為有緊急必要採取行動以保護資料主體之利益者,應適用第 66 條所述之緊急程序。

11. Where, in exceptional circumstances, a supervisory authority concerned has reasons to consider that there is an urgent need to act in order to protect the interests of data subjects, the urgency procedure referred to in Article 66 shall apply.

12. 領導監管機關及其他相關監管機關應使用標準化格式,以電子方 式互相提供本條所需之資訊。

12. The lead supervisory authority and the other supervisory authorities concerned shall supply the information required under this Article to each other by electronic means, using a standardised format.

献技 指南和案例法 发表评论
献技

(124) 凡個人資料之處理係由控管者或處理者於歐盟境內之分支機 構所為,且該控管者或處理者在一個以上之會員國設立分支機構,或 凡資料處理係由控管者或處理者在歐盟境內之單一分支機構所為,而 該處理顯然影響或可能顯然影響一個以上會員國之資料主體者,該控 管者或處理者之主要分支機構或該單一分支機構之監管機關應擔任 領導機關之角色。因控管者或處理者在該會員國境內設有分支機構、 或因居住於該會員國境內之資料主體受到影響,或因已對該會員國之 監管機關提出申訴時,該領導機關應與其他相關機關合作。當資料主 體並非居住於某會員國,而對該國之監管機關提出申訴者,該監管機 關亦應屬相關監管機關。在委員會所負頒佈能涵蓋本規則適用所生任 何疑義之指導原則的任務中,其應得特別在考量因素之判斷標準上頒 佈指導原則,以確認該資料處理是否顯然影響一個以上會員國之資料 主體,以及何者能構成相關且合理之異議。

(124) Where the processing of personal data takes place in the context of the activities of an establishment of a controller or a processor in the Union and the controller or processor is established in more than one Member State, or where processing taking place in the context of the activities of a single establishment of a controller or processor in the Union substantially affects or is likely to substantially affect data subjects in more than one Member State, the supervisory authority for the main establishment of the controller or processor or for the single establishment of the controller or processor should act as lead authority. It should cooperate with the other authorities concerned, because the controller or processor has an establishment on the territory of their Member State, because data subjects residing on their territory are substantially affected, or because a complaint has been lodged with them. Also where a data subject not residing in that Member State has lodged a complaint, the supervisory authority with which such complaint has been lodged should also be a supervisory authority concerned. Within its tasks to issue guidelines on any question covering the application of this Regulation, the Board should be able to issue guidelines in particular on the criteria to be taken into account in order to ascertain whether the processing in question substantially affects data subjects in more than one Member State and on what constitutes a relevant and reasoned objection.

(125) 關於執行依本規則所授予之權力的措施,領導機關應有權限通 過有拘束力之裁決。在身為領導機關之資格下,監管機關應於裁決過 程中密集參與並協調相關監管機關。當該裁決係全部或部分駁回資料 主體之申訴時,受理該申訴之監管機關即應採納該裁決。

(125) The lead authority should be competent to adopt binding decisions regarding measures applying the powers conferred on it in accordance with this Regulation. In its capacity as lead authority, the supervisory authority should closely involve and coordinate the supervisory authorities concerned in the decision-making process. Where the decision is to reject the complaint by the data subject in whole or in part, that decision should be adopted by the supervisory authority with which the complaint has been lodged.

(126) 該裁決應經領導監管機關及相關監管機關共同同意,且應係直 接針對控管者或處理者之主要分支機構或單一分支機構,並對該控管 者或處理者發生拘束力。控管者或處理者應採取必要之措施來確保本 規則之遵循,及領導監管機關對於控管者或處理者之主要分支機構關 於歐盟境內資料處理所為裁決之執行。

(126) The decision should be agreed jointly by the lead supervisory authority and the supervisory authorities concerned and should be directed towards the main or single establishment of the controller or processor and be binding on the controller and processor. The controller or processor should take the necessary measures to ensure compliance with this Regulation and the implementation of the decision notified by the lead supervisory authority to the main establishment of the controller or processor as regards the processing activities in the Union.

(127) 當控管者或處理者設立於一個以上會員國之分支機構,但特定 資料處理之標的僅涉及於單一會員國境內所為之處理,且僅涉及該單 一會員國境內之資料主體時,例如,涉及在某一會員國之特定勞雇環 境下之受雇者的個人資料時,非作為領導監管機關之各監管機關應有 權限處理該等當地案件。在該等案件中,監管機關應將該案件通知領 導監管機關,不得遲延。領導監管機關於受通知後,應決定是否由其 依照領導監管機關及其他相關監管機關間合作之相關規範來處理該 案件(即「單一窗口機制」),或係由為通知之監管機關以當地層級 來處理該案件。在領導監管機關決定是否將由其處理該案件時,其應 考量在為通知之監管機關所屬之會員國境內是否有控管者或處理者 之分支機構,以確保對於控管者或處理者所為之裁決能有效施行。當 領導監管機關決定處理該案件時,應給予為通知之監管機關有提交裁 決草案之機會,而應由領導監管機關在單一窗口機制下準備其裁決草 案時盡最大程度考量之。

(127) Each supervisory authority not acting as the lead supervisory authority should be competent to handle local cases where the controller or processor is established in more than one Member State, but the subject matter of the specific processing concerns only processing carried out in a single Member State and involves only data subjects in that single Member State, for example, where the subject matter concerns the processing of employees' personal data in the specific employment context of a Member State. In such cases, the supervisory authority should inform the lead supervisory authority without delay about the matter. After being informed, the lead supervisory authority should decide, whether it will handle the case pursuant to the provision on cooperation between the lead supervisory authority and other supervisory authorities concerned (‘one-stop-shop mechanism’), or whether the supervisory authority which informed it should handle the case at local level. When deciding whether it will handle the case, the lead supervisory authority should take into account whether there is an establishment of the controller or processor in the Member State of the supervisory authority which informed it in order to ensure effective enforcement of a decision vis-à-vis the controller or processor. Where the lead supervisory authority decides to handle the case, the supervisory authority which informed it should have the possibility to submit a draft for a decision, of which the lead supervisory authority should take utmost account when preparing its draft decision in that one-stop-shop mechanism.

(128) 有關領導監管機關及單一窗口機制之規範不應適用於公務機 關或私人基於公共利益所為之資料處理的情形。在該等案件中唯一有 權限行使依本規則所授予之權力的監管機關,應係該公務機關或私人 設立所在會員國之監管機關。

(128) The rules on the lead supervisory authority and the one-stop-shop mechanism should not apply where the processing is carried out by public authorities or private bodies in the public interest. In such cases the only supervisory authority competent to exercise the powers conferred to it in accordance with this Regulation should be the supervisory authority of the Member State where the public authority or private body is established.

(130) 當受理申訴之監管機關並非領導監管機關時,領導監管機關應 依照本規則所定合作及一致性之相關規範,與受理申訴之監管機關緊 密合作。在該等案件中,當欲採取產生法律效果之措施,包括處以行 政罰鍰時,領導監管機關應盡可能考量受理申訴且應保有權限在其所 屬會員國境內進行調查之監管機關的立場,並與該管監管機關保持聯 繫。

(130) Where the supervisory authority with which the complaint has been lodged is not the lead supervisory authority, the lead supervisory authority should closely cooperate with the supervisory authority with which the complaint has been lodged in accordance with the provisions on cooperation and consistency laid down in this Regulation. In such cases, the lead supervisory authority should, when taking measures intended to produce legal effects, including the imposition of administrative fines, take utmost account of the view of the supervisory authority with which the complaint has been lodged and which should remain competent to carry out any investigation on the territory of its own Member State in liaison with the competent supervisory authority.

(131) 當有另一監管機關應就控管者或處理者之資料處理活動擔任 領導監管機關,但申訴之具體標的或可能之違法行為僅涉及到該控管 者或處理者在受理申訴或所調查出可能違法行為所在會員國之處理 活動,且該標的並不會或較無可能對其他會員國之資料主體造成重大 影響時,該受理申訴或查得或由其他管道得知疑似有違反本規則情況 之監管機關應與該控管者尋求友好解決,若證實前述為不可行時,則 應行使其完整之權力。此應包括:在該監管機關所屬會員國境內或就 該會員國境內之資料主體所為之特定資料處理;在提供商品或服務的 情況下特別針對該監管機關所屬會員國境內之資料主體所為之資料 處理;或應以會員國法所課予之相關法律義務進行評估之資料處理。

(131) Where another supervisory authority should act as a lead supervisory authority for the processing activities of the controller or processor but the concrete subject matter of a complaint or the possible infringement concerns only processing activities of the controller or processor in the Member State where the complaint has been lodged or the possible infringement detected and the matter does not substantially affect or is not likely to substantially affect data subjects in other Member States, the supervisory authority receiving a complaint or detecting or being informed otherwise of situations that entail possible infringements of this Regulation should seek an amicable settlement with the controller and, if this proves unsuccessful, exercise its full range of powers. This should include: specific processing carried out in the territory of the Member State of the supervisory authority or with regard to data subjects on the territory of that Member State; processing that is carried out in the context of an offer of goods or services specifically aimed at data subjects in the territory of the Member State of the supervisory authority; or processing that has to be assessed taking into account relevant legal obligations under Member State law.

指南和案例法 发表评论