导航
GDPR > Recital 45
下载PDF

Recital 45

Recital 45

(45) 個人資料處理係基於控管者為遵守其法定義務所為,或係基於 公共利益為履行任務所必要,或係公務機關行使公權力所必要者,該 處理應具備歐盟法或會員國法之依據。本規則不要求就每一個別之處 理定有具體法律規定。就控管者為遵守其法定義務所為、因公共利益 為履行任務所必要或公務機關行使公權力所必要之數個處理方式明 定其所依據之法律,可謂充分。其亦應由歐盟法或會員國法決定處理 之目的。此外,該法得具體化規定本規則關於個人資料處理之合法性 規範的一般條款、建構控管者之決定性標準、個人資料處理所涉個人 資料之類型、相關個人資料主體、得向其揭露個人資料之實體、限制 之目的、儲存期間及用以確保處理合法性與公正性之其他措施。歐盟 法或會員國法亦應決定,為公共利益執行任務或行使公權力之控管者 是否為公務機關或其他受公法所規範之個人或法人,或於其為公共利 益所為之者時,是否包括為了如公眾健康與社會保障及健康照顧服務 之管理等健康目的者、或依私法者,如職業工會。

(45) Where processing is carried out in accordance with a legal obligation to which the controller is subject or where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, the processing should have a basis in Union or Member State law.

This Regulation does not require a specific law for each individual processing.

A law as a basis for several processing operations based on a legal obligation to which the controller is subject or where processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority may be sufficient.

It should also be for Union or Member State law to determine the purpose of processing.

Furthermore, that law could specify the general conditions of this Regulation governing the lawfulness of personal data processing, establish specifications for determining the controller, the type of personal data which are subject to the processing, the data subjects concerned, the entities to which the personal data may be disclosed, the purpose limitations, the storage period and other measures to ensure lawful and fair processing.

It should also be for Union or Member State law to determine whether the controller performing a task carried out in the public interest or in the exercise of official authority should be a public authority or another natural or legal person governed by public law, or, where it is in the public interest to do so, including for health purposes such as public health and social protection and the management of health care services, by private law, such as a professional association.