[ParlTrack]

Proposal for a regulation
Article 28 – paragraph 1

1. Each controller and processor ~~and, if any, the controller's representative, shall maintain documentation of all processing operations under its responsibil~~shall be able to demonstrate compliance with the provisions of this Regulation on request of the supervisory authority.

2013/03/06
Committee: LIBE

Sophia IN 'T VELD

Proposal for a regulation
Article 28 – paragraph 1 a (new)

1a. Without prejudice to the other provisions of this Regulation, each controller and processor shall maintain documentation on transfers of data to a third country or an international organisation, including the identification of that third country or international organisation, the organisation, enterprise, public organisation or competent authority concerned, the legal basis of the transfer, and, in case of transfers referred to in point (h) of Article 44(1), the documentation of appropriate safeguards.

2013/03/06
Committee: LIBE

Sophia IN 'T VELD

Proposal for a regulation
Article 28 – paragraph 2

2. The documentation shall contain at least the following information: (a) the name and contact details of the controller, or any joint controller or processor, and of the representative, if any; (b) the name and contact details of the data protection officer, if any; (c) the purposes of the processing, including the legitimate interests pursued by the controller where the processing is based on point (f) of Article 6(1); (d) a description of categories of data subjects and of the categories of personal data relating to them; (e) the recipients or categories of recipients of the personal data, including the controllers to whom personal data are disclosed for the legitimate interest pursued by them; (f) where applicable, transfers of data to a third country or an international organisation, including the identification of that third country or international organisation and, in case of transfers referred to in point (h) of Article 44(1), the documentation of appropriate safeguards; (g) a general indication of the time limits for erasure of the different categories of data; (h) the description of the mechanisms referred to in Article 22(3).deleted

2013/03/06
Committee: LIBE

Sophia IN 'T VELD

Proposal for a regulation
Article 28 – paragraph 3

~~3. The controller and the processor and, if any, the controller's representative, shall make the documentation available, on request, to the supervisory authority.~~deleted

2013/03/06
Committee: LIBE

Sophia IN 'T VELD

Proposal for a regulation
Article 28 – paragraph 4

4. The obligations referred to in paragraphs 1 ~~and 2~~ shall not apply to ~~the following controllers and processors: (a)~~ a natural person processing personal data without a commercial interest~~; or (b) an enterprise or an organisation employing fewer than 250 persons that is processing personal data only as an activity ancillary to its main activities~~.

2013/03/06
Committee: LIBE

Sophia IN 'T VELD

Proposal for a regulation
Article 28 – paragraph 5

~~5. The Commission shall be empowered to adopt~~ delegated acts in accordance with Article 86 for the purpose of further specifying the criteria and requirements for the documentation referred to in paragraph 1, to take account of in particular the responsibilities of the controller and the processor and, if any, the controller's representative.

2013/03/06
Committee: LIBE

Sophia IN 'T VELD

Proposal for a regulation
Article 28 – paragraph 6

6. The ~~Commission may lay down standard forms for the documentation referred to in paragraph 1. Those implementing acts shall be adopted in accordance with the examination procedure~~European Data Protection Board shall be entrusted with the task of adopting guidelines for the format of the documentation referred to in ~~Article 87(2)~~paragraph 1.

2013/03/06
Committee: LIBE

7 Amendments of Sophia IN 'T VELD related to 2011/0011(COD)

ParlTrack - 2011-2024