2 Amendments of Birgit SIPPEL related to 2011/0011(COD)
Amendment 1903 #
Proposal for a regulation
Article 28 – paragraph 4 – point b
Article 28 – paragraph 4 – point b
(b) an enterprise or an organisation employing fewer than 250 persons that is processing personal data relating to fewer than 250 data subjects only as an activity ancillary to its main activities.
Amendment 2002 #
Proposal for a regulation
Article 32 – paragraph 3
Article 32 – paragraph 3
3. The communication of a personal data breach to the data subject shall not be required ifcan only be delayed if the information could lead to further circulation of the data concerned, and is to be performed after the controller demonstrates to the satisfaction of the supervisory authority that it has implemented appropriate technological protection measures, and that those measures were applied to the data concerned by the personal data breach. Such technological protection measures shall render the data unintelligible to any person who is not authorised to access it.