Art. 37 The controller and the processor shall keep records of personal data processing operations carried out by them
Art. 37 The controller and the processor shall keep records of personal data processing operations carried out by them, especially when based on legitimate interest.hanges to guarantees presented as sufficient …
Art. 36 Changes to guarantees presented as sufficient for compliance with the general
Art. 36 Changes to guarantees presented as sufficient for compliance with the general principles of protection and of the data subject’s rights referred to in item II of Art. 33 …
Art. 35 The definition of the content of standard contractual clauses, as well as the verification of specific contractual clauses for a particular transfer
Art. 35 The definition of the content of standard contractual clauses, as well as the verification of specific contractual clauses for a particular transfer, binding corporate rules or stamps, certificates …
Art. 34 The level of data protection in the foreign country or international organization referred to in item I of the lead sentence of Art
Art. 34 The level of data protection in the foreign country or international organization referred to in item I of the lead sentence of Art. 33 of this Law shall …
Art. 33 International transfer of personal data is only allowed in the following cases
Art. 33 International transfer of personal data is only allowed in the following cases: I – to countries or international organizations that provide a level of protection of personal data …
Art. 32. The national authority may request agents of the public authorities to publish impact
Art. 32 The national authority may request agents of the public authorities to publish impact reports on protection of personal data and may suggest the adoption of standards and good …
Art. 31 When there is an infringement of this Law as a result of personal data processing by public agencies
Art. 31 When there is an infringement of this Law as a result of personal data processing by public agencies, the national authority may issue a statement with applicable measures …
Art. 28 vetoed
Art. 28 vetoed
Art. 30 The national authority may establish complementary
Art. 30 The national authority may establish complementary rules for communication or shared used of personal data activities.
