+Artikolu 28 Konsultazzjoni minn qabel mal-awtorità superviżorja
---+Article 28 1.
---+Article 28 2.
---+Article 28 3.
---+Article 28 4.
---+Article 28 5.

Artikolu 28 Konsultazzjoni minn qabel mal-awtorità superviżorja

Artikolu 28

Konsultazzjoni minn qabel mal-awtorità superviżorja

1.  L-Istati Membri għandhom jipprevedu li l-kontrollur jew il-proċessur jikkonsulta lill-awtorità superviżorja qabel l-ipproċessar ta' data personali li tkun ser tifforma parti minn sistema ġdida ta' arkivjar li tkun ser tinħoloq, fejn:

(a) valutazzjoni tal-impatt fuq il-protezzjoni tad-data kif previst fl-Artikolu 27 tindika li l-ipproċessar jirriżulta f'riskju għoli fin-nuqqas ta' miżuri meħuda mill-kontrollur biex jittaffa r-riskju; jew

(b) it-tip ta' pproċessar, b'mod partikolari, meta jkunu qed jintużaw teknoloġiji, mekkaniżmi jew proċeduri ġodda, jinvolvi riskju għoli għad-drittijiet u l-libertajiet tas-suġġetti tad-data.

2.  L-Istati Membri għandhom jipprevedu li l-awtorità superviżorja tiġi ikkonsultata matul it-tħejjija ta' proposta għal miżura leġiżlattiva li għandha tiġi adottata minn Parlament nazzjonali jew ta' miżura regolatorja bbażata fuq tali miżura leġiżlattiva, li hija relatata ma' pproċessar.

3.  L-Istati Membri għandhom jipprevedu li l-awtorità superviżorja tista' tistabbilixxi lista tal-operazzjonijiet ta' pproċessar li huma soġġetti għal konsultazzjoni minn qabel skont il-paragrafu 1.

4.  L-Istati Membri għandhom jipprevedu li l-kontrollur għandu jipprovdi lill-awtorità superviżorja b'valutazzjoni tal-impatt fuq il-protezzjoni tad-data skont l-Artikolu 27 u, fuq talba, kwalunkwe informazzjoni oħra li tippermetti lill-awtorità superviżorja tivvaluta l-konformità tal-ipproċessar u b'mod partikolari r-riskji għall-protezzjoni tad-data personali tas-suġġett tad-data u tas-salvagwardji relatati.

5.  L-Istati Membri għandhom, meta l-awtorità superviżorja tkun tal-opinjoni li l-ipproċessar previst imsemmi fil-paragrafu 1 ta' dan l-Artikolu jikser id-dispożizzjonijiet adottati skont din id-Direttiva, b'mod partikolari meta l-kontrollur ma jkunx identifika jew naqqas ir-riskju biżżejjed, jipprevedu li l-awtorità superviżorja tipprovdi, fi żmien sitt ġimgħat minn meta tirċievi t-talba għall-konsultazzjoni, parir bil-miktub lill-kontrollur u, fejn applikabbli, lill-proċessur, u tista' tuża kwalunkwe waħda mis-setgħat tagħha msemmija fl-Artikolu 47. Dak il-perijodu jista' jiġi estiż b' xahar, b'kont meħud tal-kumplessità tal-ipproċessar intenzjonat. L-awtorità superviżorja għandha tinforma lill-kontrollur u, fejn applikabbli, il-proċessur b'tali estenzjoni fi żmien xahar minn meta jirċievi t-talba għall-konsultazzjoni, flimkien mar-raġunijiet għad-dewmien.

1. Ħarsa ġenerali

,
Titlu Regolamentazzjoni
Article 28 1.

Member States shall provide for the controller or processor to consult the supervisory authority prior to processing which will form part of a new filing system to be created, where:

(a) 

a data protection impact assessment as provided for in Article 27 indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk; or

(b) 

the type of processing, in particular, where using new technologies, mechanisms or procedures, involves a high risk to the rights and freedoms of data subjects.

Article 28 2.
Member States shall provide for the supervisory authority to be consulted during the preparation of a proposal for a legislative measure to be adopted by a national parliament or of a regulatory measure based on such a legislative measure, which relates to processing.
Article 28 3.
Member States shall provide that the supervisory authority may establish a list of the processing operations which are subject to prior consultation pursuant to paragraph 1.
Article 28 4.
Member States shall provide for the controller to provide the supervisory authority with the data protection impact assessment pursuant to Article 27 and, on request, with any other information to allow the supervisory authority to make an assessment of the compliance of the processing and in particular of the risks for the protection of personal data of the data subject and of the related safeguards.
Article 28 5.
Member States shall, where the supervisory authority is of the opinion that the intended processing referred to in paragraph 1 of this Article would infringe the provisions adopted pursuant to this Directive, in particular where the controller has insufficiently identified or mitigated the risk, provide for the supervisory authority to provide, within a period of up to six weeks of receipt of the request for consultation, written advice to the controller and, where applicable, to the processor, and may use any of its powers referred to in Article 47. That period may be extended by a month, taking into account the complexity of the intended processing. The supervisory authority shall inform the controller and, where applicable, the processor of any such extension within one month of receipt of the request for consultation, together with the reasons for the delay.

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Standards relatati

2. Rekwiżiti identifikati

Rekwiżiti
Sors Rekwiżit

3. Standards relatati

Standards
Sors Rekwiżit
  • Builddate: 04.05.2016 00:00:00 -Doknr: CELEX:32016L0680
  • EULAW -

    EN: Legal acts of the European Union from EUR-Lex, https://eur-lex.europa.eu/. © European Union. Re-use is authorised by Decision 2011/833/EU, provided the source is acknowledged; the consolidated texts are licensed under CC BY 4.0 (EUR-Lex legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the legislation published in the Official Journal of the European Union is deemed authentic.

    DE: Rechtsakte der Europäischen Union aus EUR-Lex, https://eur-lex.europa.eu/. © Europäische Union. Weiterverwendung nach Beschluss 2011/833/EU mit Quellenangabe gestattet; die konsolidierten Fassungen stehen unter CC BY 4.0 (Rechtlicher Hinweis von EUR-Lex). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Verbindlich sind allein die im Amtsblatt der Europäischen Union veröffentlichten Rechtsakte.