The registered office of the company
1 September 2014
says European Commissioner for Justice Viviane Reding, expressing her hope that this goal will be achieved
The greater control that people should have over the private information they use online, but also combating other growing problems such as identity theft, are among the aims of the European legislation to reach them as soon as possible.
Many of the companies in the local market are still not informed about the responsibility they assume by collecting, storing, processing and destroying personal data, exposing themselves to several risks, starting with substantial fines applied by the National Authority for Supervision of the Processing of Personal Data (ANSPDCP), legal action by disgruntled customers or employees and ending with long-term reputational damage.
In Romania, the violation of the rights that people have with regard to personal data has become the subject of cases settled by the court, even with the conviction of some public institutions, to the payment of significant sums as moral damages.
While the maze of personal data protection can prove very complex, Legal to Business contributors have identified measures applicable to all categories of public or private institutions, small or large, from retailers to call centers or companies pharmaceuticals, through which compliance with the applicable legal provisions can be evaluated, but also the discovery of flaws that affect the compliance process.
In principle, the processing of any information related to living persons transforms the organization into a personal data operator, for which the legislation in force requires the notification of the ANSPDCP.
In this capacity, it is important to take into account several obligations arising from holding this quality:
Cases of public or private national or international institutions that lose personal data that they process have attracted the attention of public opinion recently. The Romanian law provides that it is the operator's responsibility to ensure data protection, and in case of failure foresees the application of fines, which does not exclude the granting of compensation to the persons concerned.
Some of the measures that every company, regardless of the status of the market, you have to take into account to ensure the protection, more safe for your personal data include:
