webleads-tracker

MENU
Practice SIMON Associés SIMON Avocats Network China Desk Team Lettre Chine Our websites Search Reference work Africa Americas Asia Focus China Caspian Region Europe MENAP Medias Contact Newsletter
SUIVEZ NOUS SUR
Simon International
simon associés simon associés
Home >Europe

Portugal - Personal Data

List of personal data pocessing activities that must be subject to a data protection impact assessment – REGULATION NR. 1/2018

The CNPD (Portuguese Data Protection National Commission), as the Portuguese supervisory authority, has approved Regulation nr. 1/2018 (“Regulation”), pursuant to Articles 35, no. 4 and 57, no. 1, k) of the General Data Protection Regulation (“GDPR”), that provides a list of personal data processing activities that must be subject to a Data Protection Impact Assessment (“DPIA”). Through this Regulation, the CNPD clarifies which situations, in addition to those already foreseen in Article 35, nr. 3 of the GDPR, in which, prior to the processing of personal data, the Controller shall carry out a DPIA. A DPIA is a process that must be undertaken by the Controller, being mandatory only in some situations. Its purpose is to mitigate the risks associated with the processing of data within the scope of new projects, systems, plans, proposals, strategies or policies. The list presented in the Regulation is not exhaustive and is based on the public consultation, conducted by the CNPD, as well as the recommendations contained in Opinion nr. 18/2018 of the ECDC (European Data Protection Committee). In short, according to Regulation no. 1/2018, in addition to the situations already defined in the GDPR, the processing of data must be preceded by a DPIA, when said processing:

 

1. Involves the transmission by electronic devices of personal health data;

2. Involves profiling on a large scale;

3. Enables the location or behavior tracking of data subjects – such as employees or clients – and that allows the Controller to evaluate or classify said data subjects;

4. Involves the processing of biometric data for unambiguous identification of their holders;

5. Involves the processing of genetic data of vulnerable people;

6. Is included in Article 9, nr. 1 or Article 10 of the GDPR or has a “highly personal nature”:

    1. With the use of particular technologies or carrying out particular types of processing operation;

    2. For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;

    3. That results in an interconnection of personal data;

    4. Based on indirect collection, where it is not possible to ensure the right of information.

 

Lastly, concepts such as “data of highly personal nature”, “data processed on a large-scale “, “the processing of genetic data” or “particular technologies” should be interpreted in accordance with what is provided for in the “Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/679” - WP248 rev.01, approved by the Article 29 Data Protection Working Party.

 

 

The CNPD (Portuguese Data Protection National Commission), as the Portuguese supervisory authority, has approved Regulation nr. 1/2018 (“Regulation”), pursuant to Articles 35, no. 4 and 57, no. 1, k) of the General Data Protection Regulation (“GDPR”), that provides a list of personal data processing activities that must be subject to a Data Protection Impact Assessment (“DPIA”).

Through this Regulation, the CNPD clarifies which situations, in addition to those already foreseen in Article 35, nr. 3 of the GDPR, in which, prior to the processing of personal data, the Controller shall carry out a DPIA.

 

 

Source : Abreu

Other articles

Impact of COVID-19 on certain restructuring transactions during the state of public health emergency period

Order of 25 March 2020 and Order of 15 April 2020 (Ordonnance N ° 2020-306 et Ordonnance n° 2020-427)

- Vu : 1341

The emergency Act No. 2020-290 dealing with the covid-19 epidemic of 23 March (Loi n° 2020-290 d'urgence pour faire face à l'épidémie de covid-19) created a state of public health emergency in France.

> Read more

Brexit & transition period

- Vu : 1178

After three and a half years of negotiations, Brexit has finally become a reality. The execution of the withdrawal agreement and its entry into force on 31 January 2020, marks the end of the period provided for in Article 50 of the Treaty on European Union (TEU) and the beginning of a transitional period.

> Read more


Most viewed...
Simon Associé present at the 5th Overseas Investment Forum organized by Yingke
13 octobre 2017 - Vu : 11696
Lara BOURSIER participates in two round tables during the 5th Overseas Investment Forum organized by Yingke on October ...
> Read more
A window on the post-13th National People's Congress and on the 2018 Edition of the BOAO Forum
5 juillet 2018 - Vu : 10910
The 13th National People's Congress of China (NPC) and the 13th National Committee of the Chinese People's Political Consultative Conference (CPPCC) ...
> Read more
SIMON Associés and YINGKE Partners welcome NCB President, Mrs Christiane Féral-Schuhl, in Beijing
11 janvier 2018 - Vu : 6495
In the context of the first official visit of French President Macron in China, SIMON Associés and YINGKE ...
> Read more
Lara Boursier, interviewed by Global Retail News, gives advice to foreign brands wanting to set up shop in China
18 octobre 2017 - Vu : 3516
 In this interview Lara Bousier gives advice to foreign brands wanting to set up shop there, talks about the legal ...
> Read more
Copyright ©2017 Simon International | Creation and realisation by Webcd©