On the 25th of May 2017, the representatives of the National Supervisory Authority for Personal Data Processing attended a reunion dedicate to the debate on the main implications of the General Regulation on Data Protection, organized by the American Chamber of Commerce in Romania.

It was underlined the novelties brought by Regulation (EU) 2016/679, adopted by the European Parliament and Council, applicable starting with the 25th of May 2018, as well as the impact of the new European regulation on the observance of the data subjects’ rights.

With this occasion, the obligation of the private entities to designate, in certain situations, until the 25th of May 2018, a data protection officer, according to Articles 37-39 of Regulation (EU) 2016/679, was highlighted.

The discussions were focused on the situations with implications on the information to data subjects, the legitimate conditions for the processing, the obligation of certain data controller to keep records of processing activities according to Article 30 of GDPR, the impact assessment and the notification of a personal data breach under the conditions of Article 33 of GDPR.

The large presence of the private sector in this interactive event has illustrated once again the growing interest of the private sector for the proper application of the processing rules established by the new Regulation.

Legal and communication Department ANSPDCP