ZRP
Tuca Zbarcea & Asociatii

CMS: RDPA issues wide reaching decision on investigation procedures

16 Noiembrie 2018   |   Cristina Popescu, Senior Associate, Head of CEE Insurance Practice Group - CMS Cameron McKenna Nabarro Olswang LLP

For further information on this subject, please contact Cristina Popescu, Senior Associate, Head of CEE Insurance Practice Group - CMS Cameron McKenna Nabarro Olswang LLP.

 
 
The Romanian National Authority for the Supervision of Personal Data Processing (the “RDPA”) recently issued Decision no. 161/2018 regulating personal data investigation procedures (the “Investigations Regulation”).

The Investigations Regulation sets out the RDPA’s investigative powers, the categories of investigations it may conduct, and the associated procedural requirements.

I. Types of investigations

The Investigations Regulation gives the RDPA broad discretion in conducting personal data investigations. Investigations may be performed:

→    ex officio (at the initiative of the RDPA) or following a third party complaint;
→    on site at the location(s) of the audited entity, at the RDPA’s headquarters, or through written correspondence; and

→    with or without prior notification of the audited entity.

II. The RDPA’s investigative powers during an on-site investigation

The RDPA is entitled to carry out on-site investigations at the headquarters, working points or any other locations where the audited entity carries out its activity, or at locations related to the audited data processing operation.

During an on-site investigation, RDPA investigators have wide-reaching powers, including:

→    to verify any document, device, equipment, data storage or other means necessary for the investigation;
→    to take any document or relevant records related to the scope of the audit;
→    to request police assistance if the audited entity opposes the investigation, or if there are indications that the audited entity will oppose the investigation;
→    to seal any documents which may be relevant to the investigation; and
→    to depose/hear any individual whose testimony may be relevant and necessary for the investigation.

On-site investigations must be conducted between 8.00 am and 6.00 pm, unless the audited entity consents to extended hours.

III. Obligations of the audited entity

Pursuant to the Investigations Regulation, the audited entity has the following main obligations during investigations:

→    to allow the RDPA investigators to initiate and perform the investigation and provide necessary support in relation to the investigation;
→    to ensure that the RDPA investigators have access to the location(s) in which activity is performed, and to any equipment, device, storage or processing medium, including those used remotely;
→    make available any information/documents necessary for the purposes of the investigation, irrespective of the medium on which they are stored;
→    provide complete documentation, information, files and records as requested, and any necessary clarifications, without being able to invoke confidentiality except as provided by law (no specific law mentioned);
→    to allow the RDPA investigators to use audio-visual/photo equipment where necessary.

If the RDPA is prevented in any manner from exercising its prerogatives, the RDPA may request judicial authorisation to proceed with the audit.

IV. Conclusions of an RDPA investigation

Following the investigation, the RDPA may issue warnings or fines if it identifies a breach of data protection regulations. Fines not been paid within 15 days from communication may be enforced immediately. Challenging a fining decision suspends payment of the fine pending a resolution of the challenge in court. A challenge against an RDPA sanctioning decision may be filed within 15 days as from communication.

The RDPA is also entitled to impose remedial actions and make recommendations for compliance. The RDPA may also impose delay penalties of up to 3,000 RON/day for each day of delay in implementing its corrective/remedial actions or if the audited entity refuses to provide the requested documents and information or to submit itself to the investigation.

For further information on this subject, please contact Cristina Popescu, Senior Associate, Head of CEE Insurance Practice Group - CMS Cameron McKenna Nabarro Olswang LLP.
 
 

PNSA

 
 

ARTICOLE PE ACEEASI TEMA

ARTICOLE DE ACELASI AUTOR


     

    Ascunde Reclama
     
     

    POSTEAZA UN COMENTARIU


    Nume *
    Email (nu va fi publicat) *
    Comentariu *
    Cod de securitate*







    * campuri obligatorii


    Articol 36 / 2141
     

    Ascunde Reclama
     
     
     
    BREAKING NEWS
    ESENTIAL
    LegiTeam: Popovici Nițu Stoica & Asociații recrutează
    Thomson Reuters Legal Advisers - Full Year 2018 | Cele mai active firme de avocați implicate în fuziuni și achiziții, anul trecut. Ce giganți cu prezență la București au intrat în Top 25 global, european și regional
    „The Lawyer European Awards 2019”: 4 firme cu activitate în România concurează pentru titlu la secțiunea ”Law Firm of the Year: Eastern Europe and the Balkans” | PNSA, singura firmă domestica din lista scurtă a premianților. ZRP concurează la titlul „European litigation team of the year”
    Clifford Chance Badea atrage un nou avocat senior în practica de M&A Real Estate
    Topul problemelor din industria Pharma, creionat de avocații D&B David și Baias. Proiectele uneia dintre cele mai performante echipe de pe piața locală
    ELLINT, alianța internațională a firmelor de avocați specializate în dreptul muncii, se extinde în România. Suciu | The Employment Law a intrat în rețea
    Promovări în conducerea Mușat & Asociații: Paul Buta, Iulian Popescu și Răzvan Stoicescu devin Deputy Managing Partners | Partenerul Octavian Popescu se retrage
    Andreea Bende, promovată în calitate de Partener în cadrul NNDKP IP
    LegiTeam: PeliFilip recrutează avocați pentru departamentul de Real-estate
    bpv Grigorescu Ştefănică a asistat Molex SUA, în consolidarea prezenței sale pe piața din România. Colaborare cu Jones Day
    PeliFilip a reprezentat cu succes Hidroelectrica într-un litigiu complex de dreptul muncii
    Câți avocați au firmele de top în evidențele Baroului, la început de an. Plutonul fruntașilor și-a schimbat structura, iar tendința a fost de micșorare a efectivelor, în 2018
     
    Citeste pe SeeNews Digital Network
    • BizBanker

    • BizLeader

        in curand...
    • SeeNews

      in curand...