15 Amendments of Eija-Riitta KORHOLA related to 2012/0011(COD)
Amendment 436 #
Proposal for a regulation
Article 11 a (new)
Article 11 a (new)
Article 11a Article 12 of Directive 2002/58/EC and Articles 20 and 21(3)(e) of 2002/22/EC are an application of the data subjects' right to transparent information and communication which requires that the controller informs data subjects of their rights with respect to the use of their personal information and draws attention to the presence of systems which have been developed in accordance with the principles of privacy by design.
Amendment 481 #
Proposal for a regulation
Article 17 – paragraph 1 – introductory part
Article 17 – paragraph 1 – introductory part
1. The data subject shall have the right to obtain from the controller the erasure of personal data relating to them and the abstention from further dissemination of such data, unless the data controller is a public authority or an entity commissioned by the authority or otherwise acting on the behalf of the authority, especially in relation to personal data which are made available by the data subject while he or she was a child, where one of the following grounds applies:
Amendment 502 #
Proposal for a regulation
Article 18
Article 18
Amendment 582 #
Proposal for a regulation
Article 22 – paragraph 2 – point d
Article 22 – paragraph 2 – point d
(d) complying with the requirements for prior authorisnotification or prior consultation of the supervisory authority pursuant to Article 34(1) and (2);
Amendment 658 #
Proposal for a regulation
Article 28 – paragraph 4 – point b
Article 28 – paragraph 4 – point b
(b) an enterprise or an organisation employing fewer than 250 persons that is processing personal data only as an activity ancillary to its main activities.
Amendment 690 #
Proposal for a regulation
Chapter 4 – section 3 – title
Chapter 4 – section 3 – title
DATA PROTECTION IMPACT ASSESSMENT AND PRIOR AUTHORISNOTIFICATION
Amendment 718 #
Proposal for a regulation
Article 34 – paragraph 1
Article 34 – paragraph 1
1. The controller or the processor as the case may be shall obtain an authorisation fromnotify the supervisory authority prior to the processing of personal data, in order to ensure the compliance of the intended processing with this Regulation and in particular to mitigate the risks involved for the data subjects where a controller or processor adopts contractual clauses as provided for in point (d) of Article 42(2) or does not provide for the appropriate safeguards in a legally binding instrument as referred to in Article 42(5) for the transfer of personal data to a third country or an international organisation.
Amendment 733 #
Proposal for a regulation
Chapter 4 – section 4
Chapter 4 – section 4
Chapter 4 – section 4 deleted
Amendment 734 #
Proposal for a regulation
Article 35
Article 35
Article 35 deleted
Amendment 746 #
Proposal for a regulation
Article 36
Article 36
Amendment 752 #
Proposal for a regulation
Article 37
Article 37
Article 37 deleted
Amendment 1386 #
Proposal for a regulation
Article 17 – paragraph 1 – introductory part
Article 17 – paragraph 1 – introductory part
1. The data subject shall have the right to obtain from the controller the erasure of personal data relating to them and the abstention from further dissemination of such data, unless the data controller is a public authority or an entity commissioned by the authority or otherwise acting on the behalf of an authority for the performance of the commission. The data subject shall have the right especially in relation to personal data which are made available by the data subject while he or she was a child, where one of the following grounds applies:
Amendment 2199 #
Proposal for a regulation
Article 35 – paragraph 3
Article 35 – paragraph 3
3. Where the controller or the processor is a public authority or body, the data protection officer may be designated for several of its entities, taking account of the organisational structure of the public authority or body. Several public authorities or bodies may also, taking account of the organisation structure of the public authorities or bodies, jointly designate a data protection officer.
Amendment 2880 #
Proposal for a regulation
Article 79 – paragraph 3 – point b
Article 79 – paragraph 3 – point b
(b) an enterprise or an organisation employing fewer than 250 persons is processing personal data only as an activity ancillary to its main activities.
Amendment 3067 #
Proposal for a regulation
Article 83 – paragraph 1 a (new)
Article 83 – paragraph 1 a (new)
1a. The data subject has given his or her consent for the processing of data for historical, statistical and scientific research. For the purposes of historical, statistical and scientific research, a one- time consent is enough and there is no need for explicit consent to be given each time by the data subject, or a need to notify the data subject, separately before the processing of data related to research purposes.