Contact
The Catalan Data Protection Authority (APDCAT) has initiated an action of the Coordinated Compliance Framework of the European control authorities, in order to contribute to the evaluation of the application of the right of access to information relating to personal data of citizens processed by organizations across Europe. Thus, it has launched a survey aimed at the entities responsible for data processing in their field of action, which includes entities from the public sector in Catalonia and private entities that exercise public functions.
The action, promoted by the European Data Protection Board (EDPB), will serve to provide updated information on the degree of compliance with this right expressly included in the General Data Protection Regulation, which includes people's access to information regarding your personal data when it is processed by a certain organization. First, to know if that entity in question processes your personal data, and, if so, what data is involved, the purpose of the treatment, the categories of personal data that are processed and the recipients to whom they have been communicated or they will communicate the data, the expected retention period, the origin of the data, when they have not been obtained from the same affected person, if they will be used to create profiles with automated decisions, if they will be transferred outside the EU with guarantees, as well as the right to request the rectification or deletion of the data, the limitation of the treatment or the right to oppose it, the right to submit a claim to the competent control authority.
Among the issues to be evaluated, the survey addresses the number of registered access requests and the percentage they represent with respect to the rest of data protection rights (rectification, deletion, etc.), requests for information and review of personal or copy data received, the time they store information on access requests, if they have a defined procedure to process access requests, if they extend the response to the request d 'access beyond one month and the average response time, or how often they limit the information provided to the affected person due to the rights of third parties.
The information resulting from this action will be analyzed in a coordinated manner with the other participating data protection authorities, in order to evaluate the establishment of new actions to improve the guarantee of the right of access.
The Catalan Data Protection Authority participates in a coordinated action at European level with the aim of monitoring compliance with the right of access contained in the General Data Protection Regulation, promoted by the European Data Protection Committee.