Since 2010, a general obligation has been created to protect personal data held by individuals.
These obligations specifically result in duties of the holders of personal data such as, among others:
- Obtaining the consent of the owner (tacit, express or in writing, depending on the analysis of the case)
- Preparation and notification of the Privacy Notice, in accordance with the guidelines;
- Data transfer in accordance with current legislation (one of the most controversial points in this area)
- Adoption of protection and security measures (physical, administrative and technical)
- Determination of those responsible and in charge for each case of management or treatment
- Appointment of a personal data manager or department.