Teikėjai, kurie savo tekste tiesiogiai nurodė būtent šį straipsnio numerį. Tai citata iš jų pačių teksto — ne mūsų vertinimas ir ne priežastinis ryšys.
| Kas | Šalis | Ką parašė |
|---|---|---|
| Confederation of Swedish Enterprise | SE | with the level of information required under Art. 30 GDPR, including the IMY's high standard for transparency? In Art. 30 (5) GDPR there is a limitation to the obligation to maintain a record of processing for an enterprise or an organisation with fewer than 2 ↗ |
| Deutsche Industrie- und Handelskammer (DIHK) / German Chamber of Commerce and Industry | DE | , wann für KMU die Pflicht entfällt, ein Verzeichnis über die Verarbeitungstätigkeit zu führen. Die für KMU geregelte Ausnahme in Art. 30 Absatz 5 DSGVO findet in der Praxis kaum Anwendung Die Vorgaben für Auftragsverarbeitungsverträge sollten dem Risiko entsp ↗ |
| Centre for European Policy | DE | uced for sensible and necessary documentation and reporting obligations which the GDPR imposes on companies (using the example of Art. 30 and 33 of the GDPR), and, secondly, B. comment on the interaction between the GDPR and new initiatives (using the example ↗ |
| Selbstregulierung Informationswirtschaft e.V. (SRIW) | DE | GDPR. The record of processing requires in any case only categories of some information, Art. 30.1 lit c and lit d. Thus, information within external transparency information shall not exceed the required information for internal documentation. Acknowledging t ↗ |
| Shoosmiths LLP | GB | presents an opportunity to better balance privacy protection with the operational realities of SMEs. The current exemption under Article 30(5) does not significantly reduce the compliance burden, as SMEs still need to document their data processing activities ↗ |
| Bundesvereinigung der Deutschen Arbeitgeberverbände | DE | ahrung des jeweiligen Auskunftsrechts muss eine Übersicht, die die verarbeiteten Daten in verständlicher Form auflistet, genügen. Art. 30 Gemäß Art. 30 DS-GVO muss ein Verzeichnis über Verarbeitungstätigkeiten lediglich in Unternehmen ab 250 Mitarbeitern gefüh ↗ |
| MyData-TRUST | BE | complementing the requirements of the GDPR Art. 30, giving national flavour to the records of processing activities. These variations highlight the complexity of harmonizing data protection practices across the EU, as national DPAs may interpret and implement ↗ |
| Oplysningsforbundet May Day | DK | aa-overblikket-4-centrale-begreber-der-faar-det-offentlige-Ɵl-rime-paa-cloud 74 art. 5, stk. 1, litra f, jf. art. 5, stk. 2, og Ɵl art. 30, stk. ↗ |
| VNO-NCW / MKB Nederland | NL | law, because it has to prevent other controllers from reading too much leeway in its interpretations). We also recommend amending article 30 paragraph 5 as follows: to not restrict the derogation of keeping a record to occasional processing activities; and to ↗ |
| Xamit Bewertungsgesellschaft mbH | DE | wie sie in anderen Berufsfeldern selbstverständlich ist. Die Pflicht zum Führen eines "Verzeichnis von Verarbeitungstätigkeiten" (Art. 30 DS-GVO) bringt in der Praxis keinen Mehrwert. Die Verarbeitungen müssen im Wesentlichen in der (im Vergleich zum "Verzeich ↗ |
| Berufsverband der Datenschutzbeauftragten Deutschlands (BvD) e.V. | DE | sgrundlage nach Artt. 13, 14 DSGVO sowie der Pflicht zur Erfassung im Rahmen des Verzeichnisses von Verarbeitungstätigkeiten nach Art. 30 DSGVO. Damit löst selbst eine einfache Zulässigkeitsprüfung (z.B. ↗ |
| Alliance Digitale | FR | records of processing activities and remove the term "occasional" from paragraph 5 of Article 30 of the GDPR. As specified in the same Article 30, this exemption would not apply if the processing they carry out is likely to result in a risk to the rights and f ↗ |
| AUSTRIAN FEDERAL ECONOMIC CHAMBER | AT | (e.g. from trade and craft, engineering offices) must be considered. A proper formulation of the SME exception in accordance with Article 30 Paragraph 5 GDPR for companies that also process data regularly (such as any company that looks after customers or empl ↗ |
| Finnish Energy | FI | ther a data breach should be reported or not. In addition, more clarification and detailed examples have been requested regarding Article 30 'Records of processing activities,' especially concerning the level at which the information mentioned in the article s ↗ |
| Délégué à la Protection des Données (ancien et formateur) | FR | les finalités du traitement et leur condition de licéité respective, conformément à l’article 6 du présent règlement ; 7) Article 30.2 RGPD : ajouter l’existence d’une sous-traitance de niveau inférieur dans un registre Sous-traitant Au titre de l’article 30.2 ↗ |
| theinfosecvault.com | IT | consent art. 6 (only when other forms of consent could not be achieved by the Controller) 2) The Record of Processing Activities (art. 30) should be mandatory for every company and periodically archived with digital signature Thank you ! ↗ |
| Border Violence Monitoring Network | DE | 40 EURODAC Regulation, Article 30 39 Heinrich Böll Stiftung & BVMN. 2023. In defence of defenders: a practical guide to legal means and advocacy tools for criminalised Human Rights Defenders in Europe. Available at: https://gr.boell.org/sites/default/files/202 ↗ |
| noyb | AT | law and Article 78(3) GDPR, any supervisory authority concerned may be joined to a national procedure in another Member State.87 Article 30 - Additional remedies before national courts Without prejudice to the rights under Article 78 GDPR and national laws, ↗ |
| David Erdos | GB | relations in article 28 and record keeping which is “not occasional” in article 30 are similarly acontextual. It is also concerning how many of these and indeed other provisions in the GDPR focus on mandating process rather ensuring concrete results which dire ↗ |
| Ecommerce Europe | BE | in the GDPR. For example, how detailed must the documentation be, in particular the record of processing activities according to Art. 30 GDPR? Which circumstances fall under Art. 28 GDPR (processing is carried out on behalf of a controller)? What is the corre ↗ |
| Internet Corporation for Assigned Names and Numbers | US | be important to specify under what conditions interested parties should be consulted (Art. 70 (4) of the GDPR). The provision of Art. 30 of the EDPB Rules of Procedure should therefore be supplemented in order to clarify this important issue. The provision sh ↗ |
| Digitale Gesellschaft e.V. | DE | n authorities. To promote transparency, the legislator must oblige controllers to publish their records of processing activities (Article 30) in a machine- readable form. To strengthen data protection in practice, the legislator must support the development an ↗ |
| BVPA Bundesverband professioneller Bildanbieter e.V. | DE | e sich aus Art. 28 DSGVO (AVV) i.V. m. Art. 32 DSGVO (TOM) und ggf. zusätzlich aus Art. 44ff DSGVO (Driostaatentransfer) sowie aus Art. 30 DSGVO (Verarbeitungsverzeichnis) und Art. 13 DSGVO (Infopflichten) ergebenden Pflichten für Verantwortliche und AuRraggeber ↗ |
| Deutsche Telekom AG | DE | e, if not directly accessible, at least retrievable without effort." 7) Record of categories of processing activities pursuant to Article 30 (2) GDPR Request: Where the same category of processing activities is performed on behalf of a large number of controll ↗ |
| Centre for Information Policy Leadership (CIPL) | GB | the GDPR. For instance, some controllers are obliging processors contractually to keep 9 records of processing in accordance with Article 30 of the GDPR and requesting access to such records, or are trying contractually to position privacy by design and privac ↗ |
| Zentralverband der deutschen Werbewirtschaft ZAW | DE | chtspunkten orientieren und stärker an die Gegebenheiten in der Praxis angepasst werden. So ist der Auftragsverarbeiter z.B. nach Artikel 30 Abs. 2 DSGVO zur Führung von Verarbeitungsverzeichnissen verpflichtet, wobei kein Raum für eine Differenzierung zwische ↗ |
| — | GDPR Article 30(5) - clarifying the record keeping obligation Article 30(5) is clearly aimed at creating a general exception to the record-keeping obligation for smaller companies. What isn't clear, based on the current wording, is when such a small company ↗ |
Šaltinis: viešų konsultacijų atsiliepimai ir pozicijų dokumentai. n = 27 paminėjimų; skaičiuojama pažodinė nuoroda į straipsnio numerį.