Failure to comply with ANPD requests
The ANPD also fined the inspected company for failing to comply with the requests made during the inspection process, since the regulated agent failed to comply with the duty to provide copies of documents, data and information relevant to the assessment of personal data processing activities, within the deadline, location, format and other conditions established by the ANPD, a violation of article 5 of the Inspection Regulation .
This is a relevant point, since it is not enough to comply gambling data saudi arabia with and demonstrate, when necessary, compliance measures within the organization. It is necessary to respond, in a timely and proper manner, to the requirements of the Regulatory Authority, which is the responsibility of the DPO itself.
Regarding the first fine applied by the ANPD against Telekall, it was demonstrated that the controller failed to comply with one or more duties during the inspection process, including:
Provide contact with a company representative able to provide support to ANPD;
Provide access to facilities, equipment, applications, facilities, systems, tools and technological resources, documents, data and information of a technical, operational and other relevant nature suitable for evaluating the personal data processing activity;
Enable the ANPD to be aware of the functioning of the information systems used for data processing, as well as traceability, updating and replacement criteria; and
Subject the organization to audits carried out or determined by the ANPD.
We therefore saw two penalties linked to the failure to appoint a Data Controller, one for the absence itself and the other for the lack of response, that is, if the company had been concerned about data governance, it certainly would not have been penalized.
頁:
[1]