RYZYKO W KONTEKŚCIE ODPOWIEDZIALNOŚCI ADMINISTRATORA DANYCH OSOBOWYCH I PODMIOTU PRZETWARZAJĄCEGO A ZAWARCIE ZAPISÓW W UMOWIE POWIERZENIA PRZETWARZANIA DANYCH OSOBOWYCH W CELU OGRANICZENIA ODPOWIEDZIALNOŚCI W ZAKRESIE NAKŁADANIA ADMINISTRACYJNYCH KAR
RISK IN THE CONTEXT OF THE LIABILITY OF THE DATA CONTROLLER AND DATA PROCESSOR AND THE INCLUSION OF PROVISIONS IN THE DATA PROCESSING AGREEMENT TO LIMIT LIABILITY FOR THE IMPOSITION OF ADMINISTRATIVE FINES UNDER ARTICLE 83 OF THE GDPR

Summary/Abstract: The article deals with the risks in the context of the responsibility of the data controller and data processor and the connection of these risks to the inclusion of relevant provisions in the personal data processing agreement(s) to limit responsibility for the imposition of administrative penalties under the article 83 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (GDPR). At the outset, the paper introduces the concept of the data controller and the data processor and the diff erences between these entities. Then the issue of the data processing agreement and the consequences of the possible absence of the required provisions or of the agreement itself is addressed. The fi nal section presents an analysis and conclusions as to which reasons relating to data processing agreement have resulted in fi nes imposed according to the Article 83 of the GDPR.

• Details
• Contents