Utilizziamo cookie tecnici per personalizzare il sito web e offrire all’utente un servizio di maggior valore. Chiudendo il banner e continuando con la navigazione verranno installati nel Suo dispositivo i cookie tecnici necessari ai fini della navigazione nel Sito. L’installazione dei cookie tecnici non richiede alcun consenso da parte Sua. Ulteriori informazioni sono contenute nella nostra Cookie Policy.



The Data Protection Authority approved the Code of Conduct for the processing of personal data on business information presented by Ancic

PrintMailRate-it
​On the last 12 June, the Data Protection Authority approved the Code of Conduct for the processing of personal data on business information presented by Ancic (National Association of Business Information and Credit Management Enterprises).

The new text updates the old Code of Conduct on business information (which will remain in force until September 19, 2019).

• Subject: Identification of adequate guarantees and processing methods of personal data to protect the rights of data subjects, in pursuing the purposes of commercial information.
• Objective: to clarify the application of the Regulation provisions in the specific sector of commercial information activities, in order to allow the subjects operating in this field as data controllers, to use the subscription to the Code of Conduct as an element to demonstrate the respect of the obligations imposed by the Regulation;

Among the measures indicated, the Code provides a greater protection for the persons surveyed, an impact assessment on data protection, an adaptation to the European best practices and a new monitoring entity for companies adhering to the Code.
Companies that offer information on the commercial reliability of entrepreneurs and managers, with the entry into force of the new Code, will be able to process the personal data of the surveyed subjects without requesting their consent or grounding on their legitimate interest. The other side of the coin, however, provides that these companies will have to guarantee greater protection to the data subjects, informing them in detail about the treatments carried out and to be carried out, obviously ensuring the rights exercise provided by the privacy law.
 
The main changes are that:
 
• Suppliers must adopt a risk-based approach, taking all necessary measures to prevent or minimize it;
• Suppliers will have to follow the instructions of the EDPB and other authorities;
• A Data Protection Officer must be designated (DPO).
• An independent monitoring entity must be established with the task to monitor compliance with the codes of conduct.
 
The Code will help companies to demonstrate their compliance with personal data processing regulations.

Contact

Nadia Martini

Avvocato

Partner

+39 02 6328 841

Invia richiesta

Profilo

Contact Person Picture

Skip Ribbon Commands
Skip to main content
Deutschland Weltweit Search Menu