processing personal data in processing systems should have in place effective methods of demonstrating the lawfulness of the data processing, of enabling self-monitoring and of ensuring data integrity and data security, such as logs or other forms of records. Amendment 31 (40a) Logs should be kept at least (40a) Logs should be kept at least (40a) Every processing operation for operations in automated for operations in automated of personal data should be processing systems such as processing systems such as recorded in order to enable the collection, alteration, consultation, collection, alteration, consultation, verification of the lawfulness of disclosure, combination or erasure. disclosure including transfers, the data processing, The logs should be used for combination or erasure. The and ensuring proper verification of the lawfulness of the identification of the person who data integrity and security. This data processing, self-monitoring consulted or disclosed personal data record should be made available and for ensuring data integrity and should be logged and from this upon request to the supervisory data security. This does not identification it could be possible to authority for the purpose of preclude the use of the logs in establish the justification of the monitoring compliance with the accordance with Member State law processing operations. The logs rules laid down in this Directive. for operational matters in the should solely be used for the course of criminal investigations verification of the lawfulness of the and proceedings. data processing, self-monitoring, for ensuring data integrity and data security and criminal proceedings. Self-monitoring also includes internal disciplinary proceedings of competent authorities. Amendment 32
processing personal data in processing systems should have in place effective methods of demonstrating the lawfulness of the data processing, of enabling self-monitoring and of ensuring data integrity and data security, such as logs or other forms of records. Amendment 31 (40a) Every processing operation of personal data should be recorded in order to enable the verification of the lawfulness of the data processing, and ensuring proper data integrity and security. This record should be made available upon request to the supervisory authority for the purpose of monitoring compliance with the rules laid down in this Directive. (40a) Logs should be kept at least for operations in automated processing systems such as collection, alteration, consultation, disclosure, combination or erasure. The logs should be used for verification of the lawfulness of the data processing, self-monitoring and for ensuring data integrity and data security. This does not preclude the use of the logs in accordance with Member State law for operational matters in the course of criminal investigations and proceedings. (40a) Logs should be kept at least for operations in automated processing systems such as collection, alteration, consultation, disclosure including transfers, combination or erasure. The identification of the person who consulted or disclosed personal data should be logged and from this identification it could be possible to establish the justification of the processing operations. The logs should solely be used for the verification of the lawfulness of the data processing, self-monitoring, for ensuring data integrity and data security and criminal proceedings. Self-monitoring also includes internal disciplinary proceedings of competent authorities. Amendment 32
4_4column_table_EN.docx