unnecessarily hamper the investigation of the circumstances the controller has taken subsequent respecting guidance provided by it investigation of the circumstances of a breach. measures which ensure that the or other relevant authorities. For of a breach. high risk for the rights and example, the need to mitigate an freedoms of affected data subjects immediate risk of damage would is no longer likely to materialise. call for a prompt notification of data subjects, whereas the need to implement appropriate measures against continuing or similar data breaches may justify a longer delay. Where avoiding obstruction of official or legal inquiries, investigations or procedures, avoiding prejudice to the prevention, detection, investigation or prosecution of criminal offences or the execution of criminal penalties, protecting public security, protecting national security or protecting the rights and freedoms of others cannot be achieved by delaying or restricting the communication of a personal data breach to the individual concerned, such communication could, in exceptional circumstances, be omitted. Amendment 36 (44) The controller or the processor (44) The controller or the processor (44) A person with expert (44) The controller should designate (…) should designate a person who would should designate a person who knowledge of data protection law a person who would assist the assist the controller or processor to would assist the controller or and practices may assist the controller to monitor internal monitor and demonstrate processor to monitor compliance controller or processor to monitor compliance with the provisions compliance with the provisions with the provisions adopted internal compliance with the adopted pursuant to this Directive,
unnecessarily hamper the investigation of the circumstances of a breach. investigation of the circumstances of a breach. the controller has taken subsequent measures which ensure that the high risk for the rights and freedoms of affected data subjects is no longer likely to materialise. respecting guidance provided by it or other relevant authorities. For example, the need to mitigate an immediate risk of damage would call for a prompt notification of data subjects, whereas the need to implement appropriate measures against continuing or similar data breaches may justify a longer delay. Where avoiding obstruction of official or legal inquiries, investigations or procedures, avoiding prejudice to the prevention, detection, investigation or prosecution of criminal offences or the execution of criminal penalties, protecting public security, protecting national security or protecting the rights and freedoms of others cannot be achieved by delaying or restricting the communication of a personal data breach to the individual concerned, such communication could, in exceptional circumstances, be omitted. Amendment 36 (44) The controller or the processor should designate a person who would assist the controller or processor to monitor compliance with the provisions adopted (44) The controller or the processor should designate a person who would assist the controller or processor to monitor and demonstrate compliance with the provisions (44) (…) A person with expert knowledge of data protection law and practices may assist the controller or processor to monitor internal compliance with the (44) The controller should designate a person who would assist the controller to monitor internal compliance with the provisions adopted pursuant to this Directive,
4_4column_table_EN.docx