and to the competent authorities from which the inaccurate data originated. The controllers should also abstain from further dissemination of such data. (36a) Where the controller denies a (36a) Where the controller denies a data subject his or her right of data subject his or her right to access, rectification, erasure or information, access, rectification, restriction of processing, the data erasure or restriction of processing, subject should have the right to the data subject should have the request that the national right to request that the national supervisory authority checks the supervisory authority verifies the lawfulness of the processing. The lawfulness of the processing. The data subject should be informed of data subject should be informed of this right. When the supervisory this right. When the supervisory authority intervenes on behalf of authority acts on behalf of the data the data subject, the data subject subject, the data subject should be should be informed by the informed by the supervisory supervisory authority at least that authority at least that all necessary all necessary verifications or verifications or reviews by the reviews by the supervisory supervisory authority have taken authority have taken place. place. The supervisory authority should also inform the data subject of the right to seek a judicial remedy. (36aa) (36aa) Where the personal data are Where the personal data are processed in the course of a criminal processed in the course of a court investigation and court proceedings criminal investigation and in criminal matters, in criminal matters, the exercise of proceedings the exercise of the the rights to information, access, rights of rectification, rectification, erasure and restriction information, access,
and to the competent authorities from which the inaccurate data originated. The controllers should also abstain from further dissemination of such data. (36a) Where the controller denies a data subject his or her right of access, rectification, erasure or restriction of processing, the data subject should have the right to request that the national supervisory authority checks the lawfulness of the processing. The data subject should be informed of this right. When the supervisory authority intervenes on behalf of the data subject, the data subject should be informed by the supervisory authority at least that all necessary verifications or reviews by the supervisory authority have taken place. (36a) Where the controller denies a data subject his or her right to information, access, rectification, erasure or restriction of processing, the data subject should have the right to request that the national supervisory authority verifies the lawfulness of the processing. The data subject should be informed of this right. When the supervisory authority acts on behalf of the data subject, the data subject should be informed by the supervisory authority at least that all necessary verifications or reviews by the supervisory authority have taken place. The supervisory authority should also inform the data subject of the right to seek a judicial remedy. (36aa) Where the personal data are processed in the course of a criminal investigation and court proceedings in criminal matters, the exercise of the rights of information, access, rectification, (36aa) Where the personal data are processed in the course of a criminal investigation and court proceedings in criminal matters, the exercise of the rights to information, access, rectification, erasure and restriction
4_4column_table_EN.docx