menu MENU
arrow_back Back to the list of all Articles
Change country (Currently : Turkey) language
Contact our local member in Turkey mail_outline
Visit the website of CBL Law office account_balance

arrow_backPrevious Article
Article 19
Next Articlearrow_forward

Notification obligation regarding rectification or erasure of personal data or restriction of processing

Official
Texts Guidelines Caselaw Review of
EU Regulation Review of
Nat. Regulation
Show key term(s) and Article(s) related to article 19 of the Regulation keyboard_arrow_down Hide key term(s) and Article(s) related to article 19 keyboard_arrow_up

Articles related to article 19

Key words related to article 19

There is no recital in the Regulation related to article 19.

There is no recital in the Directive related to article 19.

The GDPR

Article 19 sets up a notification obligation of the data controller that requires them to communicate to each data recipient any rectification, erasure or restriction of processing on the basis of Articles 16, 17 (1) and Article 18 of the Regulation.

The controller, however, can avoid this obligation if they prove that such communications is impossible or involves disproportionate effort.

The final compromise on the future Regulation supplements Article 18 with an obligation to inform the data subject of the identity of recipients when the data subject so requests.

The Directive

The Directive already required the states to guarantee to data subjects the right to obtain notification to third parties to whom the data have been disclosed of any rectification, erasure or blocking, unless this proves impossible or involves a disproportionate effort (see Article 12 c)).

Potential issues

This right is difficult to manage. It requires a perfect management of data transfers to third parties and strongly depends on the sustainability of those third parties (transformation, bankruptcy, etc.). The inability to escape it must however be objective and can not be confused with the lack of implementation of a transmission monitoring procedure.

arrow_back Previous Article • Article 19 • Next Article arrow_forward
arrow_back Previous Article • Article 19 Next Article arrow_forward
arrow_back Previous Article • Article 19 Next Article arrow_forward
Retour au sommaire
arrow_back Previous Article • Article 19 Next Article arrow_forward
Regulation
1e 2e

Art. 19

The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it.
1st proposal close

Art. 13 

The controller  shall communicate  any rectification or erasure carried out in accordance with Articles 16 and 17 to each recipient to whom the data have been disclosed, unless this proves impossible or involves a disproportionate effort.
2nd proposal close

Art. 17b

The controller shall communicate any rectification, erasure or restriction of processing carried out in accordance with Articles 16, 17(1) and 17a to each recipient to whom the data have been disclosed (...) unless this proves impossible or involves disproportionate effort.
Directive close

Art. 12

Member States shall guarantee every data subject the right to obtain from the controller:

c) Notification to third parties to whom the data have been disclosed of any rectification, erasure or blocking carried out in compliance with (b), unless this proves impossible or involves a disproportionate effort.
Turkey
compare_arrows

MADDE 12 - (1) Veri sorumlusu;

a) Kişisel verilerin hukuka aykırı olarak işlenmesini önlemek,

b) Kişisel verilere hukuka aykırı olarak erişilmesini önlemek,

c) Kişisel verilerin muhafazasını sağlamak,

amacıyla uygun güvenlik düzeyini temin etmeye yönelik gerekli her türlü teknik ve idari tedbirleri almak zorundadır,

(2) Veri sorumlusu, kişisel verilerin kendi adına başka bir gerçek veya tüzel kişi tarafından işlenmesi hâlinde, birinci fıkrada belirtilen tedbirlerin alınması hususunda bu kişilerle birlikte müştereken sorumludur.

(3) Veri sorumlusu, kendi kurum veya kuruluşunda, bu Kanun hükümlerinin uygulanmasını sağlamak amacıyla gerekli denetimleri yapmak veya yaptırmak zorundadır.

(4) Veri sorumluları ile veri işleyen kişiler, öğrendikleri kişisel verileri bu Kanun hükümlerine aykırı olarak başkasına açıklayamaz ve işleme amacı dışında kullanamazlar. Bu yükümlülük görevden ayrılmalarından sonra da devam eder.

(5) İşlenen kişisel verilerin kanuni olmayan yollarla başkaları tarafından elde edilmesi hâlinde, veri sorumlusu bu durumu en kısa sürede ilgilisine ve Kurula bildirir. Kurul, gerekmesi hâlinde bu durumu, kendi internet sitesinde ya da uygun göreceği başka bir yöntemle ilan edebilir.
Bulgaria close

Personal Data Protection Act

 

Article 28a. (New, SG No. 103/2005)

An individual has the right to require, at any time, from the personal data controller:

1. to erase, rectify or block his or her personal data the processing of which does not comply with the provisions of this Act;

2. notify any third parties to whom his or her personal data have been disclosed of any erasure, rectification, or blocking carried out in compliance with Para 1, unless this is impossible or involves a disproportionate effort.
arrow_back Previous Article • Article 19 Next Article arrow_forward
close

2016 - www.itiplaw.eu.