Art. 63
In order to contribute to the consistent application of this Regulation throughout the Union, the supervisory authorities shall cooperate with each other and, where relevant, with the Commission, through the consistency mechanism as set out in this Section.
|
Art. 57
For the purposes set out in Article 46(1), the supervisory authorities shall co-operate with each other and the Commission through the consistency mechanism as set out in this section.
|
Art. 57
1. For the purpose set out in Article 46(1a), the supervisory authorities shall co-operate with each other through the consistency mechanism as set out in this section.
2. The European Data Protection Board shall issue an opinion whenever a competent supervisory authority intends to adopt any of the measures below (…). To that end, the competent supervisory authority shall communicate the draft decision to the European Data Protection Board, when it:
(a) (…);
(b) (…);
(c) aims at adopting a list of the processing operations subject to the requirement for a data protection impact assessment pursuant to Article 33(2a);
or (ca) concerns a matter pursuant to Article 38(2b) whether a draft code of conduct or an amendment or extension to a code of conduct is in compliance with this Regulation;
or (cb) aims at approving the criteria for accreditation of a body pursuant to paragraph 3 of Article 38a or a certification body pursuant to (…) paragraph 3 of Article 39a;
(d) aims at determining standard data protection clauses referred to in point (c) of Article 42(2);
or (e) aims to authorising contractual clauses referred to in point (d) of Article 42(2);
or (f) aims at approving binding corporate rules within the meaning of Article 43.
3. The European Data Protection Board shall adopt a binding decision in the following cases:
a) Where, in a case referred to in paragraph 3 of Article 54a, a concerned supervisory authority has expressed a relevant and reasoned objection to a draft decision of the lead authority or the lead authority has rejected an objection as being not relevant and/or reasoned. The binding decision shall concern all the matters which are the subject of the relevant and reasoned objection, in particular whether there is an infringement of the Regulation;
b) Where, there are conflicting views on which of the concerned supervisory authorities is competent for the main establishment;
c) (…)
d) Where a competent supervisory authority does not request the opinion of the European Data Protection Board in the cases mentioned in paragraph 2 of this Article, or does not follow the opinion of the European Data Protection Board issued under Article 58. In that case, any concerned supervisory authority or the Commission may communicate the matter to the European Data Protection Board.
4. Any supervisory authority, the Chair of the European Data Protection Board or the Commission may request that any matter of general application or producing effects in more than one Member State be examined by the European Data Protection Board with a view to obtaining an opinion, in particular where a competent supervisory authority does not comply with the obligations for mutual assistance in accordance with Article 55 or for joint operations in accordance with Article 56.
5. Supervisory authorities and the Commission shall electronically communicate to the European Data Protection Board, using a standardised format any relevant information, including as the case may be a summary of the facts, the draft decision, the grounds which make the enactment of such measure necessary, and the views of other concerned supervisory authorities.
6. The chair of the European Data Protection Board shall without undue delay electronically inform the members of the European Data Protection Board and the Commission of any relevant information which has been communicated to it using a standardised format. The secretariat of the European Data Protection Board shall, where necessary, provide translations of relevant information.
|
Personal Data Protection Act
Article 36b. (New, SG No. 103/2005, in force as of the effective date of the Treaty of Accession of the Republic of Bulgaria to the European Union)
(1) Except for the cases referred to in Art. 36a, the provision of personal data to a third country is done upon approval by the Commission for Personal Data Protection provided that both the controller transferring the data and the controller receiving the data have provided adequate safeguards for the protection of such data.
(2) (Last Amendment, SG No. 91/2006) The Commission notifies the European Commission and the competent authorities of the other Member States on approvals issued under Para 1, as well as of any refusals to grant such approvals.
|