
欧洲议会和理事会条例(EU) 2016/679的勘误,关于保护自然人的个人数据处理和这些数据的自由移动,并废除指令95/46/EC (通用数据保护条例) (OJ L 119, 4.5.2016)
技术法规类型:欧盟Eurlex法规 来源:tbtmap
EURLEX ID:32016R0679R(02)
OJ编号:OJ L 127, 23.5.2018, p. 2–13
中文标题:欧洲议会和理事会条例(EU) 2016/679的勘误,关于保护自然人的个人数据处理和这些数据的自由移动,并废除指令95/46/EC (通用数据保护条例) (OJ L 119, 4.5.2016)
原文标题:Corrigendum to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016)
法规全文:查看欧盟官方文件
23.5.2018 |
EN |
Official Journal of the European Union |
L 127/2 |
Corrigendum to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
( Official Journal of the European Union L 119 of 4 May 2016 )
On page 14, recital 71, fifth and sixth sentences:
for:
‘(71) |
… Such measure should not concern a child. In order to ensure fair and transparent processing in respect of the data subject, taking into account the specific circumstances and context in which the personal data are processed, the controller should use appropriate mathematical or statistical procedures for the profiling, implement technical and organisational measures appropriate to ensure, in particular, that factors which result in inaccuracies in personal data are corrected and the risk of errors is minimised, secure personal data in a manner that takes account of the potential risks involved for the interests and rights of the data subject and that prevents, inter alia, discriminatory effects on natural persons on the basis of racial or ethnic origin, political opinion, religion or beliefs, trade union membership, genetic or health status or sexual orientation, or that result in measures having such an effect.’, |
read:
‘(71) |
… Such measure should not concern a child. In order to ensure fair and transparent processing in respect of the data subject, taking into account the specific circumstances and context in which the personal data are processed, the controller should use appropriate mathematical or statistical procedures for the profiling, implement technical and organisational measures appropriate to ensure, in particular, that factors which result in inaccuracies in personal data are corrected and the risk of errors is minimised, secure personal data in a manner that takes account of the potential risks involved for the interests and rights of the data subject, and prevent, inter alia, discriminatory effects on natural persons on the basis of racial or ethnic origin, political opinion, religion or beliefs, trade union membership, genetic or health status or sexual orientation, or processing that results in measures having such an effect.’. |
On page 55, point (c) of Article 37(1):
for:
‘(c) |
the core activities of the controller or the processor consist of processing on a large scale of special categories of data pursuant to Article 9 and personal data relating to criminal convictions and offences referred to in Article 10.’, |
read:
‘(c) |
the core activities of the controller or the processor consist of processing on a large scale of special categories of data pursuant to Article 9 or personal data relating to criminal convictions and offences referred to in Article 10.’. |
On page 58, Article 41(3):
for:
‘3. The competent supervisory authority shall submit the draft criteria for accreditation of a body as referred to in paragraph 1 of this Article to the Board pursuant to the consistency mechanism referred to in Article 63.’,
read:
‘3. The competent supervisory authority shall submit the draft requirements for accreditation of a body as referred to in paragraph 1 of this Article to the Board pursuant to the consistency mechanism referred to in Article 63.’.
On page 58, Article 41(5):
for:
‘5. The competent supervisory authority shall revoke the accreditation of a body as referred to in paragraph 1 if the conditions for accreditation are not, or are no longer, met or where actions taken by the body infringe this Regulation.’,
read:
‘5. The competent supervisory authority shall revoke the accreditation of a body as referred to in paragraph 1 if the requirements for accreditation are not, or are no longer, met or where actions taken by the body infringe this Regulation.’.
On page 59, Article 42(7):
for:
‘7. Certification shall be issued to a controller or processor for a maximum period of three years and may be renewed, under the same conditions, provided that the relevant requirements continue to be met. Certification shall be withdrawn, as applicable, by the certification bodies referred to in Article 43 or by the competent supervisory authority where the requirements for the certification are not or are no longer met.’,
read:
‘7. Certification shall be issued to a controller or processor for a maximum period of three years and may be renewed, under the same conditions, provided that the relevant criteria continue to be met. Certification shall be withdrawn, as applicable, by the certification bodies referred to in Article 43 or by the competent supervisory authority where the criteria for the certification are not or are no longer met.’.
On page 60, Article 43(3), first sentence:
for:
‘3. The accreditation of certification bodies as referred to in paragraphs 1 and 2 of this Article shall take place on the basis of criteria approved by the supervisory authority which is competent pursuant to Article 55 or 56 or by the Board pursuant to Article 63.’,
read:
‘3. The accreditation of certification bodies as referred to in paragraphs 1 and 2 of this Article shall take place on the basis of requirements approved by the supervisory authority which is competent pursuant to Article 55 or 56 or by the Board pursuant to Article 63.’.
On page 60, Article 43(6):
for:
‘6. The requirements referred to in paragraph 3 of this Article and the criteria referred to in Article 42(5) shall be made public by the supervisory authority in an easily accessible form. The supervisory authorities shall also transmit those requirements and criteria to the Board. The Board shall collate all certification mechanisms and data protection seals in a register and shall make them publicly available by any appropriate means.’,
read:
‘6. The requirements referred to in paragraph 3 of this Article and the criteria referred to in Article 42(5) shall be made public by the supervisory authority in an easily accessible form. The supervisory authorities shall also transmit those requirements and criteria to the Board.’.
On page 69, point (p) of Article 57(1):
for:
‘(p) |
draft and publish the criteria for accreditation of a body for monitoring codes of conduct pursuant to Article 41 and of a certification body pursuant to Article 43;’, |
read:
‘(p) |
draft and publish the requirements for accreditation of a body for monitoring codes of conduct pursuant to Article 41 and of a certification body pursuant to Article 43;’. |
On page 74, point (c) of Article 64(1):
for:
‘(c) |
aims to approve the criteria for accreditation of a body pursuant to Article 41(3) or a certification body pursuant to Article 43(3);’, |
read:
‘(c) |
aims to approve the requirements for accreditation of a body pursuant to Article 41(3), of a certification body pursuant to Article 43(3) or the criteria for certification referred to in Article 42(5);’. |
On page 74, Article 64(6), (7) and (8):
for:
‘6. The competent supervisory authority shall not adopt its draft decision referred to in paragraph 1 within the period referred to in paragraph 3.
7. The supervisory authority referred to in paragraph 1 shall take utmost account of the opinion of the Board and shall, within two weeks after receiving the opinion, communicate to the Chair of the Board by electronic means whether it will maintain or amend its draft decision and, if any, the amended draft decision, using a standardised format.
8. Where the supervisory authority concerned informs the Chair of the Board within the period referred to in paragraph 7 of this Article that it does not intend to follow the opinion of the Board, in whole or in part, providing the relevant grounds, Article 65(1) shall apply.’,
read:
‘6. The competent supervisory authority referred to in paragraph 1 shall not adopt its draft decision referred to in paragraph 1 within the period referred to in paragraph 3.
7. The competent supervisory authority referred to in paragraph 1 shall take utmost account of the opinion of the Board and shall, within two weeks after receiving the opinion, communicate to the Chair of the Board by electronic means whether it will maintain or amend its draft decision and, if any, the amended draft decision, using a standardised format.
8. Where the competent supervisory authority referred to in paragraph 1 informs the Chair of the Board within the period referred to in paragraph 7 of this Article that it does not intend to follow the opinion of the Board, in whole or in part, providing the relevant grounds, Article 65(1) shall apply.’.
On page 74, point (a) of Article 65(1):
for:
‘(a) |
where, in a case referred to in Article 60(4), a supervisory authority concerned has raised a relevant and reasoned objection to a draft decision of the lead authority or the lead authority has rejected such an objection as being not relevant or reasoned. …;’, |
read:
‘(a) |
where, in a case referred to in Article 60(4), a supervisory authority concerned has raised a relevant and reasoned objection to a draft decision of the lead supervisory authority and the lead supervisory authority has not followed the objection or has rejected such an objection as being not relevant or reasoned. …;’. |
On page 76, Article 69(2):
for:
‘2. Without prejudice to requests by the Commission referred to in point (b) of Article 70(1) and in Article 70(2), the Board shall, in the performance of its tasks or the exercise of its powers, neither seek nor take instructions from anybody.’,
read:
‘2. Without prejudice to requests by the Commission referred to in Article 70(1) and (2), the Board shall, in the performance of its tasks or the exercise of its powers, neither seek nor take instructions from anybody.’.
On page 77, point (l) of Article 70(1):
for:
‘(l) |
review the practical application of the guidelines, recommendations and best practices referred to in points (e) and (f);’, |
read:
‘(l) |
review the practical application of the guidelines, recommendations and best practices;’. |
On page 77, point (o) of Article 70(1):
for:
‘(o) |
carry out the accreditation of certification bodies and its periodic review pursuant to Article 43 and maintain a public register of accredited bodies pursuant to Article 43(6) and of the accredited controllers or processors established in third countries pursuant to Article 42(7);’, |
read:
‘(o) |
approve the criteria of certification pursuant to Article 42(5) and maintain a public register of certification mechanisms and data protection seals and marks pursuant to Article 42(8) and of the certified controllers or processors established in third countries pursuant to Article 42(7);’. |
On page 77, point (p) of Article 70(1):
for:
‘(p) |
specify the requirements referred to in Article 43(3) with a view to the accreditation of certification bodies under Article 42;’, |
read:
‘(p) |
approve the requirements referred to in Article 43(3) with a view to the accreditation of certification bodies referred to in Article 43;’. |
附件:
托管标准,您可以接收以下服务:
1 标准定期系统查新,若有最新版本,会以站内短信或邮件的形式通知用户;
2 随时在标准托管页面中查看到该条标准的最新状态;
3 若用户有在学习和科研中的需要,可以在标准托管页面中试阅标准;
4 企业如果需要上新产品,我院及时提供标准查询、采购等方面的支持;
5 为企业在标准制修订、企业良好行为创建以及标准化试点过程中遇到的困难,可联系我院指定相关专家负责进行指导帮助、提供政策咨询;
6 为企业提供标准化政策的解读、标准化知识的推广培训、标准自我公开声明、标准文献的免费查询、企业标准化体系建设等方面的标准化服务;
标准资讯点击排行榜 全部
资讯标题点击
[[ n.title ]] [[ n.read ]]大连标准化公共服务平台
版权:大连标准化研究院有限公司
地址:大连市中山区高原街56号
电话:0411-82740851
