The GDPR or General Data Protection Regulation creates a harmonised set of rules applicable to all personal data processing by organisations (public or private, regardless of their size)  established in the European Economic Area (EEA) or targeting individuals in the EU. The primary objective of GDPR is to ensure that personal data enjoys the same high standard of protection everywhere in the EEA, increasing legal certainty for both individuals and organisations processing data, and offering a high degree of protection for individuals.

The regulation entered into force on 24 May 2016 and applies since 25 May 2018.

European initiative on the designation and position of data protection officers

On 15 March, the European Data Protection Board (EDPB) has kicked off its 2023 coordinated enforcement action. Throughout the year, 26 Supervisory Authorities (SAs) across the EEA, including the Data Protection Authority Liechtenstein (DSS), will take part in this joint initiative on the designation and position of data protection officers (DPOs).

As intermediaries between SAs, individuals and organisations, DPOs have an essential role in contributing to compliance with data protection law and promoting effective protection of data subject rights. With this initiative the SAs aim to gauge whether DPOs have the position in their organisations required by Art. 37-39 GDPR and the resources needed to carry out their tasks. The DSS is participating in this European initiative by conducting a survey among all DPOs notified in Liechtenstein pursuant to Art. 37 (7) GDPR.

The results of the joint initiative will be analysed in a coordinated manner and the SAs will decide on possible further national measures and activities. In addition, results will be aggregated, generating deeper insight into the topic and allowing targeted follow-up at EU level. The EDPB will publish a report on the outcome of this analysis once the actions are concluded.

 

Further information:

The Commissioner’s Office participates in the EDPB’s coordinated action with regard to the role of Data protection Officers (DPOs)

Nicosia, on 15th March 2023, the European Data Protection Board (EDPB) launched its second coordinated action with regard to the appointment and the role of Data protection Officers (DPOs). The aim of this initiative is to collect information on practices followed in Member States and the evaluation of compliance with the General Data Protection Regulation.

In the frame of this initiative, the Office will forward a relevant questionnaire* prepared by the EDPB, to DPOs both in the public and the private sector. The replies will be evaluated and sent to the EDPB, for deciding the next steps, both at national and at European level.

 

Irene Loizidou Nicolaidou, Commissioner for Personal Data Protection

 

*Note: The questionnaire was sent through the European Commission’s EU Survey tool, from the address DIGIT-EUSURVEY@nomail.ec.europa.eu.