Regulation Supervision and Enforcement-key provisions

Question 1

Information about right of complaint-after exercise of rights

Answer 1

12(4) If controllers do not take action in response to the exercise of individuals’ rights, they shall inform those individuals that they can lodge complaints with the regulators and seek judicial remedies.

Question 2

Info about right of complaint-general transparency

Answer 2

13(2)(d) and 14(2)(e)
As part of the rules about transparency, controllers must inform individuals that they can lodge complaints with the regulators.

Question 3

Info about right of compliant-in response to subject access

Answer 3

15(1)(f) When replying to subject access requests, controllers must inform individuals that they can lodge complaints with the regulators.

Question 4

cooperation w/ regulators and individuals-by representatives

Answer 4

27(4) Representatives shall be mandated to deal with individuals and the regulators about compliance issues.

Question 5

Processors-supervision by controllers

Answer 5

28 Controllers are required to ensure compliance by their processors, through selection mechanisms, provision of instructions, contractual mechanisms and inspections.

Question 6

Record keeping-processing activities

Answer 6

30(4) Controllers, processors and their representatives shall make their records of data processing activities available to the regulators on request.

Question 7

cooperation with regulators

Answer 7

31 Controllers, processors and their representatives shall cooperate with regulators on request.

Question 8

Breach notification

Answer 8

33(1) and 34(1) Controllers shall inform regulators of personal data breaches and shall inform individuals if there are high risks to their rights and freedoms