On 14 March 2024, representatives of the National Supervisory Authority for Personal Data Processing have held a training course in the town of Ploiești in the field of personal data protection, for data protection officers designated at the level of subordinate structures of the Ministry of Internal Affairs.

The training course featured two modules “The rights of data subjects in the context of personal data processing” and “The organisation and functioning of the National Supervisory Authority for Personal Data Processing”.

The participants, from structures of the Ministry of Internal Affairs, such as Romanian Gendarmerie, the General Inspectorate of Border Police, General Inspectorate for Migration, Inspectorate for Emergency Situations, were presented general and specific aspects such as the rights of data subjects and the monitoring and control mandate of the National Supervisory Authority, considering Regulation (EU) 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and the provisions of Law no. 363/2018 on the protection of individuals with regard to the processing of personal data by competent authorities for the purposes of prevention, detection, investigation, investigation, prosecution and combating of criminal offences or the execution of criminal penalties, educational and security measures, as well as on the free movement of such data.

On this occasion, the debates also focused on practical aspects on the implementation of legislation on the protection of individuals with regard to the processing of personal data by competent authorities for the purposes of prevention, detection, investigation, investigation, prosecution and combating of criminal offences or the execution of criminal penalties, educational and security measures, as well as on the free movement of such data, along with specific aspects on Schengen acquis and its implementation.

The representatives of the Authority have highlighted that all data controllers have the obligation to correctly identify the legal bases for processing by reference to their activities, to carry out assessments following the training of employees on data processing, to carry out impact assessments when necessary, to provide full information to data subjects, according to the GDPR or Law no. 363/2018, depending on each specific situation arising at the level of the structures of the Ministry of Internal Affairs, as well as to establish specific confidentiality and security measures for the data processing carried out by each structure.

Legal and Communication Department

A.N.S.P.D.C.P.